ExtraHop named a Leader in the 2025 Forrester Wave™: Network Analysis And Visibility Solutions

Search
  • Platformchevron right
  • Solutionschevron right
  • Modern NDRchevron right
  • Resourceschevron right
  • Companychevron right

DETECTION OVERVIEW

Overwhelmed LDAP Data Transfer

Category

Authorization & Access Control
Next in Authorization & Access Control: Poor AAA Performance

Description

An application had an excessive number of Zero Windows as devices sent either LDAP requests or reponses. This detection indicates that servers became resource-constrained during data transfer and could not accept any more data.

MITRE ATT&CK ID

Associated content

Announcing The Forrester Wave™: Network Analysis And Visibility Solutions, Q4 2025

Network analysis and visibility solutions remain underrepresented in enterprises. Find out why in this preview of a new Wave report.

Report

ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response — ExtraHop

ExtraHop® Named a Leader in First-Ever Gartner® Magic Quadrant™ for Network Detection and Response

News

Detections

Visit this resource for more information.

Docs

TCP Traffic Analysis: The Network Meets the Application part 2 — ExtraHop

Learn how you can analyze and visualize TCP metrics (such as Zero Windows, aborts and throttling) to gain full visibility of your applications. This is the second part of a two part series.

Blog
Periodic Table of Use Cases

What else can RevealX do for you?