Colasoft Capsa vs EndaceVision

Colasoft Capsa is a Windows network analyzer for monitoring, analyzing and troubleshooting wired and wireless networks. The Enterprise edition captures packets in real time from local networks and can save transmitted data. It analyzes more than 1,800 protocols and sub-protocols, including VoIP, and displays packet details in Hex, ASCII and EBCDIC. Capsa can diagnose network problems and suggest solutions, monitor conversations, reconstruct packet streams and generate reports for selected items, the whole network or a particular network group. Its security analysis detects DoS and DDoS attacks, worm activity, ARP attacks, TCP port scans and suspicious conversations in real time. Users can set email or sound alerts and schedule capture once, daily or weekly. Capsa Free monitors up to 10 IP addresses, ends sessions after four hours and lacks WiFi connection monitoring. Professional is listed at $695, paid once for a single-seat perpetual license, one machine and one year of maintenance. Enterprise is $1,295, paid once and has a 30-day trial.

EndaceVision is a browser-based application for investigating security threats and network or application performance issues from historical packet data. Analysts can search and filter recorded traffic by link name, application classification, IP or MAC address, port, timestamp, and other parameters. EndaceProbes use built-in deep packet inspection to classify captured traffic by application. Visualizations cover bandwidth over time, conversations, traffic over time, and top talkers. MicroVision uses packet timestamps to show short events at microsecond detail, including average and maximum values for each sample point. A hosted Wireshark instance lets analysts decode packets on EndaceProbes or InvestigationManager without downloading large captures. The datasheet lists role-based access control and TACACS security. Access runs in modern desktop or tablet browsers with appropriate credentials. EndaceVision is included on EndaceProbe Analytics Platforms and InvestigationManager, with pcap and ERF capture formats listed. It is aimed at security, network, and IT teams. Endace was founded in 2001 and is headquartered in Auckland, New Zealand. Pricing is available on request.