nChronos vs PacketWatch
nChronos
colasoft.comPacketWatch
packetwatch.comSide by side
| Figure | nChronos | PacketWatch |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| Linux | Yes | — |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Network Packet Capture Software | 7.4 (#12) | 7.0 (#19) |
| Deployment | The product uses a client/server architecture, with server-side capture, analysis and storage and a console for viewing and analyzing server data. | The company describes its offering as a SaaS platform and lists self-service deployment under the Self-Managed package. |
| Integrations | nChronos can replay packet files in formats including libpcap used by Wireshark, Ethereal and Tcpdump, plus several vendor packet formats. | PacketWatch describes CrowdStrike Falcon integration for endpoint telemetry and threat containment, and Validin integration for threat intelligence and DNS context. |
| Intended users | The maker says nChronos is designed to monitor network traffic in medium and large corporates. | The company describes the platform as built by threat hunters for threat hunters and says it can complement or replace traditional SOC, SIEM, MSSP, and MDR solutions. |
| Packet capture | The server captures and stores network packets continuously and supports deployment through a network mirror port or link tap. | Passive collectors capture full network packets, while the cloud platform analyzes packet metadata and the page says high-fidelity data is stored locally. |
Plans
PacketWatch
- Co-ManagedPriced on request
- Fully ManagedPriced on request
- Self-ManagedPriced on request
In their own words
nChronos
nChronos is Colasoft’s application-focused network performance analysis system for medium and large corporate networks. Its client/server design places continuous packet capture, analysis, storage and data mining on a server, while a console displays and analyzes the collected data. The server can receive traffic through a network mirror port or link tap and retain packets for later investigation of network or application problems. Real-time statistics and user-defined alerts show network events as they occur. System or custom reports can be scheduled for hourly, daily, weekly or monthly email delivery. Users can define application and transaction monitoring, with profiles for HTTP, FTP, email and DNS. Packet files can be replayed from Colasoft, libpcap and several vendor formats, including files associated with Wireshark, Ethereal and Tcpdump. Linux server systems and Windows consoles are listed, with browser-based server configuration. Standard specifications allow four logical links, eight capture interfaces and two concurrent server connections.
PacketWatch
PacketWatch is network threat-hunting software built around deep packet analysis. Passive collectors capture complete network packets while the cloud platform analyzes packet metadata; the service says high-fidelity data remains stored locally. Machine-learning and artificial-intelligence analytics identify anomalies and create hunt leads, including Command and Control detections. Investigators can filter and replay traffic retrospectively, create nested rules and export PCAP captures as forensic evidence. Virtual collectors capture cloud traffic, with AWS and Azure named as hunting environments. The product addresses persistent threats, insider threats, data exfiltration, Command and Control activity, and IoT, OT and legacy-device activity. Integrations include CrowdStrike Falcon for endpoint telemetry and containment, and Validin for threat intelligence and DNS context. Fully Managed, Co-Managed and Self-Managed SaaS packages are available, with pricing supplied by quote.