64
Copyright © 1990-2011 Norman ASA
Norman Network Protection
Administrator Guide
Appendix B: Using the Network Protection console | Understanding the screen output
Appendix B: Using the
Network Protection console
Even though Norman Network Protection is a Linux-based application, all configuration and adminis-
tration can be done from the web-based administration interface. If you’re more familiar with the Linux
command shell, you can also use this to configure most of the application.
If you prefer the command line interface, you can also use the Network Protection console.
However, there are some tasks that are not supported in the command line interface.
Note
A good understanding of running programs from the command line and managing networks is required
to use Network Protection from a command console.
Understanding the screen output
Network Protection displays information in a standard format.
Example:
[time] [type] [src module]:[src session] [dest module]:[dest session] [mes-
sage]
src module
Refers to the Network Protection module that generated the message. The following table lists the
Network Protection modules used:
Src module Description
CFG
GUI notification of configuration changes.
CLUSTER
Messages from all cluster modules.
CNT
The statistics module.
CONFIG
Configuration database.
DCC
The DCC protocol filter.
DSO
Protocol module loader.
ECB
The engine callback. Files are buffered here for scanning.
FTP
The FTP protocol filter.
GH
The generic hash generator. Addresses are stored as entries in a hash table to
facilitate efficient building of streams from received packets.
HASH
The hash generator for routing the MAC addresses.
HTTP
The HTTP protocol filter.
IRC
The IRC protocol filter.
MACH
Windows machines module.
NAL
Internal framework module.
NNET
Network adapter module.
NUM
Norman Update Manager.
PH
Packet handler module.
PIPCOM
Commuication between the GUI and the NNP console.
POP3
The POP3 protocol filter.
PMEM
Packet memory pool.
PROT
Protocol handler.
RPC
The RPC protocol filter.
