Savvius announced a major upgrade to Omnipeek, its software for network performance diagnostics and troubleshooting, and now with version 10, security investigations.

Omnipeek 10 dramatically streamlines network troubleshooting and security investigations using powerful packet data analytics and visualizations that can be adapted to any workflow. Omnipeek network forensics software provides network engineers and security analysts a one-stop solution to ensure that network and network-related security issues can be found and dealt with quickly and effectively.

"Increasingly, security analysts are turning to packet data for fast, accurate investigations," said Jay Botelho, Director of Products, Savvius. "Traditional packet data software is awkward and time-consuming in a security investigation. Omnipeek 10 is the first network forensics software that gives both network and security professionals access to just the specific data they need."

Omnipeek 10 gives users the ability to manage packet analysis through a single, streamlined user interface that can now include security alerts from popular open-source IDS platforms such as Snort and Suricata. By highlighting packet data corresponding to these alerts, Omnipeek 10 makes possible immediate, detailed analysis of suspected breaches. Both network and security professionals will appreciate Omnipeek 10's ability to open multiple large capture files simultaneously by filtering the packet files before they are loaded and analyzed. This greatly reduces file size and helps to speed up response times.

Another advanced feature of interest to both network and security professionals in Omnipeek 10 is a Files View that reconstructs files transmitted via HTTP, allowing analysts to see exactly what files were transferred at a particular time between every user on the network. Users can search assembled packet payloads for any string, filter data by country, add as many custom decode columns as they require, and perform fast forensics searches.

New and Updated Features in Omnipeek 10:

- View File Content - Reconstructs files by extracting data from reassembled HTTP payloads. This is performed automatically when a packet file is opened, and provides critical information about file content.

- Security Events from Snort and Suricata - Ability to import analytical results from Snort and Suricata, and overlay the resulting security alerts against the packet data for immediate, detailed analysis of any suspected breaches.

- Investigation Overview - Provides summary level information about the entire packet file under analysis, enabling a rapid transition to any time segment.

- Savvius Omnipliance Status - Notifies administrators immediately, via syslog and/or email, if a Savvius Omnipliance drive goes down or a network capture stops.

- Customize Packet Decode Views - Creates unique packet decode columns based on any information within packets, making it easy to find and compare packets that contain elements under investigation.

- Filter Files to Maximize Computing Bandwidth - Filters packet files before loading packets for analysis, using parameters such as IP addresses and/or port ranges, significantly increasing analysis performance on computers with limited resources.

- Faster Forensic Searches - Significantly increases the speed of packet data retrieval from disk, making post-capture analysis much more efficient.

Omnipeek 10 is available now.