The datastream from CyberPro can include (for example) logging every session/connection, or every file transfer event. Each event log contains query terms for extracting the associated PCAP data. In general, our system is designed for multiple methods to allow any third-party analytics software to filter packet traffic down to a volume which the software can handle without choking.