Glossary: Security Monitoring and Automation

TCP (Transmission Control Protocol)

Also written: TCP, TCP 514

A transport protocol that confirms delivery, so a sender notices when the server is gone. syslog over TCP port 514 doesn't lose messages silently the way UDP does.

Where the book teaches it

Chapter 2: syslog and log aggregation
Chapter 5: Network data
Chapter 6: Packet capture and packet analyzers
Chapter 7: Agents and agentless collection

Related terms

UDP (User Datagram Protocol)TLS (Transport Layer Security)