Packet Capture Analysis

Capture without a laptop in the closet

The collector at each site can capture traffic it sees: to and from itself, broadcasts, and anything a switch mirrors to its port. Pick a device or a site, optionally an address, port or protocol, how long to capture, and go.

Or let an alert start it

Most problems are over before anyone can start a capture. Set a rule such as "when an alert opens for this device, capture 1 minute", and the evidence is waiting when you look.

Understand it in the browser

Uplivra summarizes each capture: what stands out (retransmissions, resets, errors), who talked most, the services in use and the DNS lookups made. Download the file to open it in Wireshark when you need to go deeper.

Private by default

By default only the first 128 bytes of each packet are kept, enough to diagnose, not enough to read content. Keeping whole packets is a deliberate choice with a warning, and every capture records who started it and why.

Pricing

$1 per device per month (proposed introductory price).