Lawful Interception

Thanks to the Internet, we all live in an interconnected global village. It is all the more important to prevent data breaches and intercept malicious activity before it is too late. Because it is no longer possible to tell which data flows in the network from the TCP/UDP port numbers, many security vendors have developed solutions using Deep Packet Inspection (DPI), as it provides suitable means for detection of security threats.The problem they are facing nowadays is a deluge of data that high-speed networks bring. For this reason it is necessary to deploy a solution that would accelerate the DPI process.

traffic-strucutre.png

Agrregated network traffic sctructure for North and South America. Source: Global Internet Phenomena Report: North America and Latin America, Sandvine

Even the best DPI software is useless when the server it is running on does not have enough processing power to detect intrusion candidates as it wastes its performance to inspect all the DPI-uninteresting traffic like YouTube and Netflix videos. In order to free the valuable CPU cycles, accelerate the DPI and ensure real-time protection, it is necessary to offload preprocessing of the traffic to HW before it goes to software.

Netcope Session Filter is a solution that is capable of filtering the traffic in HW on per-session basis (a youtube video stream, an email session, a VoIP call), while session is a sequence of packets with the same source and destination IP address, L4 protocol, TCP/UDP ports, and optionally other fields. Thanks to this type of traffic pre-processing, real-time DPI becomes reality even in 100G networks.

Netcope Products Offer:

product-img_packet-capture1.png
  • Ready-to-use firmwares with wire-speed hardware filters:

    • Stateless for traditional LI (L3&L4 header fields)

    • Stateful for flow-based LI (L4 network flows)

  • Full 100Gbps RX throughput to SW

  • Support of multiple technologies on a single card (100/40GE + 10GE)

Explore more Netcope products

Netcope Packet Capture (NPC)

Netcope Packet Capture (NPC)

Learn more about the network solution for wire-speed, low-latency packet processing.

Netcope Session Filter (NSF)

Netcope Session Filter (NSF)

Learn more about Netcope's powerful session-oriented packet capture solution.

Netcope FPGA Boards (NFB)

Netcope FPGA Boards (NFB)

High-performance appliances designed for the development of hardware-accelerated applications.

Netcope Success Stories

NSF-100G2-Picomass-Netcope

NSF-100G2-Picomass-Netcope Network Traffic Monitoring

Picomass uses Netcope Session Filter in the IPS200 DPI solution because NSF is capable of offloading traffic to hardware. This makes real-time DPI on 100G networks possible.

Flowmon Networks

Flowmon Networks Network Traffic Monitoring

Flowmon Networks aims to develop a new generation of NetFlow/IPFIX probes that can monitor and process traffic of 100GE high-speed networks. Because of that, Flowmon Networks needs to find a network card that would be able of handling 100 GE monitoring requirements.

U.S. trading firm deploys Tradecope

U.S. trading firm deploys Tradecope Electronic Stock Trading

For successful trading on electronic exchanges today, it is not enough to come up with the smartest strategy anymore. Learn more about how U.S trading firm deployed FPGA-based Tradecope solution to increase hit rate of the trading strategy.

Cookies help us deliver our services. By using this website, you agree to the use of cookies.  More information

close