EndaceProbe vs nChronos
EndaceProbe
endace.comnChronos
colasoft.comSide by side
| Figure | EndaceProbe | nChronos |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Network Packet Capture Software | 7.8 (#10) | 7.4 (#12) |
| Deployment | The product is available as physical appliances and as cloud or virtual deployments, including AWS, Microsoft Azure, VMware, KVM, and Nutanix options. | The product uses a client/server architecture, with server-side capture, analysis and storage and a console for viewing and analyzing server data. |
| Founded | 2001 | 2001 |
| Integrations | Its APIs and Fusion Partner integrations connect packet history to security and performance monitoring tools, including commercial, open-source, and custom applications. | nChronos can replay packet files in formats including libpcap used by Wireshark, Ethereal and Tcpdump, plus several vendor packet formats. |
| Intended users | Endace identifies customer sectors including healthcare, retail, banking and finance, military, government, telecom, and broadcast and entertainment. | The maker says nChronos is designed to monitor network traffic in medium and large corporates. |
| Purpose | EndaceProbe provides continuous full packet capture and recorded network history for investigating security threats, performance issues, and outages. | nChronos is an application-centric network performance analysis system combining a server and console for continuous packet capture, storage, data mining and traffic analysis. |
| Security | Endace states that its probes use a cryptographic module for encrypted communications and have FIPS 140-3 validation, Common Criteria NDcPP v2.2e certification, and DoDIN APL listing. | The maker says connections between nChronos Server and Console are encrypted using a private encryption algorithm. |
| Support | The Americas support terms list 24×7×365 availability, phone and email support, remote diagnostics, software updates, and a five-minute initial phone response time. | The maker provides an online support form and says a Colasoft representative responds to quote requests within one business day. |
Plans
In their own words
EndaceProbe
EndaceProbe continuously records complete network packets, preserving network history for investigations into security threats, performance issues, and outages. It is offered as physical appliances and cloud or virtual deployments on AWS, Microsoft Azure, VMware, KVM, and Nutanix. Listed models sustain recording from 500 Mbps to 100 Gbps, with packet storage ranging from 1 TB to more than 3 PB. InvestigationManager provides centralized search and data mining, while EndaceCMS manages physical and cloud probes. Browser-based EndaceVision searches historical packets and includes hosted Wireshark decoding without downloading large PCAP files. The platform supports live capture, offline trace analysis, display filters, protocol decryption, and pcap, pcapng, and ERF formats. Endace lists Elastic integrations and an API for open-source, custom, and Fusion Partner tools. Appliances can host applications such as EndaceFlow. Security controls include hardened Linux, disabled shell access, authentication options, role-based access, and stated certifications. Pricing is available on request.
nChronos
nChronos is Colasoft’s application-focused network performance analysis system for medium and large corporate networks. Its client/server design places continuous packet capture, analysis, storage and data mining on a server, while a console displays and analyzes the collected data. The server can receive traffic through a network mirror port or link tap and retain packets for later investigation of network or application problems. Real-time statistics and user-defined alerts show network events as they occur. System or custom reports can be scheduled for hourly, daily, weekly or monthly email delivery. Users can define application and transaction monitoring, with profiles for HTTP, FTP, email and DNS. Packet files can be replayed from Colasoft, libpcap and several vendor formats, including files associated with Wireshark, Ethereal and Tcpdump. Linux server systems and Windows consoles are listed, with browser-based server configuration. Standard specifications allow four logical links, eight capture interfaces and two concurrent server connections.