SIRIUS Line-rate Capture Storage System

SwiftWing




4U SIRIUS LCSSwiftWing SIRIUS LCS is a full line-rate network packet capture system capable of capturing full-duplex 1ch or 2ch traffic (1,488,095 pps – 64 byte x 2 or 4) in Gigabit and full-duplex in 10 Gigabit Ethernet traffic without packet loss. SwiftWing SIRIUS LCS offers full capture and storage of data directly to its hard disk storage system of up to a massive 144TB.

This offers great usability and capabilities in the analysis of intrusion detection as well as post-analysis of network behavior and environment where long duration of full network traffic capture is required.

 

 

SwiftWing SIRIUS LCS contains a Hardware Filtering Engine that can evaluate and process each network packet header and payload protocol in real-time while ensuring that it achieves full line-rate capture for all frame sizes, without packet loss.

Captured data are stored in the standard PCAP format. It can be used directly with industry standard softwares such as tcpdump or Wireshark. The capture files can be configured to split by file size or time interval and to rotate by deleting older capture files when storage system is almost full.

SwiftWing SIRIUS LCS provides an intuitive Web UI for capture management, filter configuration, real-time statistics and also capture file management.

 

Filter Settings

Easily create up to 4 different filters or create your own custom filter with advance filter expressions

Robust and flexible filter configuration

SwiftWing SIRIUS LCS supports real-time filtering of network traffic.

  • Create simple or advance filter conditions and apply them to the network traffic easily using the intuitive GUI.
  • Pre-defined filter templates and well-known protocols enables fast and accurate creation of filters.
  • Apply up to 4 different filters to the same traffic source or create your own custom filter with advance filter expressions.

 

 

RESTful API library for remote access to data storage

SIRIUS RESTful APISwiftWing SIRIUS LCS comes bundled with an API library that provides a standard interface for remote access to the data storage volume.

  • Secure data storage access via HTTPS and sessions authentication tokens.
  • Retrieve directory listings and files listings.
  • Retrieve stored files PCAP information.
  • Combine and extract stored files remotely by time or filesize options.
SwiftWing SIRIUS LCS API library adheres to the RESTful principles and can be easily integrated to any third-party applications, appliances or customized scripts making it easier to access stored data for forensics analysis, data collaboration or data archives to a remote NAS appliance.

 

Storage management and packet decode on the GUI

SIRIUS Packet View GUI

Built-in packet decode capability enables viewing of packet data directly from the GUI

SwiftWing SIRIUS LCS has a built-in packet decode function that enables the user to browse and view all packet data directly from the browser.

Captured network data are stored and organized by each capture session and each files are listed in order by the files’s timestamp.

  • Browse, lists and view all captured network data directly via the GUI.
  • Navigate through the captures session via time-range.
  • Extract all or parts of the captured data session by specifying the start and end time.
  • Supports decoding and viewing all stored PCAP files conveniently on the GUI.

 

Real-time monitoring and traffic statistics

SIRIUS Packet Statistics Graphs

Summary of Packet size statistic information

View real-time packet capture statistics and traffic information.

  • Capture statistics graph by time.
  • Layer 2 packet counters,
  • Total packets counters and on a port-by-port basis.

 

 

 

 

 

 

Full line-rate capture performance 

20 Gbps capture to disk

 

  • Capture at 20Gbps full line0rate with no packet loss irrespective of packet size. (20Gbps model: LCS-5UL-20G2)
  • Captures dual channel of Gigabit traffic (4Gbps) to disk. (4Gbps model)
  • 2 SFP+ interface is available for 10Gigabit model (10GBASE-SR, 10GBASE-LR, 10GBASE-ER)

 

 

Highly customizable storage capacity

SIRIUS Customizable storage capacitySwiftWing SIRIUS LCS supports a maximum storage capacity of up to 144TB in a single chassis allowing long-term capture of your network’s traffic.

  • Supports from 16TB to 144TB in a 3U to a 9U chassis to meet any demands and requirements.
  • Capture volume can be configured with either RAID 5 or RAID 50.
  • Further customization of storage capacity can be configured.

GbE (4Gbps model) 

 

3U  4U  9U 
Processor Dual Intel Quad Core Xeon   
Memory
 
Standard: 12 Gbyte  
Maximum: 96 Gbyte
RAID RAID 50 (O/S drive with RAID 1)   
Storage Capacity 16TB ~ 32TB  48TB ~ 72TB  96TB ~ 144TB 
Dimensions
(WxHxD mm) 
488 x 133 x 700  483 x 176 x 700  430 x 397 x 693 
Capture Interfaces 4 x SFP
(1000BASE-SX or 1000BASE-LX or 10/100/1000BASE-T)   
Capture channels 2 channels – 4Gbps
1 channel – 4Gbps  
 Capture Performance 4Gbps (64 bytes packet)  

 10GbE (10 Gbps model)

  4U 8U
Processor Dual Intel Quad Core Xeon
Memory Standard: 24 Gbyte
Maximum: 96 Gbyte
RAID RAID 50 (O/S drive with RAID 1)
Storage Capacity 48TB 80TB
Dimensions
(WxHxD mm) 
483 x 176 x 700 483 x 356 x 686
Capture Interfaces 2 x SFP+
(10GBASE-SR or 10GBASE-LR or 10GBASE-ER) 
Capture Performance 12.5 Gbps (64 bytes packet)  16 Gbps (64 bytes packet)

10GbE (20 Gbps model)

  5U Long
Processor Dual Intel Quad Core Xeon
Memory Standard: 24 Gbyte
Maximum: 96 Gbyte
RAID RAID 50 (O/S drive with RAID 1)
Storage Capacity 96TB
Dimensions
(WxHxD mm) 
483 x 223 x 864
Capture Interfaces 2 x SFP+
(10GBASE-SR or 10GBASE-LR or 10GBASE-ER) 
Capture Performance 20 Gbps (64 bytes packet)

For more information, please contact us.