nProbe™ Cento is engineered as a core component of a modular monitoring system, extending beyond basic NetFlow probing. It captures ingress packets, computes flow data, and classifies traffic using Deep Packet Inspection (DPI). When used as a traffic forwarder, it can integrate with applications like IPS/IDS, traffic recorders, and more, enabling optional actions on selected packets or flows. This probe supports NetFlow v5/v9/IPFIX, exporting flow data to JSON, Text, Kafka, Syslog, and ntopng. It handles both IPv4 and IPv6 traffic and offers native PF_RING and PF_RING ZC support for high-speed packet processing. Compatible with NICs from Accolade, Intel, Myricom, Napatech, and Silicom/Fiberblaze, it features a scalable, multithreaded design that balances ingress traffic across multiple streams on multi-core architectures. Layer-7 application visibility is achieved through nDPI or micro-nDPI, enhancing performance with support for protocols like HTTP/HTTPS/DNS. It also provides flow-based load balancing to IDS/IPS (Snort, Bro, Suricata), traffic filtering based on protocols, and a feedback channel for traffic filtering/shunting from an IPS. Traffic filtering and slicing are available for efficient storage when forwarding traffic to applications like n2disk.

Features & Benefits

• NetFlow/IPFIX Support
  • Supports NetFlow v5/v9/IPFIX protocols.
• Flexible Export Options
  • Exports flow data to JSON, Text, Kafka, Syslog, and ntopng.
• Dual Protocol Support
  • Handles both IPv4 and IPv6 traffic.
• High-Speed Packet Processing
  • Offers native PF_RING and PF_RING ZC support for high-speed packet processing.
• NIC Compatibility
  • Supports NICs from Accolade, Intel, Myricom, Napatech, and Silicom/Fiberblaze.
• Scalable Design
  • Features a scalable, multithreaded design for efficient traffic balancing.
• Layer-7 Application Visibility
  • Provides Layer-7 application visibility using nDPI or micro-nDPI.
• IDS/IPS Integration
  • Offers flow-based load balancing to IDS/IPS (Snort, Bro, Suricata).
• Traffic Filtering
  • Enables traffic filtering based on protocols.
• Feedback Channel
  • Includes a feedback channel for traffic filtering/shunting from an IPS.
• Traffic Slicing
  • Supports traffic filtering and slicing for efficient storage.