+
Riverbed Technology (CACE Technologies) Gigabit packet capture NIC TurboCap
※2015年よりお伝えしておりますように、米国RiverbedInc.から案内があり、TurboCapシリーズついに終売となりました。これまでのご愛顧どうもありがとうございました。後継となる製品としては、弊Inc.では
ProfitapInc.のProfiSharkシリーズ
があります。どうかよろしくお願いいたします
→
ProfiSharkシリーズ
TurboCap
is a NIC for Windows/Linux that supports GigabitEthernet and can capture and send packets. It is a PCI Express connection adapter with two Gigabit ports, dedicated CPU, memory, and full capture and transmission without packet loss. Two Gigabit ports can be relayed like a tap for full-rate packet capture. You can also aggregate and capture packets from two ports. Since it is possible to completely capture packets even for large volumes of traffic on the backbone network, it is suitable for corporate traffic analysis, evidence preservation, attack detection, etc. It supports not only concentrated 64-byte frames like DoS, but also 9234-byte jumbo frames.
|
+
configuration画面
Control panel
Polling
Timer
Pass-through settings
and speed can be set
!
|
|
Since
+
APIcompatible
TurboCao supports WinPcap/Libpcap compatible API, it is also possible to create an application using this to acquire packets.
can also be called on the command line to create mass capture applications.
|
+
ノンサンプリングでフルキャプチャ!
Generally, when packet capture is performed using a flow analysis function such as xFlow or sFlow of a router or layer 3 switch, or a network statistics function, the traffic is inevitably analyzed by sampling (obtaining sample packets) at regular intervals, and there is a possibility that the real communication may be lost. Especially when sampling-based, it is not uncommon to lose track of small 64-byte packets (such as one-way DoS attacks and ARP). Also, if you perform packet capture using a general NIC, packet loss will occur at a speed of about 140 Mbps and the minimum frame length (64 bytes). (The CPU usage rate will also be close to 100%.)
On the other hand, if you use TurboCap to capture packets of Gigabit Ethernet traffic, you can stably capture full-rate packets without dropping any packets or increasing the CPU usage rate.
+
Two series development: TurboCap2 and TurboCap4
|
Main features
|
|
Gigabit Ethernet lossless capture
|
〇
|
|
Integration with Wireshark
|
〇
|
Full rate packet transmission (1Gbps)
|
〇
|
|
|
〇
|
Port aggregation function
|
Aggregation of 1 to 2 ports and
aggregation of all mounted boards
|
|
|
2 ports
|
|
|
PCI Express
4 lanes (×4)
|
Purchase with reference price
(割引します)
|
いけりりへ相談を
USD1995
¥199,500以下
Discount
|
|