Network Capture

Deep buffering allows you to size your monitoring infrastructure for average traffic rates rather than burst peaks, which can be 10x or more above average at market open and close. Combined with automatic 3x streaming compression, this maximizes disk capacity and historical access to packets while preventing capture loss during traffic spikes.

All data is automatically hardware-encrypted at rest using AES-256 encryption, ensuring a high level of data security for captured packet data. This is critical for financial trading environments where packet captures contain sensitive order and market data.

Storage ranges from 3 TB to hundreds of TB per device. With 3x streaming compression, effective capacity is tripled. The distributed architecture creates a system containing potentially petabytes of packets, all queryable from a single Corvil Center interface.

Yes. The modular system enables upgrade paths from Network Capture to Network Analytics and Trading Analytics without replacing hardware. Simply add analytics modules to transform packet capture appliances into full analytics platforms.

Network Capture supports port tagging and timestamping capabilities from all leading network packet broker vendors. It can capture multiple copies of packets from aggregation taps without deduplication, preserving the complete record for forensic analysis.

Turbo export provides a responsive experience even when capturing at high speed. Users can one-click download PCAP files to desktop using familiar tshark and BPF filter syntax. The Corvil API also supports programmatic packet capture filtering and export for automated forensic workflows.