• High performance

    PacketDam operates at wire speeds, using advanced features available in modern Ethernet adapters.

  • Fast incident detection

    Traffic anomalies are detected and reported in just a few seconds.

  • Scalability

    Being I/O-bound, PacketDam’s only limit is the hardware it runs on. Speedups are easy to obtain by either upgrading the system or splitting the monitored traffic across several instances sharing a single alert/filtering mechanism.

  • Ease of configuration

    The INI style configuration file is self-explanatory and concise, leaving no room for human error.

  • Seamless integration

    PacketDam can run in either standalone mode or integrated with external systems through a simple XML-RPC interface.

For a detailed explanation of how PacketDam works, please refer to the In Depth section.