466387bf_Policy_considerations_aracterization_Data_to_Collect_Data_Category
[Types of Data to Collect] Total traffic load in and out over time (packet, byte, and connection counts) and by event (such as new product or service release) Traffic load (percentage of packets, bytes, connections) in and out over time, sorted by protocol, source address, destination address, other packet header data Error counts on all network interfaces Other network data Service initiation requests Name of the user or host requesting the service Network traffic (packet headers) Successful connections and connection attempts (protocol, port, source, destination, time) Connection duration Connection flow (sequence of packets from initiation to termination) States associated with network interfaces (up, down) Network sockets currently open Whether a network interface card is in promiscuous mode Network probes and scans Results of administrator probes [Data Category] 
Network performance
N e t w o r k p e r f o r m a n c e
S y s t e m p e r f o r m a n c e
O t h e r s y s t e m d a t a
P r o c e s s p e r f o r m a n c e
O t h e r p r o c e s s d a t a
F i l e s a n d d i r e c t o r i e s
U s e r s
A p p l i c a t i o n s
L o g f i l e s
V u l n e r a b i l i t i e s
Policy considerations
Data Category