Extensible 10-100G Packet Capture Appliance for Deep Network Analysis
Accelerate Packet-Level Troubleshooting, Threat Investigation, and Compliance Visibility
Full PCAP Retention | Visual Dashboards | Wireshark Ready
CAPTURE
Capture every packet at sustained speeds up to 100Gbps with lossless write-to-disk performance. FPGA-accelerated SmartNIC architecture ensures nanosecond-accurate timestamps and zero data gaps—even in high-throughput environments.
FORENSICS
Retain and index full-fidelity packet data for rapid search, replay, and investigation. Historical PCAP visibility enables precise root cause analysis before, during, and after security or performance incidents.
ANALYTICS
Transform packet data into actionable insight with Layer 2–7 metadata extraction, expert event detection, and intuitive visualization. Integrated analysis tools accelerate troubleshooting, SLA validation, and compliance reporting.
Product Selector
| Product Model | Capture Option | Storage Option | Subscription & Support Option | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1/10G | 25G | 40G | 100G | 90TB | 180TB | 360TB | 504TB | 720TB | 1008TB | 2016TB | 1 Year | 3 Year | 5 Year | |
| PacketGrizzly Lite | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | |||
| PacketGrizzly Heavy | Yes | Yes | Yes | Yes | Yes (x1-4) | Yes (x1-4) | Yes (x1-4) | Yes | Yes | Yes | ||||
| External Storage Unit | Yes | Yes | Yes | Yes | Yes | Yes | ||||||||
PacketGrizzly Lite 100G Packet Capture Appliance
The PacketGrizzly Lite is a high-performance, packet capture appliance designed specifically for demanding environments where speed, scalability and reliability are critical. Optimised for comprehensive network traffic visibility and long-term packet retention, it offers continuous capture-to-disk performance of 200 Gbit/s with full data integrity, making it ideal for network diagnostics, forensic investigations, compliance monitoring and incident response. Whether capturing traffic before, during, or after an event, PacketGrizzly Lite ensures complete data integrity with up to 737 TB of integrated, and optionally hardware-encrypted, storage. Thanks to a robust FPGA-based architecture, our packet capture and traffic recorder solution offers deduplication, capture filters, dynamic packet slicing and nanosecond-accurate timestamping, allowing teams to maximise storage efficiency without compromising visibility.
With precise 10-nanosecond hardware timestamping, PTP synchronization, and integrated deduplication, PacketGrizzly Lite provides the forensic accuracy required for demanding security and compliance analysis. It supports native PCAP and PCAPNG formats and integrates seamlessly with industry-standard tools such as Wireshark and Suricata. Preconfigured dashboards and analysis software provide real-time visibility into live traffic and historical trends.
PacketGrizzly Lite is designed with high availability features to maintain operational continuity in the event of hardware failure, and also offers scalable licensing and integrated storage, supporting flexible deployment and future expansion. It is an ideal solution for enterprises, telecommunications providers, internet service providers, and secure infrastructure environments that require robust, scalable packet-level visibility.
- Protect large-scale network environments with sustained, lossless high-speed packet capture and scalable storage architecture designed for extended packet retention and forensic network visibility
- Accelerate MTTR with high-performance indexing, intelligent filtering, and rapid packet search that enables analysts to quickly locate and reconstruct critical network events
- Enable deep forensic investigations with full-fidelity packet recording, nanosecond-accurate timestamping, and advanced capture optimization including slicing, deduplication, and filtering
- Support long-term compliance and security monitoring with scalable storage expansion that preserves historical network traffic for regulatory audits and threat investigations
- Integrate seamlessly into existing SOC and NetOps workflows through native PCAP/PCAP-NG export, intuitive dashboards, and compatibility with Wireshark and other analysis tools
- Reduce operational risk with enterprise-grade architecture designed for continuous capture, high-capacity storage, and reliable performance in mission-critical network environments
- Enable faster root cause analysis with complete historical packet visibility before, during, and after network incidents
- Continuous lossless 100G capture-to-disk (CTD) full packet capture, supporting up to 125G throughput with packet slicing and compression, and scalable 90TB–720TB SSD storage
- Up to 3 Smart FPGA capture cards supporting 10G/25G/40G/100G interfaces with SFP/SFP+/SFP28 and QSFP+/QSFP28 connectivity, including fan-out and adapter modes
- FPGA-accelerated packet processing with deduplication, dynamic packet slicing, capture filtering, and nanosecond-accurate timestamping
- • IEEE 1588v2 PTP support for precise time synchronization across distributed monitoring environments
- Native PCAP/PCAPNG support with intuitive Web UI for advanced traffic analysis, packet search, and PCAP export
- Accelerated MTTR through visualized traffic flows, metadata analysis, and packet-level investigation tools
- Large 8GB/12GB hardware capture buffer to absorb microbursts and ensure lossless recording during peak traffic
- Enterprise storage architecture with RAID-protected SSD storage (RAID 0, 5, 6, 50, 60) and dedicated RAID-1 NVMe system drives for operating system resilience
- Advanced Layer 2–7 traffic analytics, flow analysis, VoIP/video analysis, and network troubleshooting
- Optional hardware-encrypted packet storage supporting FIPS 140-2, ISO/IEC 27040, and NIST 800-88 compliance
- 2RU enterprise rack-mount appliance with redundant 1100W power supplies, designed for continuous operation in enterprise and service provider environments
| SKU | SSD Storage | Capture Smartnic |
|---|---|---|
| NX-LC-25G-*TB-SA-**Y | 90TB, 180TB, 360TB, 720TB | 4 x 1G/10G/25G SFP28 |
| NX-LC-40G-*TB-SA-**Y | 90TB, 180TB, 360TB, 720TB | 2 x 40G QSFP+ |
| NX-LC-100G-*TB-SA-**Y | 90TB, 180TB, 360TB, 720TB | 2 x 100G QSFP28 / 2 x 40G QSFP+ |
| NX-LC-25G100G-*TB-SA-**Y | 90TB, 180TB, 360TB, 720TB | 2x 100G QSFP28 / 2 x 40G QSFP+ / 4 x 1G/10G/25G SFP28 |
PacketGrizzly Heavy 100G Packet Capture Appliance
The PacketGrizzly Heavy is a high-performance, rack-mountable packet capture appliance built for environments that demand scale, speed, and resilience. Designed for deep traffic visibility and long-term packet retention, it delivers ultra-fast, full-fidelity 100Gbps sustained capture-to-disk, making it ideal for network troubleshooting, forensic analysis, compliance audits, and incident response. Whether capturing packets before, during, or after critical events, PacketGrizzly Heavy ensures uncompromised data integrity at petabyte scale.
Engineered with a robust FPGA-based architecture, this packet capture appliance supports up to 8PB of extensible storage, powered by up to 4 external storage units equipped with self-healing drives and autonomous drive regeneration for unmatched data durability. It includes advanced capture compression, intelligent filtering, dynamic packet slicing, and a comprehensive set of RAID options (0, 5, 6, 50, 60, ADAPT) to maximize uptime and optimize storage efficiency.
With 10-nanosecond hardware timestamping, PTP synchronization, and built-in deduplication, PacketGrizzly Heavy delivers forensic-grade accuracy for high-stakes investigations and compliance monitoring. Native support for PCAP and PCAP-NG formats ensures seamless interoperability with tools like Wireshark, Suricata, and other industry-standard platforms. Fully integrated dashboards and analysis software provide out-of-the-box visibility into both real-time network traffic and historical packet data, empowering teams to act quickly in mission-critical enterprise, telecom, and data center environments. Built-in high-availability options ensure continuous operation even in the event of hardware failures, minimizing downtime and risk.
With scalable licensing and modular expansion, PacketGrizzly Heavy is fully adaptable to future network growth. Purpose-built for high-volume packet capture in core network, ISP, and high-security environments, it’s the definitive choice for organizations requiring resilient, petabyte-scale packet visibility.
- Capture and retain massive volumes of network traffic with sustained, lossless 100Gbps full packet capture and petabyte-scale storage expansion, ensuring complete historical visibility for investigations, compliance, and troubleshooting
- Enable long-term forensic analysis at scale with modular storage architecture supporting multiple External Storage appliances and multi-petabyte retention for deep historical packet analysis
- • Accelerate incident response and MTTR with high-speed indexing, intelligent filtering, and advanced analytics that allow security and NetOps teams to rapidly locate and investigate network events
- Deliver forensic-grade traffic accuracy through FPGA-accelerated packet processing, nanosecond timestamping, and PTP time synchronization for precise event reconstruction
- Optimize capture efficiency with deduplication, dynamic packet slicing, compression, and intelligent filtering, reducing storage overhead while preserving critical packet data
- Strengthen security investigations and compliance validation with full-fidelity packet recording that enables analysts to replay, reconstruct, and verify network activity before, during, and after incidents
- Ensure continuous operation with high-availability architecture, RAID-protected storage, and self-healing drivesdesigned for mission-critical enterprise, telecom, and service provider environments
- Continuous lossless 100G capture-to-disk (CTD) full packet capture, supporting up to 125G throughput with packet slicing and compression
- Up to 3 high-speed SmartFPGA capture cards supporting 10G/25G/40G/100G interfaces per capture appliance
- Flexible interface configurations with SFP/SFP+/SFP28 and QSFP+/QSFP28 ports, including fan-out and adapter modes for multi-speed deployments
- FPGA-accelerated packet processing with deduplication, dynamic packet slicing, capture filtering, and nanosecond-accurate timestamping
- IEEE 1588v2 PTP support for precise time synchronization across distributed monitoring environments
- Native PCAP and PCAPNG support with intuitive Web UI for advanced traffic analysis and PCAP export
- Scalable storage architecture with 504TB to 2,016TB (2PB) per storage appliance, expandable up to 8,064TB (8PB) total capacity using ring-connected storage system
- Enterprise storage reliability with self-healing drives and hardware RAID (0, 1, 5, 6, 10, 50, ADAPT)
- Large 8GB/12GB hardware capture buffer to absorb microbursts and ensure lossless packet recording under peak traffic conditions
- Dedicated RAID-1 NVMe M.2 system drives for operating system resilience and stable platform performance
- Advanced Layer 2–7 traffic analytics, flow visualization, VoIP/video analysis, and network performance troubleshooting
- Accelerated MTTR through visualization of metadata, communication flows, and packet-level investigation tools
- Optional hardware-encrypted packet storage supporting FIPS 140-2, ISO/IEC 27040, and NIST 800-88 compliance
- Enterprise hardware architecture with redundant 1100W power supplies
- 2RU enterprise rack-mount appliance and 5U storage appliance design with redundant 1100W power supplies, designed for continuous operation in enterprise and service provider environments
| SKU | SSD Storage | Capture Smartnic |
|---|---|---|
| NX-LC-25G-SRV-**Y | External* | 4 x 1G/10G/25G SFP28 |
| NX-LC-25G40G-SRV-**Y | External* | 4 x 1G/10G/25G SFP28 / 2x 40G QSFP+ |
| NX-LC-40G-SRV-**Y | External* | 2 x 40G QSFP+ |
| NX-LC-100G-SRV-**Y | External* | 2 x 100G QSFP28 / 2 x 40G QSFP+ |
PacketGrizzly External Storage Unit
The PacketGrizzly External Storage Unit (ESU) is a high-capacity, rack-mountable 5RU expansion appliance designed to scale packet capture appliance deployments for petabyte-class packet retention. Supporting up to four units per capture system, each module provides between 504TB and 2,016TB of gross storage, allowing systems to scale up to a massive 8,064TB (8PB) when configured in a ring network topology.
Built for resilience and maximum uptime, each unit includes hardware RAID support (0, 1, 5, 6, 10, 50, ADAPT), redundant 2200W platinum-rated power supplies, and self-healing drives with autonomous drive regeneration to maintain data integrity even in the face of hardware degradation. Optimized for long-term packet archiving, this expansion module supports advanced capture compression, dynamic packet slicing, and intelligent filtering, enabling organizations to maximize usable storage capacity while reducing analytical noise.
Modular by design, PacketGrizzly ESUs feature hot-swappable components and scalable licensing, making it easy to expand capacity seamlessly as network traffic volumes increase.
Engineered to the highest standards, these storage appliances integrate tightly with PacketGrizzly packet capture appliances, supporting high-availability configurations to ensure uninterrupted packet capture at scale. The PacketGrizzly ESU is ready for deployment in enterprise, service provider, and national security environments that demand extreme durability and high-performance storage.
- Expand packet retention capacity with high-density external storage designed for PacketGrizzly capture systems, enabling scalable storage from hundreds of TB to multi-PB historical packet archives
- Support long-term forensic investigations and compliance requirements with full-fidelity packet retention that preserves critical network traffic for extended analysis and audit validation
- Scale seamlessly with modular storage expansion architecture, allowing multiple storage units to be interconnected in a ring topology for PB-scale environments
- Ensure data integrity and reliability with enterprise-grade storage architecture featuring self-healing disks, RAID protection, and resilient high-availability design
- Accelerate investigations with high-speed packet retrieval and indexing, enabling analysts to quickly locate and analyze historical network events across massive packet datasets
- Strengthen security and compliance posture by maintaining complete historical packet records for threat investigations, regulatory audits, and incident reconstruction
- Reduce operational complexity with plug-and-scale expansion integrated directly with PacketGrizzly capture appliances, enabling seamless growth of packet retention infrastructure without disrupting monitoring operations
- Scalable 504TB–8,064TB (8PB) storage capacity, supporting up to 4 External Storage Units (ESU) per PacketGrizzly capture appliance in a ring expansion architecture
- Enterprise storage reliability with self-healing drives and hardware RAID (0, 1, 5, 6, 10, 50, ADAPT) for performance, redundancy, and data protection
- High-density 19″ rack-mount 5RU ESU designed for large-scale packet retention environments
- Designed for data center environments with redundant 2200W power supplies ensuring high availability and continuous operation
| SKU | Disk Storage | Scaling | Connectivity |
|---|---|---|---|
| NX-LC-504-STG | 504TB* | The External Packet Storage can be expanded in a ring network to a total of 4 appliances with a total gross capacity of up to 8,064 TB. | All External Packet Storage can be accessed via – eSAS – iSCSI – or Fibre Channel. |
| NX-LC-1008-STG | 1,008TB* | ||
| NX-LC-2016-STG | 2,016TB* |
FEATURED RESOURCES
Network Visibility for Our Customers
Infographic
Why You Need Packet Capture
Video
Why Use Network Packet Capture
Case Study
100G Packet Capture in Telecom Network
Deployment
SERVICE & SUPPORT
Unparalleled Multi-Level Service & Support for Peace of Mind
All NEOXPacketGrizzly Capture Appliances come with NEOX SILVER Support and can be upgraded to GOLD Support for advanced replacement in case of a hardware failure.