Freedom251 › Network Protocol Analyzers
Trisul Network Analytics
What Trisul Network Analytics is
Trisul Network Analytics analyzes raw packets and network-flow summaries for monitoring and forensics. Its stated audiences include ISPs, security teams, and enterprise networks. The platform accepts NetFlow, sFlow, IPFIX, packets, SNMP, and logs, with more than 200 built-in traffic metrics plus custom metrics. Detection features include machine-learning anomaly detection, threat feeds, signature-based IDS, and flow events. Trisul reconstructs and stores flows, enriches them with Flow Taggers, and stores raw packets for later investigation and drilldown. Linux-based probes process traffic, while hubs provide database and web-server functions. Integrations include Grafana and Kibana; the trial license also supports API export to Splunk and Elasticsearch. A Lua analytics API and Protocol Buffers database API expose metrics, flows, documents, and packets. The free trial lasts seven days and permits one probe, 10 GB packet storage per probe, two NetFlow routers, and 20 interface trackers. Production licenses are perpetual one-time purchases, with Small, Medium, and Unlimited tiers based on IP counts.
Who it suits
Trisul suits ISPs, security teams, and enterprise networks needing packet-level monitoring, flow analysis, and forensic investigation. Linux deployment and API access also support technical network operations.
What it does well
- Ingests packets, flows, SNMP, and logs
- Over 200 built-in traffic metrics
- Stores flows and raw packets
- Machine-learning and signature-based detection
- Grafana and Kibana integrations
What to know first
- Seven-day trial has probe and storage limits
- Traffic decryption is not supported
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free 7-Day Trial License | Free 7-Day Trial License · 7-day trial · 10 GB packet storage per probe · one probe · maximum 2 NetFlow routers · maximum 20 interface trackers | Free |
As trisul.org lists them, read 7 Oct 2026. The maker's own page has the final word.
Verdict
Trisul provides packet and flow visibility with detection, enrichment, storage, and API options for network operations. Its trial is tightly limited, while production licensing is perpetual and tiered by IP capacity.
Facts from Trisul Network Analytics's own pages
- Deployment
- Trisul uses Linux-based probes and hubs, with probes processing traffic and hubs providing database and web server functions. · trisul.org, 7 Oct 2026
- Detection
- The feature tour lists ML-based anomaly detection, threat detection via feeds, signature-based IDS, and flow events. · trisul.org, 7 Oct 2026
- Extensibility
- Trisul provides a Lua analytics API and a Protocol Buffers-based database API for retrieving metrics, flows, documents, and packets. · trisul.org, 7 Oct 2026
- Flow storage
- Trisul says it reconstructs and stores all flows without loss and supports flow enrichment with Flow Taggers. · trisul.org, 7 Oct 2026
- Headquarters
- Chennai, Tamil Nadu, India · trisul.org, 28 Sept 2026
- Integrations
- The site says Trisul can integrate with Grafana and Kibana, and its trial license supports API export to Splunk and Elasticsearch. · trisul.org, 7 Oct 2026
- Metrics
- The feature tour says Trisul includes over 200 built-in network traffic metrics and supports custom metrics. · trisul.org, 7 Oct 2026
- Packet analysis
- Trisul stores raw packets for later analysis and supports packet drilldown from monitored objects. · trisul.org, 7 Oct 2026
- Paid licensing
- Production licenses are perpetual one-time purchases, with tiers described as Small up to 500 IPs, Medium up to 3000 IPs, and Unlimited. · trisul.org, 7 Oct 2026
- Purpose
- Trisul analyzes raw packets and network flow summaries for network monitoring and forensics. · trisul.org, 7 Oct 2026
- Security and compliance use
- The site describes packet-level threat investigation with built-in IDS and offers IPDR log generation and storage for ISP compliance. · trisul.org, 7 Oct 2026
- Support
- The support page directs users to documentation, a community forum, and email; the trial license lists email and forum support. · trisul.org, 7 Oct 2026
- Supported users
- The site identifies ISPs, security teams, and enterprise networks as audiences for its network traffic monitoring solutions. · trisul.org, 7 Oct 2026
- Traffic inputs
- The platform ingests NetFlow, sFlow, IPFIX, packets, SNMP, and logs. · trisul.org, 7 Oct 2026
- Trial limits
- The free 7-day license allows one probe, up to 10 GB packet storage per probe, and up to two NetFlow routers. · trisul.org, 7 Oct 2026
Where Trisul Network Analytics stands on Freedom251
- Network Protocol Analyzers#26 of 30