Guys, can anyone give me a real wordl example of the usefulness of DPI? An engineer enabled it across the board on our agents but the info it provides to my eye is pretty useless. It seems to tell you things like 'traffic to Active Directory is slow' but so what! No detail on what process, what type of packet etc. Seems useless. I used Splunk stream and its free and much more powerful. Maybe I'm missing something?