What is NetState? NetState is a distributed network monitoring system. It uses passive sensors to develop status information on a target network. Two major features provided by NetState are version and port tracking.     - Version tracking maintains information about software and operating systems versions.           - Port tracking identifies information about active TCP and UDP ports.     Multiple NetState sniffers can be deployed, one at each entry point of the target network. The sniffers monitor network traffic, then send the information to the NetState server. The information is stored in a centralized database which can then be accessed via standard SQL database queries or a web-based GUI, for further analysis and display.     - Paper first published in Proceedings of USENIX '05: FREENIX Track.         - Slides     For more information contact netstate-info@sandia.gov     Copyright(c) 2005 Sandia Corporation