Network Telemetry Stack
Top = highest fidelity / narrowest coverage • Bottom = broadest coverage / cheapest. Hover a layer for detail.
Storage cost roughly tracks fidelity. Most teams keep PCAP only on-demand
and NetFlow always-on — cheap broad coverage at the bottom, expensive high-fidelity content at the top.