analyzing output from network security monitoring tools