nBox Recorder
A Turn-Key 100 Gbit Continuous Packet Recorder
line rate capture
standard format
appliance
The recommendation
Who should choose nBox Recorder
nBox Recorder is a turn-key continuous packet recorder in a 1U appliance, based on n2disk. Choose it when you need loss-less capture up to 100 Gbit with nanosecond precision and do not want to size and build the recorder yourself.
- You need full packets stored, indexed and retrieved by time and BPF filter.
- You want standard PCAP output usable with third-party tools.
- You want conditional dump based on traffic and time of day.
The ideal use case
Ideal use case for nBox Recorder
- Environment: 19 inch racks. R10 (2 x 10 Gbit), R40 (2 x 40 Gbit with FPGA), R100 (100 Gbit with FPGA), 8 disks each.
- Team: network security and forensics teams managing it through the web interface.
- Technical requirements: up to 24 disks in 2U, or modular systems for longer retention.
- Problem solved: replay and analyze past traffic on a physical interface or with ntopng and nProbe.
The alternatives
nBox Recorder alternatives, compared
Same criteria for each option: role, when to choose it, limits and cost.
n2disk software
- Role: Same recorder on your own hardware.
- Choose it when: You already have servers and storage.
- Limits: You size disks, NICs and CPU.
- Cost: from 299.95 euro
nBox NetFlow
- Role: Flows only.
- Choose it when: Flow records are enough.
- Limits: No packet payloads.
- Cost: Get a quote
The tradeoffs
When nBox Recorder is not the right choice
- Retention depends on disk capacity and traffic rate.
- Price is by quote.
- Choose the model by link speed: 10, 40 or 100 Gbit.
The proof
Specifications, versions, pricing and documentation
Features, supported platforms and protocols, editions with prices, documentation links and answers to common questions follow below.
Open Source Technologies
nBox relies on Open Source high-performance technologies for capturing and processing traffic, including our PF_RING framework, delivering Line-Rate packet capture up to 100 Gbit/s. nBox Recorder uses the industry standard PCAP file format to dump packets into files, so the resulting output can be easily integrated with existing third party and Open Source analysis tools like ntopng, Wireshark or Snort.
100% Visibility, Nanosecond Precision
nBox provides 100% visibility with sustained Line-Rate loss-less packet capture, which is a requirement in network security. Loss-less packet capture up to 100 Gbit, combined with nanosecond accuracy, delivers the best visibility in any condition. Full packets are stored, indexed and organized in a timeline to enable on-demand retrieval, specifying time interval and BPF criteria to fully reconstruct past events.
High Performance, Small Form Factor
Our nBox Recorder and NetFlow appliances are able to process up to 100 Gbit and fit in 1U form factor rackmount (depending on the required data retention). Up to 24 disks in 2U form factor, or longer-term storage on modular systems to scale as needed.
at a glance
Key Features
- High performance full packet capture to disk with no packet loss
- Based on n2disk, a 100 Gbit Network traffic recording software with indexing capabilities
- BPF filters support: you can specify any filters you want to filter out the unwanted network packets from the dumping process
- Conditional dump: save packets on disk based on traffic conditions (e.g. when traffic is above threshold X) and time of the day
- Detailed dump statistics
- Ability to reproduce dumped files onto a physical interface, or using tools such as ntopng and nProbe
Specifications
Tech Specs
- Linux
- Web GUI available through any HTML5-ready browser
- TLS/HTTPS support
- nboxui
- n2disk
- 19″ Rack-mount
- Dell-based systems include up to 3 years on-site hardware guarantee
models
Choose Your Model
Different models have different capacity and performance.
- Web-based UI for recording/extraction
- n2disk included
- PF_RING ZC drivers included
- Form factor: 1 Unit
- Monitoring port options:
- 2x 10 Gbit Intel ZC SFP+
- Speed: 2 x 10 Gbit/s (2 x 14.88 Mpps)
- Disks: 8 x 0.96 TB (other options available)
- Web-based UI for recording/extraction
- n2disk included
- PF_RING ZC drivers included
- Form factor: 1 Unit
- Monitoring port options:
- 2 x 40 Gbit FPGA-based adapter with Hardware Timestamps (QSFP28)
- Speed: 2 x 40 Gbit/s (with FPGA)
- Disks: 8 x 1.6 TB
- Web-based UI for recording/extraction
- n2disk included
- PF_RING ZC drivers included
- Form factor: 2 Units
- Monitoring port options:
- 1 x 100 Gbit FPGA-based adapter with Hardware Timestamps (QSFP28)
- Speed: 100 Gbit/s line rate (with FPGA)
- Disks: 8 x 1.6 TB
Screenshots
Gallery
Related
Keep exploring
Pricing and editions
Compare editions and ways to buy.
Solutions
By use case and industry.
User guide
Installation and configuration.
Get started
Ready to see it on your network?
Download the free Community edition of ntopng, compare editions and buy in the shop, or talk to the ntop team about your requirements.
