logoTrisul Network Analytics
  • Features
    • Feature highlights
    • Resources
  • Docs
    • User Guide
    • Reference
    • How tos
    • Docs Home
    • FOR DEVELOPERS
    • LUA API
    • TRP DB query API
    • Developer Zone Wiki
    • Search
  • Blog
  • Pricing
  • Company
    • Careers
    • Contact us
    • Support
  • Download

All parts included

  • Total visibility at full resolution
  • 200+ Traffic and Flow metrics
  • Extract Metadata and Objects
  • Drilldown to packet level instantly
  • No separate Database needed
  • Rich customizable dashboards
Download Solution Datasheets (View All)

Trisul NSM 6.5 Datasheet

Trisul Netflow 6.5 Datasheet

Netflow ISP Features

For Managed Security Service providers

Tons of useful metrics

  • 40+ counter groups at all 7 Layers
  • Real Time monitoring via Web Sockets
  • Fast & Scalable Time Series Database included
  • Dozens of Top-N charts
  • Cardinality (Unique-Hosts per App) built in
  • Monitor YouTube,Facebook,Google usage
  • Create your own derived metrics

Metadata and objects

  • Extract SSL/TLS Certificates
  • HTTP file extraction with real names
  • File Hashes, URLs, and DNS
  • FTS4 Text Search for HTTP Headers
  • Export to Splunk or Elastic Search
  • Automatically match against blacklists
  • Extensible via LUA
Primary use case of these metadata is to match against indicators of compromise.

Flow Analytics

  • Reconstructs and saves all flows
  • Available in NETFLOW and PACKET mode
  • Supports Netflow, JFlow, SFlow
  • Powerful Router > Port drilldowns
  • Built in streaming algorithms
  • Streaming snapshots of live queries
  • Fast Flow DB supports Billions of flows
You can even run two independent contexts of Trisul, one in NETFLOW mode and other in PCAP mode.

Packets are truth

  • Most flexible PCAP storage in market
  • Encrypted by default using AES-128
  • You decide what gets stored
  • Super fast retrieval over long timeframes
  • Pivot from flows, traffic, alerts, metadata
  • Get multiple matches as a single PCAP
Since PCAP storage is inline within Trisul Analytics path, you can create very fine grained policies. Dont waste disk space to store 100s of Gigs of encrypted Netflix & YouTube.

Fully Programmable

Dont get locked in to canned features. A fully Open Public API to help you build on top of Trisul.

  • Fully documented and OPEN
  • Fast LuaJIT based API for analytics
  • Plug in to reassembly, packets, file extraction
  • Growing Trisul Apps repository
  • Create your own D3 based viz

NEW! Trisul EDGES

  • Streaming Graph Analytics made easy
  • Detect relationships instantly
  • No need to roll out Big Data clusters
  • Triple your hunting and pivoting speed
  • Purpose built for Network/Security
  • Answer questions : So what is connected to this?

Fully enabled with the Free Download

  • Intro
  • 100s of metrics
  • Objects & Metadata
  • Store all flows
  • Packets a click away
  • NEW! Trisul EDGES
  • Fully scriptable

Copyright © 2018. Trisul Network Analytics trisul.org

  • FAQ
  • Support
  • Contact us