NextComputing has announced an enhanced Federation Manager™ option for the Packet Continuum™ capture platform. The enhanced Federation Manager enables remotely-located Packet Continuum sensors to be federated in a single framework with common RESTful API and UI. It also allows direct access to each sensor regardless of location within an enterprise or organization for aggregation of its real-time BPF active triggers, anomaly event triggering, and IPFIX NetFlow generation.
Other key features include:
- Enables fast search based on PCAP and metadata retrieval stream processing
- Enables scaling to lossless packet capture of 240Gbps and beyond depending on configuration
- Map reduced framework is Packet Continuum sensor aware and allows a common view thru a single UI and RESTful API
- Open PCAP architecture allows relatively easy integration by an OEM into their analytics solutions, as well as interoperability with various tools and workflows
- Simultaneous IPFIX recording NetFlow stream capability also enables redirection of these streams into other tools for unprecedented flexibility and scalability; whether that scale is on a location basis or aggregate big data rate on the wire basis
- Reduces the cost, bottlenecks, and limitations of traditional sensors
- Operates on RedHat or CentOS Linux and standard servers including DELL, as well as via standard networking interfaces between the Packet Continuum sensors in the federation
A single Packet Continuum sensor appliance, or Packet Continuum sensor cluster, is capable of lossless packet capture scalable from low-bandwidth (under 1Gbps) up to 40Gbps aggregate (4x10G) and is massively scalable to large forensics timelines with in-line compression to 90 days or larger depending on configuration. This is coupled with its real-time BPF Active Triggers, anomaly event triggering, IPFIX NetFlow generation, fast search-based PCAP and metadata retrieval stream processing, and open RESTful API and UI.
“As traffic rates and connection points have increased, the associated sensor front ends are a cost, scale, and performance inhibitor for cyber analytics tools, solutions vendors, and users. In some cases, any reasonable forensics timeline is simply unaffordable. Our intent is to significantly reduce the cost of real-time PCAP, NetFlow, and metadata generation, and forensics investigations and have a scalable and open framework for ease of integration. This enables enhanced workflows and new innovative solutions for OEMs, solutions providers, and enterprise users who are looking for an open framework to support a range of potential tools,” said Bob Labadini, CTO at NextComputing.
NextComputing is the developer of an open, scalable, and high-performance software framework for capture and managing big data on the wire including lossless packet capture, NetFlow and metadata generation, and fast packet retrieval. We also offer solutions based on enterprise-class industry-standard Linux servers such as those by DELL, as well as our own developed and manufactured appliances for portable and small form factor rack deployable use cases. We are focused on enabling enhanced workflows for OEMs, solutions providers, and enterprise users who are looking for an open framework to support a range of potential tools. We also offer a complete suite of services that can add value to your business such as optimizing workflows to meet your needs, connector development integration with your analytics tools, software branding, various configuration options, and more.