Network Ingest - ArgyleData/docs GitHub Wiki

Argyle Network Ingest is a software platform that leverages L4-L7 Deep Packet Inspection to collect in real-time the information embedded in traffic flows. The solution leverages passive probes and/or port mirroring (SPAN) to capture packets traveling through a network at 10Gbps-100Gbps containing valuable communication signals between applications, devices, sensors and users.

Key Features

  • Traffic cleaning
  • Flow buffering
  • Classification of protocols
  • Attribute extraction

Protocols (with examples)

  • Web - http, google, youtube, baidu, etc.
  • Network - gtp/gtpv2, ppp/pptp, openvpn, socks 4/5, gre, etc.
  • Network Service - dns, dhcp, ip/ip6, rtmp, sctp, etc.cdp, icp, netflow, snmp, etc.
  • Peer to Peer - bittorrent, directconnect, kazaa, sisk, winmx, etc.
  • Mobile - isup, bssap, sip, google play, apple appstore
  • Instant Messaging - aim, irc, jabber, gmail chat, skype, msn, ymsg, etc.
  • Security/Authentication - ldap, diameter, radius

Packet Capture

For speeds in excess of 3Gbps, Napatech's NT20E2 ethernet cards can be used for full line-rate packet capture.

Add a custom footer
⚠️ **GitHub.com Fallback** ⚠️