SNA Integration with Network Forensic software

[Rahul Juneja]

Hi Team, 

Is there any APIs available for Integration of SNA with third party Network Forensic Software to start selective Packet capture based on some event or some anomaly detected. 

[bigevilbeard]

You could look at pxGrid (Platform Exchange Grid) this provides APIs for integrating security solutions. Third party solutions like Zeek too. 

Many network forensics platforms like Wireshark, NetworkMiner, and others provide REST APIs that you can use for remote triggering of packet captures or filtering based on specific events or even integration with security analytics platforms etc…