4

I don't think it is a standardized term in the industry and hence different people have different interpretation. When folks in Ethernet Switch world refer to packet slicing, what do they really mean? Deep Packet Inspection?

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 8 '17 at 18:05
5

In the context of packet capture, or sniffing, packet slicing means saving only a portion of the captured packet. Rather than saving the entire captured packet, usually just the header is saved. This reduces the amount of storage and processing needed to inspect packets.

For forensic analysis, it is helpful to have the entire packet (for example, to see what the payload is). Some organizations capture every packet that leaves or enters their network. In this way, they can analyze a network attack and see exactly what happened. Of course, this takes a lot more storage space.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.