Freedom251 › Network Packet Capture Software

EndaceProbe

Paid APILinuxSelf-hostedWeb

What EndaceProbe is

EndaceProbe continuously captures full network packets and keeps recorded network history for investigating security threats, performance issues, and outages. It is offered as physical appliances and as cloud or virtual deployments, with options for AWS, Microsoft Azure, VMware, KVM, and Nutanix. Listed models span 500 Mbps to 100 Gbps of sustained recording and packet storage from 1 TB to more than 3 PB; the product information also lists hardware recording capacities from 10 Gb/s to 100 Gb/s.

InvestigationManager provides central search and data mining, while EndaceCMS manages physical and cloud probes across a fabric. Browser-based EndaceVision searches and examines historical packet data, and hosted Wireshark decodes packets on the appliance without downloading large PCAP files. Supported analysis includes live capture, offline trace analysis, display filters, and protocol decryption; supported capture formats are pcap, pcapng, and ERF. Endace lists prebuilt Elastic integrations and an API for open-source, custom, and Fusion Partner tools. Appliances can host third-party tools such as EndaceFlow using Application Dock. Endace describes hardened Linux controls, encrypted communications, security validations and certifications, and DoDIN APL listing. Pricing is available on request. The Americas support terms include round-the-clock availability and cover the current and one previous major software release.

Who it suits

EndaceProbe suits security and network teams that need continuous packet records to investigate threats, performance issues, or outages. Its appliance, cloud, and virtual deployment options and listed capacities also address environments with varied recording scale or hosting needs.

What it does well

Continuous full packet capture preserves network history for investigations.
Deployments include appliances, cloud, and virtual environments.
EndaceVision searches historical data in a browser.
Hosted Wireshark decodes packets without downloading large PCAP files.
Analysis supports live capture, offline traces, filters, and decryption.
Appliances can host third-party tools such as EndaceFlow.

What to know first

Pricing is available on request.
Support terms cover the current and one previous major software release.
Listed security certifications apply to specified models for Common Criteria NDcPP v2.2e.

Limits

Pricing is available on request. Support terms cover the current and one previous major release of any software product.

Plans

Plan	Billed and limits	Price
EndaceProbe	On-premises appliances and cloud deployments; model capacities range from 500 Mbps to 100 Gbps sustained recording	On request

As endace.com lists them, read 4 Oct 2026. The maker's own page has the final word.

Getting started

Visit the EndaceProbe product website.
Request pricing from Endace.
Choose an on-premises appliance or a cloud or virtual deployment.
Select from the listed AWS, Microsoft Azure, VMware, KVM, or Nutanix options.
Use browser-based EndaceVision to search historical packet data.

Verdict

Choose EndaceProbe if you need continuous packet capture with historical search and analysis across appliance, cloud, or virtual deployments. Its listed formats, filters, decryption, integrations, and hosting options support varied investigation workflows. Consider support scope and request pricing when assessing fit.

Questions

What does EndaceProbe do?

It continuously captures full packets and records network history for investigating security threats, performance issues, and outages.

Where can it be deployed?

Options include physical appliances and cloud or virtual deployments, including AWS, Microsoft Azure, VMware, KVM, and Nutanix.

What packet analysis does it support?

It supports live capture, offline trace analysis, display filters, and protocol decryption. Capture formats include pcap, pcapng, and ERF.

What integrations are available?

Endace describes prebuilt Elastic integrations and an API for open-source, custom, and Fusion Partner tools.

How is EndaceProbe priced?

It is a paid product, with pricing available on request.

What support is included?

Americas support terms list 24×7×365 availability, phone and email support, remote diagnostics, software updates, and a five-minute initial phone response time. Coverage is for the current and one previous major release.

Facts from EndaceProbe's own pages

Deployment: The product is available as physical appliances and as cloud or virtual deployments, including AWS, Microsoft Azure, VMware, KVM, and Nutanix options. · endace.com, 4 Oct 2026
Founded: 2001 · endace.com, 28 Sept 2026
Headquarters: Auckland, New Zealand · endace.com, 28 Sept 2026
Hosted applications: EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using the platform's application hosting capability. · endace.com, 4 Oct 2026
Hosting: EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using Application Dock. · endace.com, 4 Oct 2026
Integrations: Its APIs and Fusion Partner integrations connect packet history to security and performance monitoring tools, including commercial, open-source, and custom applications. · endace.com, 4 Oct 2026
Intended users: Endace identifies customer sectors including healthcare, retail, banking and finance, military, government, telecom, and broadcast and entertainment. · endace.com, 4 Oct 2026
Investigation: The browser-based EndaceVision application searches and examines historical packet data and includes Wireshark for packet decoding without downloading large pcaps. · endace.com, 4 Oct 2026
OSm controls: OSm uses hardened Linux releases, disables shell access, supports Radius, TACACS, and LDAP authentication, and provides role-based access control. · endace.com, 4 Oct 2026
Packet analysis: EndaceVision is browser-based, and hosted Wireshark can decode packet data on the EndaceProbe without downloading large PCAP files. · endace.com, 4 Oct 2026
Purpose: EndaceProbe provides continuous full packet capture and recorded network history for investigating security threats, performance issues, and outages. · endace.com, 4 Oct 2026
Recording capacity: Listed models range from 10 Gb/s to 100 Gb/s sustained recording for hardware appliances, with cloud and vProbe models also listed. · endace.com, 4 Oct 2026
Recording scale: Listed models range from 500 Mbps to 100 Gbps sustained recording, with listed packet storage from 1 TB to more than 3 PB. · endace.com, 4 Oct 2026
Search and management: InvestigationManager provides central search and data mining, while EndaceCMS provides central fabric management across physical and cloud probes. · endace.com, 4 Oct 2026
Security: Endace states that its probes use a cryptographic module for encrypted communications and have FIPS 140-3 validation, Common Criteria NDcPP v2.2e certification, and DoDIN APL listing. · endace.com, 4 Oct 2026
Security certifications: EndaceProbe models EP-94C8, EP-92C8, EP-2144, and EP-2184 have Common Criteria NDcPP v2.2e certification; Endace also states FIPS 140-3 certification and DoDIN APL listing. · endace.com, 4 Oct 2026
Support: The Americas support terms list 24×7×365 availability, phone and email support, remote diagnostics, software updates, and a five-minute initial phone response time. · endace.com, 4 Oct 2026
Support limit: The support terms cover the current and one previous major release of any software product. · endace.com, 4 Oct 2026

Where EndaceProbe stands on Freedom251

Network Packet Capture Software#13 of 22