Packet Capture Basics
The Trisul raw packet engine is designed towards these goals :
-
Scaling — The amount of data is only limited by the disk resources at your disposal
-
Multi disk — Supports multiple disks to optimize $/byte
-
Flexibility — Allows you to specify policies to cut down storage requirements
-
Security — Encrypts the raw packet storage
free licence
Free License
Note that the free license only allows you to store a maximum of 10GB per Probe. You can use rules to cut down the traffic, such as not storing encrypted traffic.