Savvius announced a major upgrade to Omnipeek, its software for network performance diagnostics and troubleshooting, and now with version 10, security investigations.
Omnipeek 10 dramatically streamlines network troubleshooting and security investigations using powerful packet data analytics and visualizations that can be adapted to any workflow. Omnipeek network forensics software provides network engineers and security analysts a one-stop solution to ensure that network and network-related security issues can be found and dealt with quickly and effectively.
"Increasingly, security analysts are turning to packet data for fast, accurate investigations," said Jay Botelho, Director of Products, Savvius. "Traditional packet data software is awkward and time-consuming in a security investigation. Omnipeek 10 is the first network forensics software that gives both network and security professionals access to just the specific data they need."
Omnipeek 10 gives users the ability to manage packet analysis through a single, streamlined user interface that can now include security alerts from popular open-source IDS platforms such as Snort and Suricata. By highlighting packet data corresponding to these alerts, Omnipeek 10 makes possible immediate, detailed analysis of suspected breaches. Both network and security professionals will appreciate Omnipeek 10's ability to open multiple large capture files simultaneously by filtering the packet files before they are loaded and analyzed. This greatly reduces file size and helps to speed up response times.
Another advanced feature of interest to both network and security professionals in Omnipeek 10 is a Files View that reconstructs files transmitted via HTTP, allowing analysts to see exactly what files were transferred at a particular time between every user on the network. Users can search assembled packet payloads for any string, filter data by country, add as many custom decode columns as they require, and perform fast forensics searches.
New and Updated Features in Omnipeek 10:
- View File Content - Reconstructs files by extracting data from reassembled HTTP payloads. This is performed automatically when a packet file is opened, and provides critical information about file content.
- Security Events from Snort and Suricata - Ability to import analytical results from Snort and Suricata, and overlay the resulting security alerts against the packet data for immediate, detailed analysis of any suspected breaches.
- Investigation Overview - Provides summary level information about the entire packet file under analysis, enabling a rapid transition to any time segment.
- Savvius Omnipliance Status - Notifies administrators immediately, via syslog and/or email, if a Savvius Omnipliance drive goes down or a network capture stops.
- Customize Packet Decode Views - Creates unique packet decode columns based on any information within packets, making it easy to find and compare packets that contain elements under investigation.
- Filter Files to Maximize Computing Bandwidth - Filters packet files before loading packets for analysis, using parameters such as IP addresses and/or port ranges, significantly increasing analysis performance on computers with limited resources.
- Faster Forensic Searches - Significantly increases the speed of packet data retrieval from disk, making post-capture analysis much more efficient.
Omnipeek 10 is available now.
The Latest
In the heat of the holiday online shopping rush, retailers face persistent challenges such as increased web traffic or cyber threats that can lead to high-impact outages. With profit margins under high pressure, retailers are prioritizing strategic investments to help drive business value while improving the customer experience ...
In a fast-paced industry where customer service is a priority, the opportunity to use AI to personalize products and services, revolutionize delivery channels, and effectively manage peaks in demand such as Black Friday and Cyber Monday are vast. By leveraging AI to streamline demand forecasting, optimize inventory, personalize customer interactions, and adjust pricing, retailers can have a better handle on these stress points, and deliver a seamless digital experience ...
Broad proliferation of cloud infrastructure combined with continued support for remote workers is driving increased complexity and visibility challenges for network operations teams, according to new research conducted by Dimensional Research and sponsored by Broadcom ...
New research from ServiceNow and ThoughtLab reveals that less than 30% of banks feel their transformation efforts are meeting evolving customer digital needs. Additionally, 52% say they must revamp their strategy to counter competition from outside the sector. Adapting to these challenges isn't just about staying competitive — it's about staying in business ...
Leaders in the financial services sector are bullish on AI, with 95% of business and IT decision makers saying that AI is a top C-Suite priority, and 96% of respondents believing it provides their business a competitive advantage, according to Riverbed's Global AI and Digital Experience Survey ...
SLOs have long been a staple for DevOps teams to monitor the health of their applications and infrastructure ... Now, as digital trends have shifted, more and more teams are looking to adapt this model for the mobile environment. This, however, is not without its challenges ...
Modernizing IT infrastructure has become essential for organizations striving to remain competitive. This modernization extends beyond merely upgrading hardware or software; it involves strategically leveraging new technologies like AI and cloud computing to enhance operational efficiency, increase data accessibility, and improve the end-user experience ...
AI sure grew fast in popularity, but are AI apps any good? ... If companies are going to keep integrating AI applications into their tech stack at the rate they are, then they need to be aware of AI's limitations. More importantly, they need to evolve their testing regiment ...
If you were lucky, you found out about the massive CrowdStrike/Microsoft outage last July by reading about it over coffee. Those less fortunate were awoken hours earlier by frantic calls from work ... Whether you were directly affected or not, there's an important lesson: all organizations should be conducting in-depth reviews of testing and change management ...
In MEAN TIME TO INSIGHT Episode 11, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses Secure Access Service Edge (SASE) ...
