ERF Extensible Record Format

Extensible Record Format (ERF)

The Extensible Record Format (ERF) is defined by Endace. It is produced and consumed by Endace DAG cards and Probes, and is supported by 3rd party commercial and Open Source software including Wireshark.

It provides an accurate record of Network History with rich Provenance™ metadata, high resolution time stamps, and in-band loss auditing.

The format is described in the documentation here.

For more information see the Endace Support Portal or contact