High-Speed Packet Capture Software for Linux
The foundation of monitoring and security tools
Packet capture is the first step of every monitoring and security tool.
PF_RING accelerates capture and transmission on any adapter, and above 100 Gbit with zero-copy drivers. It integrates with tools such as Suricata and Zeek.
Our products
Capture products
PF_RING
Packet capture framework with filtering and load balancing.
PF_RING ZC
Zero-copy packet processing for 100+ Gbit line rate, including inter-process and inter-VM delivery.
PF_RING FT
Flow table library with nDPI classification for flow-based applications.
nTap
Virtual software tap to capture traffic remotely on physical, virtual and cloud systems.
Which packet capture tool do I need?
PF_RING accelerates packet capture on any adapter, and its Zero Copy (ZC) drivers deliver packets straight from the NIC to the application for 10, 40 and 100 Gbit links. PF_RING FT adds flow table processing, and nTap captures traffic on remote hosts and virtual machines. Choose PF_RING when you need loss-free capture on commodity hardware.
Get started
Not sure which one to choose?
Download the free Community edition, compare editions and buy in the shop, or talk to the ntop team about your requirements.
