Colasoft Capsa vs. DX Spectrum

Capsa is highly recommended to be used in small dense areas of a network where it makes sense to be able to run analytics off of a mirror port to gain insight into traffic trends. It is a costly product to install in branch locations, and requires a decent spec hardware to run appropriately

Incentivized

As I said before, not only for Spectrum, but for any monitoring tool, you need to know what is critical in your environment and think about how exactly you should monitor and treat it. If you have done that, everything will work just fine.

• Well Suited - Networking Monitoring
• Less Appropriate - When you need to customize some monitoring and to update the version

Incentivized

• Robust Application. Able to handle traffic that most businesses will throw at it.
• Easy to use. Easy to setup captures and filter down to specific traffic types.
• Relatively cheap for what it's able to accomplish.

Incentivized

• Polling and traps can be configured to take heartbeats at specified intervals and notify on an event in real-time, respectively.
• Topology of devices gives a high-level overview of network architecture.
• Discovery of devices is simple and secure with the use of community strings.
• Details can be added per device or alarm type for actions to be taken to make troubleshooting easier.

Incentivized

• Needs options to scale to 10Gb/s networks. The cutoff for performance looks to be around 3Gb/sl
• Needs API access to trigger capturesl
• Needs Agents for remote capturesl

Incentivized

• NOC
• Data Center/Telecom

Incentivized

Colasoft performs more like the traditional wireshark as opposed to other solutions that tend to focus on graphs instead of giving you the raw data. I personally prefer the raw data, and then the ability to build graphs upon this (which Capsa can do). This allows for quicker analysis and makes it easier to relate to.

Incentivized

Other tools I have used are more server/application-centric. CA Spectrum seems to work effectively and efficiently for network devices. Notification delays can be set to grant grace periods in case of network blips or false positives, which occur ALL the time. Other monitoring tools send event notifications immediately and would clear instantly, which while on-call can wake a technician for no reason.

Incentivized

• While the product doesn't detect malware, it has helped track down malware infected machines by using data from other applications to run filters to look for known traffic destinations for that malware. For me this is a huge ROI since malware can be the great unknown.
• Relatively cheap compared to the feature set.

Incentivized

• Proactive monitoring for networking
• To many times to plan an update

Incentivized