nBox Recorder

The Packet-to-Disk Continuous Packet Recorder

nBox Recorder is a network traffic disk recorder application. With nBox Recorder you can capture full-sized network packets at gigabit rate from a live network interface and write them into files. It has been designed and developed mainly because most network security systems rely on capturing all packets (headers and payload), since any packets may have been responsible for the attack or could contain the problems that we are trying to find.
nBox Recorder uses the industry standard PCAP file format to dump packets into files so the resulting output can be easily integrated with existing third party or even open-source analysis tools like ntop, Wireshark. or Snort.

nBox Recorder can be effectively used to perform:

  • Off-line network packets analysis by feeding a specialized tool (such as snort or ntop).
  • Reconstruct specific communication flows or network activities.
  • Reproduce the previous captured traffic to a different network.

Main Features

  • High performance full packet capture to disk.
  • BPF filters support. You can specify any filters you want to filter out the unwanted network packets from the dumping process.
  • Conditional dump: save packets on disk based on traffic conditions (e.g. when traffic is above threshold X) and time of the day.
  • Detailed dump statistics.
  • Fully integrated in the nBox appliance. From the nBox web interface you can browse the dumped files and open them within nTop.
  • Ability to reproduce dumped files onto a physical interface, or using tools such as ntop and nProbe.

User Interface

The following figures shows you the nBox Recorder web user interface.

This slideshow requires JavaScript.

Available Models

The nBox recorder is available as physical appliance in five models.

nBox Recorder Form Factor Monitoring Ports Certified Dump Performance Storage Size RAID
R24 20G NT 2U 19″ rackmount Napatech NT20E2-PTP
Hardware Timestamps
20G to disk
(traffic directions merged in gw)
24 x 1 TB HW RAID
R24 20G 2U 19″ rackmount   2 x 10G Ports (SX Fibre) 2 x 10 Gbit/s
29.76 Mpps (2 x 14.88 Mpps)
24 x 1 TB HW RAID
R16 20G 2U 19″ rackmount   2 x 10G Ports (SX Fibre) 2 x 10 Gbit/s
29.76 Mpps (2 x 14.88 Mpps)
16 x 1 TB HW RAID
R10 10G 2U 19″ rackmount   1 x 10G Port (SX Fibre) 10 Gbit/s
14.88 Mpps
8 to 16 x 1TB HW RAID
R8 10G 1U 19″ rackmount  1 x 10G Port (SX Fibre) 10 Gbit/s
14.88 Mpps
R4 10G 1U 19″ rackmount  1 x 10G Port (SX Fibre) 5 Gbit/s 4x 1TB HW RAID
R4 1U 19″ rackmount 1 x 1Gbit Port (Copper) 1 Gbit/s
1.488 Mpps
R1 1U 19″ rackmount  1 x 1Gbit Port (Copper) 1 Gbit/s
1.488 Mpps
2x 1TB SW RAID 0.

Please contact us for details, price and availability.