The Telesoft FlowProbe provides detailed un-sampled traffic statistics in the form of flow records from large scale networks up to 4 x 100GbE per high-performance 1U appliance.
The Telesoft FlowProbe provides detailed un-sampled traffic statistics in the form of flow records from large scale networks up to 4 x 100GbE per high-performance 1U appliance. Un-sampled flow-based network monitoring gives analysts detailed and accurate information about each and every communication session, including the endpoint identities, the session start and end times and the volume of traffic transmitted. TCP session timing information allows the detection of anomalies and classification of traffic. This gives complete traffic visibility for analysis, Network Performance Monitoring and Diagnostics (NPMD) and compliance.
In addition, the Telesoft FlowProbe can identify Layer 7 protocols, and extract key security information into NetFlow/IPFIX records:
- HTTP flows are detected on any port and the host, URI, method and status fields which are extracted and included in the flow record.
- SSL flows have the server name extracted and included in the flow record.
- DNS flows are detected, and the CNAME and host addresses added to the flow record.
- BGP correlation of IP address to AS is added to the flow record.
Take a guided tour around the FlowProbe's GUI
The Probe does not affect the monitored traffic and typically connects to monitoring infrastructures such as packet brokers or taps. Flow records are exported for analysis and storage to the scalable Telesoft Data Analytics Capability (TDAC) collection, retention, and analysis application or to another IPFIX/NetFlow compatible collector.
Automatic detection of tunneled traffic (GRE,GTP, MPLS, IPinIP) and de-tunneling gives visibility of encapsulated traffic found on national ISP and telco carrier networks, making the ultra-high rate multi-100GbE FlowProbe ideal for large scale national network deployments, peering links or data centre backbone. When de-tunneling is selected, the FlowProbe will create flow records for the individual flows within a tunnel (including all the layer 7 details), and also identify the outer tunnel that is carrying it giving another layer of visibility and protection.