NameCapture speedCPU loadPlatformsCostAccuracy of attack detectionSpeed of attack detection
pcapVery slow, 10-100 mbpsHugeFreeBSD, LinuxGPLAccurateVery fast
sFlowUp to TerabitsSmallLinux, FreeBSD, MacOSFreeAccurate but depends on sampling rate.Very fast
NetFlowUp to TerabitsSmallLinux, FreeBSD, MacOSFree but could require additional licenses or hardware from network equipment vendorLess accurateUp to 15-30 seconds
AF_PACKETUp to 10G per machineNormal-hugeLinuxGPLv2Very accurateVery fast

24/7 Tech Support

Email Us