flow data

When we think about the world of Network Flow data, we usually think within Layers 3, 4, and 5. Typically IP addresses are as close to the endpoint as we get. Sometimes that is good enough, but more often some type of lookup or investigation must occur to figure out what that IP host is.