Colasoft Capsa vs. NetVizura NetFlow Analyzer

Capsa is highly recommended to be used in small dense areas of a network where it makes sense to be able to run analytics off of a mirror port to gain insight into traffic trends. It is a costly product to install in branch locations, and requires a decent spec hardware to run appropriately

Incentivized

The capacity planning was a big help in our company as we grew the number of connected locations. Grow or die is pretty much the business model of today but that growth is only as good as the network it travels on. Being able to recommend appropriate network requirements is a big deal in our line of business.

Incentivized

• Robust Application. Able to handle traffic that most businesses will throw at it.
• Easy to use. Easy to setup captures and filter down to specific traffic types.
• Relatively cheap for what it's able to accomplish.

Incentivized

• Ease of use

• Needs options to scale to 10Gb/s networks. The cutoff for performance looks to be around 3Gb/sl
• Needs API access to trigger capturesl
• Needs Agents for remote capturesl

Incentivized

• At this point, I don't have any suggestion for improvements.

Incentivized

Colasoft performs more like the traditional wireshark as opposed to other solutions that tend to focus on graphs instead of giving you the raw data. I personally prefer the raw data, and then the ability to build graphs upon this (which Capsa can do). This allows for quicker analysis and makes it easier to relate to.

Incentivized

Easier to use

• While the product doesn't detect malware, it has helped track down malware infected machines by using data from other applications to run filters to look for known traffic destinations for that malware. For me this is a huge ROI since malware can be the great unknown.
• Relatively cheap compared to the feature set.

Incentivized

• As I mentioned in a previous statement, the capacity planning was the big thing. In our line of business, speed is everything. Customers hate to be slowed down so having the appropriate network connections is a must.
• Anomaly Detection with the threshold based alerting has made our network team more proactive in stopping things before they can really affect the company.
• Productivity with the use of monitoring conversations and amount of used bandwidth has helped weed out the works versus the campers.

Incentivized