The recorder under everything. NetBlackBox Pro captures every packet at line rate with zero loss, with a built-in packet viewer and bounce diagram — the foundation for L2–L7 analytics across security, performance, and forensics.
Captures every packet at line rate without dropping one — the complete record, not a sample.
Inspect any packet and visualize conversations with a built-in viewer and bounce-diagram timeline.
The captured record feeds the full stack of NIKSUN analytics, from the link layer to the application.
Because NetBlackBox Pro captures the entire packet and NIKSUN's analytics run with no sampling, you're not limited to Top-N. You can search for Bottom-N too — the rare, the quiet, the once-in-a-million event other tools average away.
NetBlackBox Proはパケット全体をキャプチャし、サンプリングせずに分析が行われるため、上位Nだけに限定されません。下位Nも検索できます — 他ツールでは平均化されてしまいがちな、稀で、静かで、百万に一度あるかないかの出来事です。
That's what catches the problems that hide: intermittent, hard-to-reproduce performance issues and low-and-slow attacks engineered to stay under the threshold of sampling-based tools.
それこそが、隠れた問題 — 断続的で再現が困難なパフォーマンス上の問題や、サンプリングベースのツールの検知閾値を下回るように巧妙に仕組まれた「Low-and-Slow」攻撃 — を捉えるのです。
See only Top-N — the loudest talkers. The rare event is averaged away and never surfaces.
Full capture, no sampling — query Top-N and Bottom-N. Catch the low-and-slow attack and the intermittent fault.
Total recall, made affordable, and safe — industry-leading compression, fully configurable retention, and masking, built into the recorder itself.
Industry-leading compression plus thousands of metadata fields per packet — set exactly how long to keep packets and metadata, independently, with no theoretical limit to either.
Mask sensitive fields — PII, PCI, PHI — before any analyst sees them, so capturing everything never means exposing it.
Not a single dropped packet — validated across demanding enterprise deployments and the most rigorous government and defense testing.
Capture once, losslessly — then run detection, forensics, performance, and observability on the same complete data.
Available as high-scale hardware, virtual software, public cloud (AWS · Azure · GCP · OCI), or NIKSUN Cloud Services (NCS) — the same product, your deployment.
Pairs with TLS decryption to decrypt captured TLS 1.3 sessions — so even encrypted traffic becomes readable, correlated evidence.
See NetBlackBox Pro capture losslessly at line rate — and surface what sampling tools miss.