Traffic Recording

With increasing network complexity, it becomes necessary to store the content of network communication in order to guarantee that the services that networks provide are flawless. Because banks have to comply with numerous regulations and undergo audits, they need to collect all of their traffic to prove that there has been no wrongdoing on their part. In many countries, telco operators are required by law to perform data retention as a form of evidence collection. Network security solution vendors have to offer the option of offline traffic analysis and offline troubleshooting.


The amount of data on today’s high-speed networks presents a great challenge for traffic recording. There are two main issues: the throughput of disk subsystems does not scale with the throughput of computer networks and the storage capacity of today’s disks is not sufficient to store all of the data running through the network. However, it is not necessary to store all data; for instance, the huge data flows of videos from Netflix and YouTube that are uninteresting from a security point of view can be discarded. This problem can be circumvented by filtering this type of traffic in the hardware through FPGA network cards that allow only the traffic of interest to be stored on the HDD.

Netcope Packet Capture and Netcope Session Filter are high-performance FPGA network cards with added intelligence that are perfectly suited for traffic filtering at wire speed. With these products, it is possible to preset a number of filtering rules for both Rx and Tx traffic based on the input network interface and L3 and L4 header fields, distribution of incoming traffic over multiple DMA channels, cropping of incoming frames before forwarding them to the software with configurable length in each filtering rule, and forwarding and duplication of incoming frames to an output network interface and a DMA channel.

Netcope Products Offer:

  • Ready-to-use firmware

    • Wire-speed packet processing

    • Stateless/stateful hardware filters (NPC/NSF)

    • Extraction of NetFlow/IPFIX data in hardware (NPC, NSF)

    • Gathering flow statistics directly in hardware (NSF)

  • Full 100Gbps RX throughput to SW

  • Support for multiple technologies on a single card (100/40GE + 10GE)

Explore more Netcope products

Netcope Session Filter (NSF)

Netcope Session Filter (NSF)

Learn more about Netcope's powerful session-oriented packet capture solution.

Netcope Development Kit (NDK)

Netcope Development Kit (NDK)

NDK enables rapid design, prototyping and evaluation of hardware-accelerated applications.

Netcope Success Stories


NSF-100G2-Picomass-Netcope Network Traffic Monitoring

Picomass uses Netcope Session Filter in the IPS200 DPI solution because NSF is capable of offloading traffic to hardware. This makes real-time DPI on 100G networks possible.

Flowmon Networks

Flowmon Networks Network Traffic Monitoring

Flowmon Networks aims to develop a new generation of NetFlow/IPFIX probes that can monitor and process traffic of 100GE high-speed networks. Because of that, Flowmon Networks needs to find a network card that would be able of handling 100 GE monitoring requirements.

U.S. trading firm deploys Tradecope

U.S. trading firm deploys Tradecope Electronic Stock Trading

For successful trading on electronic exchanges today, it is not enough to come up with the smartest strategy anymore. Learn more about how U.S trading firm deployed FPGA-based Tradecope solution to increase hit rate of the trading strategy.