EndaceProbe Open Recording and Analytics Platform

Definitive, packet-level evidence at your fingertips.

Packet Capture and Analytics Hosting
in One Platform

Faced with the need to diagnose and fix security and performance issues on large-scale, high-speed networks, organizations need data sources that go beyond log files and metadata.

The EndaceProbe™ Analytics Platform provides full packet capture and recording, with zero packet loss, on network links from 10Mbps to 100Gbps, allowing organizations to capture, index and store a 100% accurate record of network activity.

EndaceProbes are the industry's only, truly, open packet capture platform, allowing both hosting of, and integration with, commercial, open-source and custom analytics applications.

Accelerate response times and reduce costs by hosting and integrating with analytics solutions from Cisco, Palo Alto Networks, Dynatrace, Splunk and Plixer, and custom or open-source tools such as SNORT, Bro IDS, Suricata, Argus or Nagios. Hosted applications can access live network traffic at line rate, or use Playback™ to analyze recorded Network History.

Find out more about the benefits of our Open Platform approach.

Learn more

Find Out How our Customers Commonly Deploy Endace Probes

The EndaceProbe Analytics Platform can solve a range of visibility problems and be deployed in a number of scenarios. See how you can deploy the EndaceProbe to redefine network visibility.

Deployment Scenarios

Endace Fusion

Endace's open platform approach to security and network analytics gives NetOps and SecOps teams the flexibility to deploy third party analytics and security software when and where it's needed. We call this Endace Fusion.

The Fusion Partner Program brings together solutions from leading security and performance analytics vendors who leverage the EndaceProbe's Application Dock hosting and workflow API to integrate Network History into their applications.

Learn more

EndaceProbe Key Features

Continuous, 100% accurate, line-rate recording of network traffic, any speed, any network.

Dedicated packet capture hardware ensures lossless capture with nanosecond accurate timestamping.

Playback Network History on-demand to hosted or external analytics tools for back-in-time analysis.

Built-in EndaceVision™ and EndacePackets™ investigation tools for fast, accurate issue investigation.

Provenance™ augments recorded Network History with rich contextual data.

APIs provide integration with commercial, open source and custom analytics applications for streamlined issue investigation.

Host third-party analytics applications and give them access to both real-time and recorded traffic for analysis.

Host and integrate with market-leading, cybersecurity and performance analytics tools from
Fusion Partners.

The EndaceProbe Family

EndaceProbes are available in a range of models to suit every deployment requirement.

EndaceProbe Models:

Models EP-114 EP-124 EP-404 EP-4000 Series EP-4100 Series EP-4100-TR EP-8100 Series EP-9000 Series
Dimensions 1 RU, short-depth 1 RU, short-depth 1 RU 1 RU 1 RU 1 RU 2 RU 4 RU
Port Count 4x 10/100/ 1000BASE-T or 1GE 4x 1/10GbE or 1x 40GbE 4x 10/100/ 1000BASE-T or 1GE Up to 8x 1/10GbE Up to 8x 1/10GbE or 2x 40GbE 4x 1/10GbE or 1x 40GbE Up to 8x 1/10GbE or 2x 40GbE Up to 8x 1/10GbE or 2x 40GbE
Local storage 3.8TB SSD 3.8TB SSD 8TB Up to 32TB Up to 15.3TB SSD 7.6TB SSD Up to 46TB SSD Up to 192TB
Sustained write-to-disk performance 0.5Gbps 1Gbps 0.5Gbps 3Gbps 15Gbps 15Gbps 40Gbps 20Gbps
Max concurrent flows 200K 200K 200K 500K 1 million 1 million 1 million 1 million
Max flows/sec 20K 20K 20K 50K 100K 100K 100K 100K
Max Application Dock instances 2 2 2 4 4 Not supported 4 4
Typical Deployment Remote locations, branch offices Remote locations, branch offices At network edge, branch offices Branch offices, WAN gateways On-demand recording in data centers, remote locations Purpose designed for Financial Trading networks Core network, data centers Core network, data centers
Compact yes yes yes yes yes yes
yes yes yes
Deep storage yes
Downloads Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet

NOTE: write-to-disk performance is influenced by the number of flows-per-second. Actual performance could be as much as 30% higher than the stated figure.