The speed of networks and their complexity continue to increase. And attacks on network infrastructure will also evolve in terms of complexity and stealth.
For optimal and secure IT service quality, IT security teams must therefore have permanent access to detailed analyses of data traffic. Network forensics provides this essential access and insight that security analysts need.
Our PacketFalcon products are powerful recorders for all types of network speeds, enabling IT organisations to analyse, monitor and accurately record traffic without compromise. The PacketFalcon Mini provides permanent 24 x 7 access to 1G, 10G and 25G networks for detailed analysis, including forensic analysis of past events.
PacketFalcon helps security teams analyse by recording data at key network points while minimising the traffic this data collection can generate. By indexing the data and providing simple and complex filters (Berkeley Packet Filter), PacketFalcon enables security teams to quickly investigate and thus stop attacks.
Linux is used as the operating system and a special network forensics software is used for analysis and evaluation. This makes it possible to analyse network traffic across locations via remote access and quickly find errors, which drastically reduces MTTR time.
With its robust and compact design, a choice of 8TB or 16TB disk storage and a 1G or 1G/10G/25G high performance Gigabit capture adapter, it is the ideal companion for the mobile network analysis and forensics specialist.
If you are in need of Network Forensics & Packet Capture Appliances for higher network speeds you should take a closer look at the following NEOX solutions:
⤴ PacketFalcon Portable, a portable solution for up to 100G
⤴ PacketFalcon Compact, a rackmountable and portable solution for up to 100G
⤴ PacketGrizzly, a modular & scalable solution for up to 100G
Highlights
- High-speed Smart FPGA capture card for 1G or 1G/10G/25G
- 4x SFP/SFP+/SFP28 or SFP/SFP+ ports
- Up to 25 Gbps lossless full Packet Capturing
- Hardware/FPGA based Deduplication
- Supports IEEE 1588v2 PTP
- Hardware/FPGA based nanosecond-accurate Timestamping
- 4GB or 8GB hardware buffer for absorbing and analysing microbursts
- Storage capacity from 8TB to 32TB
- Patented drill-down function
- Hardware/FPGA based Packet Slicing and Capture Filters
- PCAP and PCAPNG support
- Cascading of several PacketFalcon systems possible
- Simultaneous unlimited access via Web GUI
- Small, compact and portable
- Robust housing
- Front display
- Passively cooled CPU, very quiet
- External 330W power supply unit
- WLAN capturing optionally supported
- Development and quality assurance in Germany
Hardware Overview
- Robust aluminium/plastic housing
- Intel Xeon CPU
- Very quiet, external 330W power supply unit
- High-speed Smart FPGA capture card for 1G/10G/25G or 1G
- With SFP/SFP+/SFP28 or SFP/SFP+ ports
- SSD storage capacity 8TB – 32TB
- RAM 32GB – 128 GB
- Redundant power supply possible
- Dimensions (WxHxD): 10 x 30 x 25.5 cm
- Weight: ca. 6.1 kg
Pre-Installed Software and Hardware
The NEOXPacketFalcon Mini comes with a combination of leading software and hardware solutions and includes the following components, among others:
- Network Forensics Software
- Lossless capture and recording of 1G, 10G and 25G network traffic while ensuring full data integrity.
- Powerful data preparation tools that allow IT technicians to focus on specific time periods and types of traffic.
- Built-in analytics, including expert analysis and critical network metrics, such as top talkers and top logs, all of which help to accelerate the investigation of any attacks.
- Network data is hardware timestamped on arrival with nanosecond accuracy. GPS, PPS, PTP and other external time sources are supported.
- Capture Card: Napatech
The NEOXPacketFalcon Mini can be equipped with the following network measurement and capture cards (SmartNICs):- 4 port 1G/10G/25G (high performance) FPGA adapter (SFP/SFP+/SFP28)
- 4 port 1G (high performance) FPGA adapter (SFP/SFP+)
You can find out more about Napatech’s capture cards here: Our Napatech Webpage(s).
Highlights
|
Lossless recording up to 25Gbps |
|
High Speed FPGA Capture Card |
|
Storage up to 32 TB |
|
Portable, compact and robust |
|
Flexible due to SFP/SFP+/SFP28 |
|
FPGA based Nanosecond Timestamping |
|
FPGA based Packet Slicing & Capture Filter |
|
FPGA based Deduplication |
|
Lossless Full Packet Capturing |
|
PCAP & PCAPNG Support |
|
Cascading possible |
|
Developed & QA in Germany |
PacketFalcon Mini MODELS
ITEM NO. | CPU | RAM | SSD | PORTS |
---|---|---|---|---|
NX-LC-1G-32GB-8TB-M-* | Intel XEON | 32 GB | 8 TB | 4x 1G SFP/SFP+ |
NX-LC-1G-64GB-16TB-M-* | Intel XEON | 64 GB | 16 TB | 4x 1G SFP/SFP+ |
NX-LC-1G-128GB-16TB-M-* | Intel XEON | 128 GB | 16 TB | 4x 1G SFP/SFP+ |
NX-LC-1G-64GB-32TB-M-* | Intel XEON | 64 GB | 32 TB | 4x 1G SFP/SFP+ |
NX-LC-1G-128GB-32TB-M-* | Intel XEON | 128 GB | 32 TB | 4x 1G SFP/SFP+ |
NX-LC-25G-32GB-8TB-M-* | Intel XEON | 32 GB | 8 TB | 4x 1G/10G/25G SFP/SFP+/SFP28 |
NX-LC-25G-64GB-16TB-M-* | Intel XEON | 64 GB | 16 TB | 4x 1G/10G/25G SFP/SFP+/SFP28 |
NX-LC-25G-128GB-16TB-M-* | Intel XEON | 128 GB | 16 TB | 4x 1G/10G/25G SFP/SFP+/SFP28 |
NX-LC-25G-64GB-32TB-M-* | Intel XEON | 64 GB | 32 TB | 4x 1G/10G/25G SFP/SFP+/SFP28 |
NX-LC-25G-128GB-32TB-M-* | Intel XEON | 128 GB | 32 TB | 4x 1G/10G/25G SFP/SFP+/SFP28 |
* “3Y” for 3 years – or “5Y” for 5 years software subscription and hardware support
PacketFalcon Mini ACCESSORIES
ITEM NO. | DESCRIPTION |
---|---|
NX-LW-RAIL-M | DIN Rail adapter for mounting bracket |