最新版 Omnipeek Enterprise 11.1 更新於2017/11/9
最新版 Capture Engine for Omnipeek 11 更新於 2017/11/9
最新版 Savvius Insight 2.1 更新
Omni 平臺實現了從單一控制臺進行全網範圍的分析與故障診斷，包括廣域網、無線網路。
OmniPeek 是一個理想的對網路進行透視的工具。網路產品研發人員可以採用OmniPeek作為研發輔助的測試、檢驗工具，也可以用來學習網路知識。此產品中已經包含了基本的故障診斷分析功能，因此可以用來與OmniPeek Workgroup協同工作，例如可以採用OmniPeek Personal在部分網路位置捕獲，將保存下來的 Trace File交由 OmniPeek Workgroup進行更深度分析。Omni平臺非常容易進行部署、管理、擴展，是企業值得擁有的網路分析與故障診斷的解決方案。
特色功能
• 基於資訊包流的專家分析系統和應用分析
• 互動式節點圖
• 完整的七層協議解碼
• 應用回應時間（ART）分析
• 安全功能
• 監控與報表
• RMON分散式分析
OmniPeek 新版特色
View File Content - Reconstructs files by extracting data from reassembled HTTP payloads. This is performed automatically when a packet file is opened, and provides critical information about file content. Security Events from Snort and Suricata - Ability to import analytical results from Snort and Suricata, and overlay the resulting security alerts against the packet data for immediate, detailed analysis of any suspected breaches. Investigation Overview - Provides summary level information about the entire packet file under analysis, enabling a rapid transition to any time segment. Savvius Omnipliance Status - Notifies administrators immediately, via syslog and/or email, if a Savvius Omnipliance drive goes down or a network capture stops. Customize Packet Decode Views - Creates unique packet decode columns based on any information within packets, making it easy to find and compare packets that contain elements under investigation. Filter Files to Maximize Computing Bandwidth - Filters packet files before loading packets for analysis, using parameters such as IP addresses and/or port ranges, significantly increasing analysis performance on computers with limited resources. Faster Forensic Searches - Significantly increases the speed of packet data retrieval from disk, making post-capture analysis much more efficient.
OmniPeek Enterprise 系統需求
Supported Operating Systems and Browser
- Windows 10
- Windows 8.1 (64-bit)
- Windows 7 (32-bit/64-bit)
- Windows Server 2016
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2008 (64-bit)
Important Notes:
All operating systems require Internet Explorer 9.0 or later and Adobe Flash Player for Internet Explorer 20.0.0.272 or later
The only wireless drivers that include 64-bit support are the Ralink and Atheros drivers.
Recommended System
Intel Core i3 or higher Processor, 4G RAM, 20GB available HD Space
Minimum System Requirements
Omnipeek supports most rack mount, desktop and portable computers as long as the basic system requirements needed to run the operating systems are met. Depending on traffic and the particular usage of Omnipeek the requirements may be substantially higher.
Heavier Usage Recommendations
Factors that contribute towards superior performance include high speed CPU, dual CPUs, high performance disk storage subsystem (RAID 0), and as much additional hard disk space as is required to save the trace files that you plan to manage.
OmniPeek Network Analyzer Comparison Table
OmniPeek Enterprise |
OmniPeek Professional |
OmniPeek Connect |
||
|---|---|---|---|---|
User profile |
Network manager or network engineer in a large company; Service technician for an ISP or other service provider | Network manager or network engineer in a SME | Network manager or network engineer who needs to connect to remote engines but does not need local capture or analysis capabilities | |
Display Options |
||||
| Packets | Yes | Yes | Yes | |
| Log | Yes | Yes | Yes | |
| Dashboard | Yes | Yes | Yes | |
| Application Performance | Yes | Yes | Yes | |
| Voice and Video Dashboard | Yes | No | No | |
| Compass Dashboard | Yes | Yes | Yes | |
| Peer Map | Yes | Yes | Yes | |
| Graphs | Yes | Yes | Yes | |
Capture Options |
||||
| Local Captures | Yes | Yes | No | |
| Multiple Captures | Yes | Yes | No | |
| Multiple Adapters | Yes | Yes | No | |
| Multi-Segment Analysis | Yes | No | Yes | |
| ORA | Yes | No | No | |
| TCPDump | Yes | Yes | No | |
Features |
||||
Remote Engine Connections |
Unlimited | Limited to two simultaneous connections | Unlimited | |
Filters and Alarms |
Yes | Yes | Yes | |
| Wireless | a,b,g,n,ac | a,b,g,n,ac | a,b,g,n,ac | |
| Voice Over IP | Yes | No | No | |
Call Data Record (CDR) |
Yes | No | No | |
Video Over IP |
Yes | No | No | |
MPLS and VLAN |
Yes | Yes | Yes | |
| Expert Flow Analysis | Yes | Yes | Yes | |
Roaming |
Yes | Yes | No | |
Web Traffic Analysis |
Yes | No | Yes | |
Statistical Analysis |
Yes | Yes | Yes | |
Local File Analysis |
Yes | Yes | Yes | |
Warranty & Maintenance |
||||
| Warranty | 90 Days | 90 Days | 90 Days | |
| Maintenance & Enhanced Support | Product Updates Support by email and phone | Product Updates Support by email and phone | Product Updates Support by email and phone | |
OmniPeek Enterprise
OmniPeek Enterprise is WildPackets' flagship product. It combines all of the features of the OmniPeek product line in one product, including support for local captures from multiple interfaces and connections to an unlimited number of distributed Omnipliance network recorders. It supports data collection from any network topology, including 10 Gigabit and Gigabit networks, and local matrix switches. OmniPeek Enterprise also provides advanced Voice and Video over IP functionality including signaling and media analyses of voice and video, VoIP playback, voice and video Expert analysis, Visual Expert, and more. OmniPeek Enterprise is ideal for IT organizations responsible for network analysis and network service level agreements (SLAs) for the entire organization. A license of OmniPeek Enterprise should be considered for each location that will be supported by a network engineering professional.
OmniPeek Professional
OmniPeek Professional expands the capabilities of OmniPeek Basic, extending its reach to all small businesses and corporate workgroups, regardless of size of the network or the number of employees. OmniPeek Professional provides support for multiple network interfaces while still supporting up to 2 OmniEngines acting as both a full-featured network analyzer and a console for remote network analysis. There is also no limit to the number of network flows that can be analyzed, so groups of any size can be supported.
OmniPeek Connect
OmniPeek Connect manages an organization’s Omnipliance and TimeLine network recorders, and provides all the console capabilities of OmniPeek Enterprise with the exception of local capture and VoIP call playback. OmniPeek Connect is ideal for Network Operations Center (NOC) deployments as it can monitor distributed analysis solutions at multiple remote locations, with no need for local captures at the console location.
Capture Engine for Omnipeek 7天24小時不間斷 網路監控及分析軟體
Capture Engine for Omnipeek (原Omnipeek Engine)是一款7天24小時不間斷分散式網路監看及分析軟體，建立於 Wildpackets 得獎之網路分析技術，Capture Engine for Omnipeek 能即時分析來自於一或多個網路介面之流量，並支援 Ethernet, 802.11 a/b/g/n wireless, Gigabit, 及10 Gigabit等介面。Capture Engine for Omnipeek 支援即時擷取及分析資料，亦能記錄所有之資料以供未來之分析。此產品是佈置於工作組或遠端的最佳選擇，提供連續的網絡監控和分析而無須局域網設計支持。要 完整的覆蓋你的網絡分析需求，一個或多個OmniEngines應佈置到每個遠端，包括每個服務器域，並置於網絡操作核心。
Capture Engine for Omnipeek作為一個Windows伺服器就像是在WildPackets的Omnipliance and TimeLine network recorders。通過在每個業務地點部署 OmniEngines，網路工程團隊獲得其所有遠程網路的實時可視性。企業不可能在每個辦公室都配置一個會操作Capture Engine for Omnipeek or turnkey Omnipliance and TimeLine network recorders的網路工程師以確保每一個企業都有支援網路工程的位置，因此它需要Capture Engine for Omnipeek。
特色
Capture Engine for Omnipeek 提供全面的網路服務監測和分析，其中包括：
- 綜合網路基礎設施的監測，包括監測和分析網絡流量24 X7來自所有網段，包括10 Gigabit, Gigabit, Ethernet, and 802.11a/b/g/n (including 3-stream)段的流量分析
- 專家診斷系統，包括網路流量分析，事件和對話之間的相關性
- 統計分析，包括數據包流和有關節點，協議和子協議的細節
- 詳細的網路數據包分析，包括協議解碼和物理錯誤的說明
- 應用層的專家診斷，用戶滿意度得分，並應用響應時間分析
- 基於 IP的媒體和信令分析，包括MOS和R因子的分數，每個呼叫的詳細數據包流場可視化的完整的語音和視頻，呼叫數據記錄（CDR），並調用播放
- 先進的報警，警報網絡工程師的潛在問題之前，他們成為主要問題
- 網路取證分析網絡流量的長期儲存
- 集成系統管理軟體
- 當網路問題發生時，Capture Engine for Omnipeek可以執行 SNMP陷阱，SNMP監控系統，如HP OpenView的潛在問題通知。因為它抓住了交通所產生的錯誤，Capture Engine for Omnipeek提供的詳細信息，協助網絡工程師調查和解決問題
Product Feature Chart
Capture Engine for Omnipeek |
|
General Description |
Distributed capture and analysis designed for enterprise networks, including networks running Ethernet, Gigabit, 10 Gigabit, VoIP and Video, and WLAN. |
Display Options |
|
| Packets | Yes |
| Network Dashboard | Yes |
| Voice and Video Dashboard | Yes |
| Application Performance | Yes |
| Application Performance Index | Yes |
| Peer Map | Yes |
| Graphs | Yes |
Wireless Support |
a,b,g,n,ac |
Voice over IP |
Yes |
Call Data Record (CDR) |
Yes |
Video over IP |
Yes |
MPLS and VLAN |
Yes |
Multiple Adapters |
Yes |
Multiple Simultaneous Captures |
Yes |
|
Multi-Segment Analysis |
Yes |
Expert Flow Analysis |
Yes |
Capture to Disk |
Yes |
Alarms |
Yes |
Statistics Reporting |
Yes |
Gigabit, 10 Gigabit, and Matrix Switch Support |
Yes |
Reporting Service |
Yes |
Forensics Analysis |
Yes |
Application Analysis |
Yes |
Available on Omnipliance Network Recorder |
Yes |
Capture Engine for Omnipeek 系統需求
Supported Operating Systems and Browser
- Windows 10
- Windows 7 (32-bit/64-bit)
- Windows Server 2012
- Windows Server 2012 R2
- Windows Server 2008 R2 (64-bit)
- Windows Server 2016
All operating systems require Internet Explorer 9.0 or later
Important Note: Please note that Savvius OmniAdapters now support 64-bit operating system. The only wireless drivers that include 64-bit support are the Ralink and Atheros drivers. Standard Ethernet 10/100/1000 cards are supported on Windows 64-bit operating systems.
Recommended System
Intel Core i3 or higher Processor, 4G RAM, 40GB available HD Space
Minimum System Requirements
OmniEngine Enterprise supports most rack mount, desktop and luggable computers as long as the basic system requirements to run the supported operating systems are met. To analyze 10 Gigabit, Gigabit, or Wireless traffic, a supported Network Analyzer Card or Wireless LAN Adapter is required. Depending on traffic and the particular usage of OmniEngine Enterprise, the requirements may be substantially higher.
Heavier Usage Recommendations
Factors that contribute towards superior performance include high speed CPU, dual CPUs, high performance disk storage subsystem (RAID 0), and as much additional hard disk space as is required to save the trace files that you plan to manage.
Savvius Insight
Real-time enterprise-class network management for smaller networks
Savvius Insight is the newest and smallest addition to the Omnipliance family of network monitoring appliances. Savvius Insight has no moving parts, connects inline to the network with two bypass ports, and has three extra ports for span port captures.
Placed inline to an Internet connection, Savvius Insight automatically begins collecting network statistics and trend data for immediate display and long-term reporting. Users can instantly access in-depth analytics on network activity such as:
- Bandwidth Utilization - monitor average and maximum bandwidth consumption rates to make key purchasing and management decisions.
- Application Response Times - examine average, minimum, and maximum response times for critical network applications to identify productivity correlations and ensure SLAs with service providers.
- Flow Volume - review overall network traffic flows as well as specific conversations between connected devices.
- Packet Types - filter and analyze network traffic by network protocols.
- Expert Events - real-time analysis of key network operations including TCP events, IP events, ICMP events, DNS errors, and slow server response times to identify spikes and trends.
- Security Events - identify the presence of authentication failures, dictionary attack events, flooding, and other indicators of potential network security issues.
Savvius WiFi Adapter for OmniPeek
- USB device with extension cable
- Qualified for use with WildPackets OmniPeek and OmniEngine product lines (supported drivers available with OmniPeek products – sold separately)
- Dualband operation – can capture wireless packet data in both the 2.4GHz and 5GHz bands
- Captures wireless packet data on all standard international 802.11 channels (a/b/g/n)
- Supports 802.11n captures, up to 3 transmit/receive streams (450Mbps wireless traffic)
- Supports 802.11n 20MHz and 40MHz channel operation
- Supports OmniPeek multi-channel aggregation (use multiple devices simultaneously)
- When used with WildPackets OmniPeek or OmniEngine software it supports the capture and analysis of all 802.11a/b/g/n (up to 3-stream 11n) wireless network traffic across all 802.11 mandatory operational modes
Omnipliance TL Network Analysis & Recorder Appliance
The Most Powerful Network Analysis and Recorder Appliance for 10G/40G Networks Available Anywhere
Omnipliance TL sets a new standard in network analysis and recording, offering unsurpassed network traffic collection and recording, the most complete set of real-time statistics, quick data rewinding, simultaneous real-time network monitoring, and rapid search and forensic analysis of collected data.
With Omnipliance TL, network issues of any type on 10G and even 40G networks can be identified, analyzed, reconstructed, and resolved quickly and efficiently.
Optional OmniStorage disk arrays allow the internal storage of the Omnipliance TL to be doubled, increasing the capacity of a single Omnipliance TL to 128TB.
Each Omnipliance TL features:
- Pre-loaded, tested, and fully integrated OmniEngine Enterprise software.
- Either 32TB, 48TB, or 64TB of internal storage and optionally 32TB, 48TB, or 64TB of external OmniStorage arrays.
- Support for up to 4 OmniAdapter network analysis cards consisting of any combination of OmniAdapter 1G, OmniAdapter 10G, and OmniAdapter 40G.
Deployment Recommendation:
- Data centers
- NOCs
- WAN links
- Any location with 40G networks
Omnipliance MX Network Analysis & Recorder Appliance
Powerful, Efficient Network Analysis and Recorder Appliance for 1G/10G Networks
The Omnipliance MX is a powerful, affordable network analysis and recorder appliance for capturing and analyzing traffic from more demanding 1G and 10G networks.
Each Omnipliance MX features:
- Pre-loaded, tested, and fully integrated OmniEngine Enterprise software.
- Available with 16TB or 32TB of storage.
- Support for 4 OmniAdapter network analysis cards consisting of any combination of OmniAdapter 1G and OmniAdapter 10G MX.
Deployment Recommendation:
- Data centers
- NOCs
- WAN links
Omnipliance CX Network Analysis & Recorder Appliance
Powerful, Efficient Network Analysis and Recorder Appliance for 1G/10G Networks
The Omnipliance CX, WildPackets’ most affordable network analysis and recorder appliance, is an ideal solution for monitoring less demanding 1G and 10G networks and remote locations such as branch offices.
Each Omnipliance CX features:
- Pre-loaded, tested, and fully integrated OmniEngine Enterprise software.
- Available with 4TB, 8TB, or 16TB of storage.
- Supports up to 2 OmniAdapter network analysis cards consisting of any combination of OmniAdapter 1G and OmniAdapter 10G MX.
Deployment Recommendation:
- Branch Offices
- SMBs
Omnipliance Portable Network Analysis & Recorder Appliance Troubleshooter
With the Omnipliance Portable, WildPackets technology can be used to directly access network segments that are difficult to reach but are in need of network troubleshooting.
With its rugged construction and expandability, the Omnipliance Portable is ideal for the deployment of WildPackets advanced network interfaces, OmniAdapters, and the software analysis that delivers the superior experience of WildPackets analysis.
Omnipliance Portable Configurations |
|
|---|---|
Software Option |
OmniPeek Connect + OmniEngine Enterprise |
Intel Xeon Processor |
Dual 2.13 GHz Quad-core |
SATA Drives RAID 0 |
6TB |
100G SATA Drive non-RAID for OS |
Yes |
Display |
Integrated 17" WUXGA+ LCD up to 1920x1200 |
DVD R/RW |
Yes |
Interface |
Two PCI-E |
RAM |
24G RAM |
Mouse and Keyboard |
Yes |
Carrying Case |
Includes soft carrying case. Optional hardened cases. Optional rack-mount kit. |
Operating System |
Windows 2012 Server |
Software Option
OmniPeek Connect and OmniEngine Enterprise
OmniPeek Connect allows users to configure and connect to the remote locations across the network. Using OmniEngines to capture and analyze data and OmniPeek Connect to view real-time results, network engineers can rapidly troubleshoot faults-even faults occurring at remote locations. OmniPeek Connect allows post capture local analysis and supports all network topologies -Ethernet, Wireless, Gigabit, and 10 Gigabit.
For more information on OmniEngine Enterprise and OmniPeek Connect, please visit their product pages.
Hardware Options
The following options are available to improve the performance of the Omnipliance Portable:
OmniAdapter 1G
The OmniAdapter 1G is a high performance, PCI Express network analysis card that supports up to 2 full-duplex or 4 half-duplex connections, providing advanced monitoring and troubleshooting of Gigabit networks.
The OmniAdapter 1G is available in the following configurations:
- Four SFP cages
- Four fixed RJ45 ports (10/100/1000)
OmniAdapter 10G
The OmniAdapter 10G is a high performance , PCI Express, full-duplex 10 Gigabit network analysis card with 2 or 4x10 Gbps optical interfaces that has been optimized for monitoring and inspecting traffic on 10 Gigabit networks. The network adapter is available with an SFP+ SR/LR/ER/CR interface.
OmniAdapter Analysis Cards
No matter what your network speed is, Gigabit, 10 Gigabit, or even 40 Gigabit, WildPackets has a high performance network analysis card, OmniAdapter, to capture and analyze your traffic. Depending on the configuration, WildPackets’ appliances support at least one OmniAdapter. Additional OmniAdapters can be added as necessary to Omniplliance Core and TimeLine network recorders based on the requirements.
Error Packet Capture
OmniAdapter network analysis cards have the ability to capture error packets on the network. These errors include: Runt, Oversize, Frame Alignment, and CRC Errors. To capture errors on 1/10/40Gigabit segments, you must use the OmniAdapter 1G/10G/40G.
OmniAdapter 1G
The OmniAdapter 1G is a high performance, PCI Express network analysis card that supports up to 2 full-duplex or 4 half-duplex connections, providing advanced monitoring and troubleshooting of Gigabit networks.
PCI-E with four SFP cages
The OmniAdapter 1G is available in the following configurations:
- Four SFP cages
- Four fixed RJ45 ports (10/100/1000)
OmniAdapter 1G is supported on both Microsoft Windows and Linux operating systems.
Supported Expert Analysis and Recorder Appliances
- Omnipliance CX Expert Analysis and Recorder Appliance
- Omnipliance MX Expert Analysis and Recorder Appliance
- Omnipliance TL Expert Analysis and Recorder Appliance
OmniAdapter 10G MX
WildPackets’ OmniAdapter 10G MX is a robust, PCI Express 10 Gigabit network analysis card with 2x10 Gbps optical interfaces that has been optimized for monitoring and troubleshooting traffic on not fully utilized 10 Gigabit Ethernet networks. The network adapter includes SFP+ SR or LR interface.
Two-port, PCI-E
The OmniAdapter 10G MX with is supported on Linux operating systems
Supported WildPackets Network Recorders
- Omnipliance Core network recorder
OmniAdapter 10G
The OmniAdapter 10G is a high performance , PCI Express, full-duplex 10 Gigabit network analysis card with 2 or 4x10 Gbps optical interfaces that has been optimized for monitoring and inspecting traffic on 10 Gigabit networks. The network adapter is available with an SFP+ SR/LR/ER/CR interface.
Two-port, PCI-E
The OmniAdapter 10G with 2x10Gbps optical interface is supported on both Microsoft Windows and Linux operating systems. The OmniAdapter 10G with 4x10Gpbs optical interface is supported on Linux operating systems only.
Supported WildPackets Network Recorders
- Omnipliance TL Expert Analysis and Recorder Appliance
OmniAdapter 40G
The OmniAdapter 40G is a high performance, PCI Express 40 Gigabit network analysis card with 1x40Gbps optical interface that allows TimeLine network recorders to capture and analyze data on 40 Gigabit networks. The network adapter is available with one QSFP+ interface.
One-port, PCI-E
The OmniAdapter 40G is supported on Linux operating systems only.
Supported WildPackets Network Recorders
- TimeLine network recorder