EtherSensor Agent

<< Click to Display Table of Contents >>

Navigation:  Sensor Settings >

EtherSensor Agent

EtherSensor Agent is a Windows service installed on workstations. EtherSensor Agent does two things:

The Agent sends details of the process that creates external TCP connections to the Microolap EtherSensor server (over the UDP protocol). This can be used to map TCP sessions to specific workstations when users work in terminal sessions, are located behind a NAT, or in other, similar situations.

The Agent sends to the EtherStat server (over the TCP protocol) to the port and address specified in the configuration information on the events on the workstation. Data that cannot be sent at the moment (no connection, etc.) are accumulated in a local database. As soon as the Agent detects that the information can be transmitted, it splits the data into 64Kb packets and sends them to the server.