TurboCap2 Riverbed CACE Technologies, USA GigabitEthernet compatible packet capture dedicated NIC TurboCap

This page keeps all original information and links. Japanese page

Full rate non-sampling Gigabit capture NIC → TurboCap2 TurboCap4

Riverbed Technology (CACE Technologies) Gigabit packet capture NIC TurboCap
TurboCap

※2015年よりお伝えしておりますように、米国RiverbedInc.から案内があり、TurboCapシリーズついに終売となりました。これまでのご愛顧どうもありがとうございました。後継となる製品としては、弊Inc.では ProfitapInc.のProfiSharkシリーズ があります。どうかよろしくお願いいたします ProfiSharkシリーズ

TurboCap is a NIC for Windows/Linux that supports GigabitEthernet and can capture and send packets. It is a PCI Express connection adapter with two Gigabit ports, dedicated CPU, memory, and full capture and transmission without packet loss. Two Gigabit ports can be relayed like a tap for full-rate packet capture. You can also aggregate and capture packets from two ports. Since it is possible to completely capture packets even for large volumes of traffic on the backbone network, it is suitable for corporate traffic analysis, evidence preservation, attack detection, etc. It supports not only concentrated 64-byte frames like DoS, but also 9234-byte jumbo frames.

TurboCap-Control

configuration画面
Control panel
Polling
Timer
Pass-through settings
and speed can be set
!

Command Since APIcompatible
TurboCao supports WinPcap/Libpcap compatible API, it is also possible to create an application using this to acquire packets.
can also be called on the command line to create mass capture applications.

ノンサンプリングでフルキャプチャ!
Generally, when packet capture is performed using a flow analysis function such as xFlow or sFlow of a router or layer 3 switch, or a network statistics function, the traffic is inevitably analyzed by sampling (obtaining sample packets) at regular intervals, and there is a possibility that the real communication may be lost. Especially when sampling-based, it is not uncommon to lose track of small 64-byte packets (such as one-way DoS attacks and ARP). Also, if you perform packet capture using a general NIC, packet loss will occur at a speed of about 140 Mbps and the minimum frame length (64 bytes). (The CPU usage rate will also be close to 100%.)
On the other hand, if you use TurboCap to capture packets of Gigabit Ethernet traffic, you can stably capture full-rate packets without dropping any packets or increasing the CPU usage rate.

Two series development: TurboCap2 and TurboCap4

Main features Turbocap

Gigabit Ethernet lossless capture

Integration with Wireshark

Full rate packet transmission (1Gbps)

Open API for development

Port aggregation function

Aggregation of 1 to 2 ports and
aggregation of all mounted boards

Number of Ports

2 ports

Host Interface

PCI Express
4 lanes (×4)

Purchase with reference price (割引します)

いけりりへ相談を
USD1995
¥199,500以下 Discount