From CENSTACS: Identifies IP hosts potentially scanning a network (commonly used to detect PCs infected with a virus, trojan or worm scanning networks for PCs or servers to infect). Identifies IP hosts engaging in excessive usage of network resources (Internet Web surfing, media streaming, P2P activity, VOIP activity). Identifies IP Hosts visiting Foreign Country Internet resources (commonly used to alert support staff to potential spyware issues). Identifies users logged into Windows based OS PCs and servers associated with the activity (requires integrated authentication environment). Aids in identifying, documenting and tracking general network usage of internal and/or external service and support applications.
read more +