Glossary: Security Monitoring and Automation
nfcapd
The flow collector used in the lab. On siem, it receives flow records on UDP 2055 and writes them to files in /tmp/kc/flows, starting a new file every 60 seconds.
Glossary: Security Monitoring and Automation
The flow collector used in the lab. On siem, it receives flow records on UDP 2055 and writes them to files in /tmp/kc/flows, starting a new file every 60 seconds.