Data Recording is used for recording of all or selected parts of the data on the monitored network. The network data is typically stored to large RAID disk arrays, from where they can be read and analyzed later.
The recorded data can be used later for documentation of what has happened on the network, e.g. bank transactions, or can be used to perform in-depth analysis of a specific network event, e.g. how a virus attack has affected a network.
The Data Recording application is supported by the Napatech Network Adapters via features, such as:
- Zero Packet Loss: All frames can be captured on any network load condition so that a full network story always can be retrieved.
- Time-stamp: Captured frames are time stamped, enabling the retrieval of the exact timing of the captured frames.
-
Deduplication: Supports removal of the duplicate frames sometimes seen in MPLS networks. Removing duplicate frames can save considerable amounts of disk space, and can save the host CPU from the very time-consuming task of identifying and removing duplicate frames.
-
Programmable Filtering: Adapter filters can be set up so that only relevant frames are captured.
-
Channel Merging: Enables network frames from several ports to be merged in reception time order and handled by the host application in time order.
- Slicing: Conditional dynamic slicing, e.g. where frames are sliced 40 bytes after the start of the TCP payload, can be used to dramatically reduce the amount of data that needs to be stored to disk.