Documentation
LiveCapture: LiveCapture User Guide
Introduction
Introduction
About LiveCapture
Congratulations on your purchase of LiveCapture™! LiveCapture appliances are designed and optimized for raw packet capture and analysis, without dropping a packet. Packets are captured and stored at up to 40 Gbps (LiveCapture 3100 with external storage attached) in standard packet file formats for easy access to the packet data. Stored packet files can be indexed with a variety of characteristics to make retrieval of relevant packets significantly faster. LiveCapture works together with Omnipeek (Windows software) or LiveNX Peek (web-based software), LiveAction’s award-winning network analysis software.
With Omnipeek or LiveNX Peek, users can initiate forensic searches for packet data on the LiveCapture appliance. The packets meeting the search criteria are analyzed on the appliance using the built-in analytical software, and the results are visualized and further analyzed using Omnipeek. Packet files can also be downloaded and stored for off-line analysis by Omnipeek. LiveCapture (FKA Omnipliance) is widely used in enterprises alongside network monitoring solutions to provide the most complete data required for true root-cause analysis – the packets themselves.
LiveCapture is available in the following configurations:
 
LiveCapture 1100
LiveCapture 3100
Chassis
1U
2U
CPU


Speed
Turbo
Cores
HT
Intel® Xeon® Silver 4208


2.1 GHz

8 C
16 HT
Intel® Xeon®
2x6126 Gold

2.6 GHz
3.7 GHz
12 C
24 HT
Memory
32 GB
192 GB
Available Slots
1x FH/HL x8
1x HH/HL x8
1x FH/FL x16
2x FH/FL x8
2x HH/HL x8
Integrated Network Interfaces
4x 1GBASE-T
iDRAC
4x 1GBASE-T
iDRAC
Storage-OS
Included as part of Storage-Data
2x 2 TB NLSAS (3.5")
Storage-Data
4x4 TB SAS (16 TB)
16x8 TB SAS (128 TB)
or
16x4 TB SAS (64 TB)
Capture Adapter Options
(High performance network analysis cards)
1G Capture Adapter (4-port)
1G Capture Adapter (4-port)
10G Capture Adapter
(2- or 4-port)
40G Capture Adapter
(2-port)
100G Capture Adapter
(2-port)
Additional
 
PERC H840 Adapter (used only for storage subsystem)
NOTE: In this User Guide, references to ‘LiveCapture’ refer to the complete collection of LiveCapture configurations described in the table above. When necessary, references to a specific LiveCapture configuration are specified to note any differences between configurations.
The Capture Engine software pre-installed on LiveCapture works in conjunction with Omnipeek, a separate software program required for the monitoring and analysis of the packets captured remotely by LiveCapture. For detailed instructions on how to view and analyze remote captures from within the Omnipeek console, please see the Omnipeek User Guide or Omnipeek online help. For more information on the Capture Engine software, please see Chapter 3, Capture Engines.