Drag and drop the technology on the left onto the data type the technology provides on the right.
Select and Place:

stateful firewall tcpdump Snort Cisco Umbrella

session data stateful firewall full packet capture tcpdump transaction data Snort connection event Cisco Umbrella