Glossary: Security Monitoring and Automation

UDP (User Datagram Protocol)

Also written: UDP, UDP 514

A transport protocol that sends without confirming delivery. syslog over UDP 514 can lose messages silently and is easy to fake; SNMP and flow export also use UDP.

Where the book teaches it

Chapter 2: syslog and log aggregation
Chapter 5: Network data

Related terms

TCP (Transmission Control Protocol)TLS (Transport Layer Security)syslog