System Forensics, Investigation, and Response, 3rd Edition

Router Forensics

Using network forensics, you can determine the type of attack over a network. You can also, in some cases, trace the path back to the attacker. A router is a hardware or software device that forwards data packets across a network to a destination network. The destination network could be multiple networks away. A router may contain read-only memory with power-on self test code, flash memory containing the router’s operating system, nonvolatile random access memory (RAM) containing configuration information, and volatile RAM containing the routing tables and log information.

Router Basics

The basic networking hardware devices are as follows:

• Network card

• Hub

• Switch

• Router

A network interface card (NIC) is an expansion ...