netvöktun

Netvöktun is the systematic observation and analysis of a computer network to ensure its performance, availability, and security. It encompasses monitoring of network devices (routers, switches, firewalls), links, and the applications and services that run over the network. The main goals are to detect faults promptly, understand traffic patterns, plan capacity, optimize routing, and support security and compliance.

Methods include passive and active approaches. Passive monitoring collects data without injecting traffic, using protocols such as SNMP, NetFlow/IPFIX, sFlow, and syslog, to measure latency, packet loss, throughput, and device health. Active monitoring performs checks by generating synthetic transactions or probing the network (pings, traceroutes) to verify reachability and performance. Packet capture (PCAP) analyses provide deep inspection. Data is analyzed through dashboards and alerting systems, with metrics like availability, latency, jitter, error rates, and utilisation of CPU/memory/disk on devices.

Common tools and practices: centralized monitoring platforms (e.g., Nagios, Zabbix, PRTG, Prometheus), traffic analyzers, configuration management, and integration with security information and event management (SIEM) for anomaly detection. Monitoring often includes redundancy and incident response workflows to reduce mean time to repair (MTTR).

Governance considerations include data retention, privacy and compliance, and securing monitoring data. Challenges include scaling to large and cloud-based networks, encrypted traffic hiding payloads, and minimizing false positives. Netvöktun supports operational reliability, capacity planning, and security posture.