It's basically used for network monitoring. It lets you know what's happening on a network at all times. For example, it lets you know if there's an intrusion or anything like that. I know you typically have a firewall to deal with that, but sometimes you'll find certain solutions that show that there's plenty of activity happening on this port or this IP,