Featured Posts

Multiple data streams flow independently, but together form one fabric, representing packet replication
Network Operations

When One Packet Stream Needs to Feed Five Tools

In most environments today, one packet stream rarely serves a single purpose. Let’s say a SPAN or ERSPAN session mirrors traffic from a core switch. That same stream may ...

Read More
Radar scans a digital network, representing flow-based threat hunting
Security Operations

How Flow Data Supports Threat Hunting Without Drowning Analysts

A magnifying glass uncovers an alert midway along a progress bar, representing network baselining and troubleshooting
Deep Network Observability

Proving Nothing Changed: The Most Overlooked Troubleshooting Skill

All Posts

Security Operations

Detecting P2P Botnets with NetFlow (Part #1)

This is part #1 of a two part series on detecting P2P botnets with NetFlow. For years botnets such

Read More