Featured Posts

An alert touches multiple segments of the network, representing the challenge to reduce false positives
Deep Network Observability

How to Reduce False Positives with Shared Context

False positives are rarely caused by too many alerts, but by missing context. Let’s say a spike in outbound traffic shows up in the firewall logs. Around the same time, ...

Read More
Magnifying glass on top of a diagram that looks like both a fingerprint and a network, representing end-to-end network troubleshooting
Network Operations

Why Most Performance Investigations Start in the Wrong Place

A padlock silhouetted against a dark background, surrounded by a spray of white particles, representing password spraying detection.
Security Operations

What Password Spraying Looks Like in Raw Network Telemetry

All Posts

Data stream abstract concept
Network Operations

Why We Hate Direct Exporter-Collector Configurations

Odds are you have a lot of devices on your network that export data somewhere—whether that’s to a traffic

Read More
Configuration

Arista Networks

Model(s): DCS-7280R, DCS-7280R2, DCS-7280E, DCS-7500R, DCS-7500R2, DCS-7500E, DCS-7050X, DCS-7060X, DCS-7250X, DCS-7260X, and DCS-7300X, DCS-7280R3, DCS-7280SR2A-48YC6, DCS-7280CR2-60, DCS-7280CR2A-60, DCS-7280CR2K-60, DCS-7280CR2-30,

Read More
ryans
Configuration

NetFlow configuration: back to basics

As a conversation is observed by a NetFlow-capable device, metadata about that conversation such as source and destination addresses,

Read More
joanna
Configuration

How to Configure Cisco AnyConnect to Send Flow Data

Most companies have a VPN set up to allow users remote access to the company network, but that leaves

Read More
traci
Configuration

Scrutinizer Installation Guide

I’ve recently had a couple of people reach out to me about the deployment process of our Scrutinizer Virtual

Read More
Flexible NetFlow

How to Configure Cisco 6500 Sup2T NetFlow

In this blog I will be discussing how to configure Cisco 6500 Sup2T NetFlow. The Cisco 6500 Supervisor Engine

Read More
Configuration

ArubaOS 8.x Mobility

Manufacturer: Aruba Model(s): All supported ArubaOS Mobility Controllers Version(s): ArubaOS 8.0.1.0 and later URL: https://www.arubanetworks.com/techdocs/ArubaOS_80_Web_Help/Content/ArubaFrameStyles/Mobility/IPFIX.htm Notes: Before enabling IPFIX,

Read More
Configuration

ArubaOS CX Series

Manufacturer: Aruba Model(s): AOS-CX 4100i, 6000, 6100, 6200, 6300, 6400, 8320, 8325, 8360, 8400 series switches Version(s): AOS-CX 10.08.0001

Read More
Configuration

ArubaOS Switch

Manufacturer: Aruba Model(s): ArubaOS-Switch 2530 (YA/YB), 2540 (YC), 2930F (WC), 2930M (WC), 3810M (KB), 5400R (KB) URL: https://www.arubanetworks.com/techdocs/AOS-Switch/16.10/Aruba%202540%20Management%20and%20Configuration%20Guide%20for%20ArubaOS-Switch%2016.10.pdf Notes:

Read More
Configuration

Barracuda CloudGen Firewall

Manufacturer:   Barracuda Model(s):  Barracuda CloudGen Firewall Version(s):  v8.3 URL:  https://campus.barracuda.com/product/cloudgenfirewall/doc/96026570/how-to-configure-ipfix Configuration steps (CLI) Go to CONFIGURATION > Configuration

Read More