Nice write up signifying the importance of netflow and pcap.