Continuing our series on layered defense, we are going to take a look at full packet capture. Full packet capture (FPC) is still fairly misunderstood in the IT community. For many, FPC is synonymous with NetFlow, or simply source/destination and metadata information on packets. Others think of it as a beast that is used in conjunction with Wireshark to show a ton of indecipherable data. On the contrary, FPC is one of the most powerful practices that we can employ to give us a full, deep understanding of everything that is coming and going on a network, with the ability to…
Read More