Network forensics is a sub-branch of relating to the monitoring and analysis of traffic for the purposes of information gathering, legal evidence, or . Unlike other areas of digital forensics, network investigations deal with volatile and dynamic information. Network traffic is transmitted and then lost, so network forensics is often a pro-active investigation
