(c) 2008-2012 by

Cisco Incident Response - CIR

This is free software provided by Recurity Labs GmbH for analyzing Cisco® IOS® core dumps.

Introduction

CIR allows network engineers and digital forensics experts to analyse memory dumps (so-called core dumps) from Cisco® IOS® devices in great detail, simply by providing the core dump file(s). CIR identifies compromised routers, exploitation attempts and backdoors as well as process and memory anomalies.

CIR 1.1 GPLv3 Release

• CIR 1.1 Source Code
• CIR 1.1 Binary Release

More Information

• To learn more about CIR and the currently supported platforms, visit the Introduction to CIR
• Learn how to configure Cisco IOS devices for using CIR.
• Get an overview of the CIR features.
• The CIR IOS Wiki was unfortunately destroyed by SPAM bots. You cannot run an open sharing platform on the Internet anymore.

Legal

cir.recurity-labs.com - CIR is a product of Recurity Labs GmbH.
Recurity® is a trademark of Recurity Labs GmbH. Cisco® and IOS® are trademarks of Cisco Systems.