Networking

NetFlow

NetFlow is a network protocol, originally from Cisco, in which routers and switches export summary records of traffic flows (addresses, ports, byte counts, times) to a collector for monitoring and investigation.

Deep dive

Learn Article

How to Detect Firewall Logging Gaps That Hide an Intrusion

How to detect firewall logging gaps: baseline each device, alert on silence per log type, and cross-check against flow data, SNMP and auth server logs.

intermediate 4 min read

Back to glossary