Detekce anomálií v ICMP provozu

The point of this bachelor thesis is to describe the anomalies and ICMP exploits, and to propose the actions for detecting them and verify these actions in practice. The theoretical part of this thesis describes the basic protocols and their position in the reference model TCP/IP and ISO OSI, their headers and properties. It mentions briefly the principle of filtering NetFlow data using nfdump. The practical part describes chosen anomalies and ICMP exploits and by which means they occur. Further I focus on their impact on the network traffic and their detection possibilities using NetFlow technology. The results of this thesis are nfdump filters to detect these anomalies.