Glossary: Security Monitoring and Automation

packet capture

Also written: capture, captures, full packets

A recording of whole packets, headers and contents, saved in a pcap file. It is the most detailed source but costs a lot of storage, holds private data, and can't see inside encrypted traffic.