466387bf_Policy_considerations_aracterization_Data_to_Collect_Data_Category
[Types of Data to Collect] Application-specific and services-specific information such as network traffic (packet content), mail logs, FTP logs, web server Logs: Modem logs, firewall logs, SNMP logs, DNS logs, intrusion-detection system logs, database management system logs Services-specific information could include FTP requests (files transferred and connection statistics); web requests (pages accessed, credentials of the requestor, connection statistics, user requests over time, which pages are most requested, and who is requesting them); mail requests (sender, receiver, size, and tracing information; for a mail server, number of messages over time, number of queued messages); DNS requests (questions, answers, zone transfers); for a filesystem server, file transfers over time; for a database server, transactions over time [Data Category] 
Applications
N e t w o r k p e r f o r m a n c e
S y s t e m p e r f o r m a n c e
O t h e r s y s t e m d a t a
P r o c e s s p e r f o r m a n c e
O t h e r p r o c e s s d a t a
F i l e s a n d d i r e c t o r i e s
U s e r s
A p p l i c a t i o n s
L o g f i l e s
V u l n e r a b i l i t i e s
Policy considerations
Data Category