
658 CHAPTER 21. COMPUTER SECURITY
Figure 21.3 Traffic monitoring with Etherape (thumbnail of image from [Tol]). The size
of the nodes and the thickness of the edges are proportional to the traffic volume. The color
of an edge denotes the prevalent protocol of the associated traffic.
RUMINT [Con07] system (named after RUMor INTelligence) is a free tool for network
and security visualization (Figure 21.4). It takes captured traffic as input and visualizes it
in various unconventional ways. The most interesting visualization related to graph drawing
is a parallel plot that allows one to see at a glance how multiple packet fields are related.
An animation feature ...