Корзун Дмитрий Жоржевич, Богоявленский Юрий Анатольевич

TCPconal, TCPconal language, prototype of TCPconal language, TCP connections

It is substantiated in the article necessity of formal language development for specification of TCP connections data processing. We introduce description of the first realized prototype of TCP-conal language. The prototype provides extracting of specified substreams from a total TCP connections stream. These substreams correspond to given combinations of hosts, group of hosts and subnets. Frequency analysis of hosts activity and TCP /IP application protocols usage is also supported. Besides, TCPconal provides flexible specification of reports on processing results. The prototype of the language is implemented using flex and bison tools. The implementation is a subsystem of TCP traffic analyzer TCPconal. An example of TCPconal program and examples of the reports are given as well.