System and method of spoof detection

摘要: Managing a network environment to identify spoofed packets is disclosed. A method includes analyzing, via first capture agent, processed by in associated with host, and second the host. The collecting data at collector generating topological map of history activity environment. extracting from packet comparing extracted stored database. When comparison indicates that does not match (i.e., reported source an expected for packet), determining packet.