nBox Recorder

nBox Recorder is a network traffic recording system.

With nBox Recorder you can capture full-sized network packets at gigabit rate from a live network interface and write them into files. It has been designed and developed mainly because most network security systems rely on capturing all packets (headers and payload), since any packets may have been responsible for the attack or could contain the problems that we are trying to find.

nBox Recorder uses the industry standard PCAP file format to dump packets into files so the resulting output can be easily integrated with existing third party or even open-source analysis tools like ntopng, Wireshark or Snort.

nBox Recorder can be effectively used to perform:

• Off-line network packets analysis by feeding a specialised tool (such as snort or ntopng).
• Reconstruct specific communication flows or network activities.
• Reproduce the previous captured traffic to a different network.