Signature Based File Categories; Keywords; Special Settings In Net Traffic To File Mode - Logicube Falcon-NEO User Manual

4.3.9 Special Settings in Net Traffic to File mode

There are two special settings available when selecting the Net Traffic to File
mode:
•
•
Logicube Falcon -Neo User's Manual
®
Number of Segments – Allows the user to select how many segment
files to create. For example, if the Segment Size is set to 4 GB and the
Number of Segments is set to 2, two segment files will be created. The
options available are: 2, 4, 8, 16, or Whole Disk.
Segment Ring Buffer – This setting determines what the Falcon-NEO will
do when it reaches the total number of segments.
ON – When this is set to ON, the Falcon-NEO will continuously
▪
capture network traffic until the task is aborted. For example, if
the Number of Segments is set to 2 and the Segment Ring
Buffer is set to ON, after the 2

4.3.8.3.2 Signature Based File Categories

Allows the user to set signature based file
categories. This is the second level of filtering
and will narrow down the results of the first filter
to only the selected file categories, if selected.

4.3.8.3.3 Keywords

Allows the user to set specific keywords. The
Falcon-NEO will search specific keywords within
the results of the first two filters.
nd segment is finished, it will delete
IMAGING
46