Students will use pfTop, a network traffic monitoring/statistics plugin used in pfSense, to analyze and monitor network traffic. They will walk through the steps of performing a detailed investigation to determine what type of traffic is occurring across the exercise network. Finally, with the use of use visualization tools they will be able to further analyze network traffic statistics and learn how visuals can quickly aide in the incident response process.