Colasoft Capsa - A Powerful Yet Simple Tool
March 28, 2017
Colasoft Capsa - A Powerful Yet Simple Tool
Score 9 out of 10
Vetted Review
Verified User
Overall Satisfaction with Colasoft Capsa
Capsa is being used to troubleshoot core issues with some ease. It allows us to run complex filters on packets being mirrored from our core. Its a very stable application that is able to handle most traffic with ease. It is used to view traffic from 30k users and is managed by just a few individuals.
- Robust Application. Able to handle traffic that most businesses will throw at it.
- Easy to use. Easy to setup captures and filter down to specific traffic types.
- Relatively cheap for what it's able to accomplish.
- Needs options to scale to 10Gb/s networks. The cutoff for performance looks to be around 3Gb/sl
- Needs API access to trigger capturesl
- Needs Agents for remote capturesl
- While the product doesn't detect malware, it has helped track down malware infected machines by using data from other applications to run filters to look for known traffic destinations for that malware. For me this is a huge ROI since malware can be the great unknown.
- Relatively cheap compared to the feature set.
- SteelCentral Packet
Colasoft performs more like the traditional wireshark as opposed to other solutions that tend to focus on graphs instead of giving you the raw data. I personally prefer the raw data, and then the ability to build graphs upon this (which Capsa can do). This allows for quicker analysis and makes it easier to relate to.