You are a cybersecurity analyst tasked with investigating a security incident.

You need to analyze network traffic data that normally goes to Syslog or SNMP$,$ and you also need a tool that can address the need for a standardized protocol for internal protocol flows. Additionally, you need to collect data from routers, servers, and other network appliances.

Which tool would be BEST for you to use?

answer

IPfix

NetFlow

sFlow

Web metadata