The Realeyes Collector plugin inputs either live or captured network traffic using the Open Source libpcap library. It stores the timestamp and network data in a single buffer, determines the IP type, and puts the data on the queue for the Stream Handler plugin. The library is designed to allow for multiple collectors to provide input to the Stream Handler. This is optional and requires extra coding in the Stream Handler to determine how to handle the overlapping data. It also requires extra hardware resources. |