Network Security
Cảm biến thu thập luồng
A network device or software agent that passively gathers, aggregates, and forwards network flow records (such as NetFlow, IPFIX, or sFlow) for traffic analysis, anomaly detection, or forensic investigation. See NIST SP 800-137 and IETF RFC 3954.
Quick answer: A network device or software agent that passively gathers, aggregates, and forwards network flow records (such as NetFlow, IPFIX, or sFlow) for traffic analysis, anomaly detection, or forensic investigation. See NIST SP 800-137 and IETF RFC 3954.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Quick answer
A network device or software agent that passively gathers, aggregates, and forwards network flow records (such as NetFlow, IPFIX, or sFlow) for traffic analysis, anomaly detection, or forensic investigation. See NIST SP 800-137 and IETF RFC 3954.
Why it matters
Cảm biến thu thập luồng matters because it supports clear communication in Network Security contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.
Editorial context
This page is rendered as static HTML from source-backed terminology data so search engines and AI systems can parse the content without client-side code.
Definition
A network device or software agent that passively gathers, aggregates, and forwards network flow records (such as NetFlow, IPFIX, or sFlow) for traffic analysis, anomaly detection, or forensic investigation. See NIST SP 800-137 and IETF RFC 3954.
Operational example
Deploy a flow collector sensor on the core switch to aggregate NetFlow records from all VLANs for monitoring east-west and north-south traffic.
Localized term
Cảm biến thu thập luồng
Localized example
Triển khai cảm biến thu thập luồng trên core switch để tổng hợp bản ghi NetFlow từ tất cả các VLAN nhằm giám sát lưu lượng đông-tây và bắc-nam.
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
