slyfox117

I work for a company, ExtraHop Networks, that is starting to see some use in cases like this. We do passive packet analysis from L2 to L7. Things like network traversal, odd tunnelling behaviors (DNS, reverse SSH, etc), even nmap scans can be investigated with our platform. ExtraHop doesn't position itself as security company, but is focused on application and network visibility using the communication itself, and security starts with visibility after all.

While a fair assessment, Google is a cloud provider to its internal teams anyways. While there is some overhead to providing it to customers, it's probably less than the overhead of Google Reader or Google Wave because much of the work is already necessary.