Tel: +44 (0)1296 678510
E-Learning
 
The UK's Leading Telecoms, Datacoms Test & Management solutions.
Fluke Networks Logo
 
Fluke Network Time Machine
 
Application

Network Forensics & Troubleshooting

Fluke Network Time Machine

High-performance critical link analysis, storage for data forensics and back-in-time troubleshooting

At a Glance

  • Network forensic analyzer with application-centric analysis for quick root cause diagnosis of network and application performance problems
  • Content playback, deep packet analysis and decodes
  • Best-in-class, real-time Video/Voice over IP metrics and troubleshooting for enterprise networks
  • Atlas feature facilitates the mining of application, network and data link data by providing QoS metrics, statistics and trending charts of application and flow level data
  • Custom PGA-based monitoring interface supports traffic capture on multiple 10/100 Mbps, 1 Gbps and 10 Gbps Ethernet interfaces at full line rate
  • High performance stream-to-disk hardware with RAID hard disk controller stores and analyzes up to 60 TBs of live traffic 
  • Multiple hardware platforms – from portable to rack mounted – suit broad deployment needs

Fluke Portable Network Time MachineProduct Capabilities

The Network Time Machine is an all-in one data recording and analysis solution that is capable of monitoring and capturing data on four channels of 1 and 10 Gbps Ethernet and storing the captured data on an internal RAID sub-storage system. Its Atlas feature provides real-time and post capture traffic analysis showing statistics on traffic from layers 2 to 7, making it easy for users to identify traffic of interest. Deep packet analysis is done by the application-centric analysis engine built-in to the ClearSight Analyzer software for quick application problem identification, and quick drill down to isolate timing or application coding issues. Multi-segment analysis is standard to facilitate analysis of captured traffic from multiple network segments using one or more Network Time Machine products, making isolation of network performance issues a snap. 

Critical link health analysis
• Real-time traffic monitoring alerts you to problems in network and application health.
• Capture cards with high-performance multiport interfaces for 1G and 10G line rate allow traffic recording, including physical errors and jumbo frames.
• Fluke Networks offers an array of inline, aggregation or switching taps to interface to the network.

Multi-segment network forensics
• Connect NTM to multiple links or deploy multiple NTM units for the ability to synchronize, merge and analyze flows from different locations and generate a multi-segment ladder diagram. Quickly
visualize and isolate the root cause of network problems, such as packet drop or abnormal network latency.

Application performance forensics
• Use the optional Atlas software to see backwards in time. Identify application flow problems – even if they’re intermittent.
• Get TCP/IP error statistics, review application response times and see in-depth application performance analysis.
• Offer in-depth analysis of SQL, Oracle, MS Networking (SMB), VoIP, DNS, FTP, HTTP, POP3, Telnet, SMTP, SNMP, MS Exchange and Citrix.

VoIP performance analysis
• The Atlas option provides extensive QoS, call type and codec analysis.
• See call setup problems (e.g. can’t connect, busy) without needing to see packet decode.
• Drill-down to see which users (by phone number) are affected by poor quality or call setup issues – and vice versa.
• Playback voice and video for problem verification

Compliance/security forensics
• Use Atlas to see user traffic patterns, a server susceptible to tampering, as well as compliance and security violations.
• Pattern matching with free offset, and application/flow based filtering feature quickly identify relevant flow in the captured traffic.
• With the detailed analysis from a ClearSight Analyzer, see where and how issues occur.
• FTP, messaging, email, voice or video can be played back to quickly gather the evidence required for action.Network Traffic Diagram

Network Time Machine Selection Guide

Model

Express

Standard

Standard EA

Premium

 Portable1A

Portable2

Model Number

CSN/NTM-EX3  

CSN/NTM-ST3-4TB
CSN/NTM-ST3-8TB

CSN/NTM-ST3-EA

CSN/NTM-PR3-S5

CSN/NTM-PO1A

CSN/NTM-PO2-1G
CSN/NTM-PO2-10G

Interface Rate (Gbps)

1

1

1

10

1

1 or 10

Number and Type of Interfaces 

4 SFP

4 SFP

4 SFP

2 XFP

4 SFP

4 SFP or
2 XFP

Type of Media Supported

10/100/1000
Base-T
1000Base-SX
1000Base-LX

10/100/1000
Base-T
1000Base-SX
1000Base-LX

10/100/1000
Base-T
1000Base-SX
1000Base-LX

10GBase-SR
10GBase-LR

10/1001000
Base-T
1000Base-SX
1000Base-LX

10/1001000
Base-T
1000Base-SX
1000Base-LX
or
1000Base-SR
1000Base-LR

Steam-to-disk Throughput
(Gbps)1

2.5

4

4

10

2

3

RAID Configuration

0

0

5

5

0

5

Raw Capacity (TB)2

2

12

12+24

3.6+7.2

1.9

3.3

OS+Metadata Capacity (TB)3

0.8

3.2

9.3

2.8    

0.4

1.1

PacketStore Capacity (TB)4

1

4/8

20

6.1

1.4

1.7

Max. capacity with
External Storage Array

N/A

N/A

60 with 2
additional
external
storage arrays

18.3 with 2
additional
 external
storage arrays

N/A

N/A

Multiple Concurrent Remote Viewer/ Configuration

0/1

3/1

3/1

3/1

3/0

3/0

1. Stream-to-disk throughput is the maximum traffic rate that NTM can store data to disk with no packet loss. The traffic was all 64 byte packets and the test was run no less than 3 hours
2. Raw capacity is total raw hard disk storage available. It will be consumed by OS, NTM system programs, PacketStore and other temporary program buffers
3. OS+Metadata capacity are disk space reserved for OS, NTM System Software and the Metadata database where packet indexing data is kept.
4. PacketStore is the database where packets captured are stored. Amount specified is disk space reserved for storage.


Product Specifications

Model

Express

Standard

Standard EA

Premium

 Portable1A

Portable2

Model Number

CSN/NTM-EX3  

CSN/NTM-ST3-4TB
CSN/NTM-ST3-8TB

CSN/NTM-ST3-EA

CSN/NTM-PR3-S5

CSN/NTM-PO1A

CSN/NTM-PO2-1G
CSN/NTM-PO2-10G

CPU

Quad Core Intel
Xeon X3430
Processor, 2.4GHz

Two Quad Core
Xeon E5620 

Two Quad Core
Xeon E5620 

 

 Two Quad Core
Xeon E5620 

Intel Quad
core i7 processor,
2.67 GHz

 L5420 Quad
Core, 2.5Ghz

OS

Windows Server 2008

Windows Server 2008

Windows Server 2008

 Windows Server 2008

Windows XP

Windows Server 2003

Memory

4 GB

 4 GB

4 GB 

4 GB 

4 GB 

4 GB 

Power supply

50/60 Hz,
100/240V AC 

 50/60 Hz,
100/240V AC

50/60 Hz,
100/240V AC 

 50/60 Hz,
100/240V AC

50/60 Hz,
100/240V AC 

50/60 Hz,
100/240V AC 

Power consumption

One non-redundant 350 W

High output, two
hot-plug 870 W 

High output, two
hot-plug 870 W

High output, two
hot-plug 870 W 

460 W auto switching

460 W auto switching

Dimensions

Height: 4.24 cm (1.67”)
Width: 43.4 cm (17.1”)
Depth: 61cm (24”) 

Height: 8.64 cm (3.40”)
Width: 44.31 cm (17.44”)
Depth: 68.07 cm (26.80”) 

Mainframe
height: 8.64 cm (3.40”)
Width: 44.31 cm (17.44”)
Depth: 68.07 cm (26.80”)
1 external storage included* 

Mainframe
height: 2U 8.64 cm (3.40”)
Width: 44.31 cm (17.44”)
Depth: 68.07 cm (26.80”)
1 external storage included*

 Height: 29 cm (11.44”)
Width: 42.7 cm (16.8”)
Depth: 14.5 cm (5.69”)

Height: 29 cm
(11.44”)
Width: 42.7 cm (16.8”)
Depth: 14.5 cm (5.69”) 

Weight

9.1 kg (20 lb) 

26.1 kg (57.54 lb) 

 26.1 kg (57.54 lb)

 26.1 kg (57.54 lb) 

 10.2kg (22.5lb)

10.2 kg
 (22.5 lb) 

Note: The External storage array unit included with NTM Standard EA and Premium has the same dimensio - - Height: 8.68 cm (3.4"), Width: 22.6 cm (17.6" ), Depth: 56.1 cm (22.1" ), Weight: 28.39 kg (62.6 lb) (max config)

• Service Assurance and troubleshooting
• Branch office performance and remote troubleshooting
• Capture unexpected events during data center consolidation projects
• Unified communication deployment assessment and troubleshooting


Prove that it is not the network with complete picture

Where Network Time Machine are be deployed

Fluke Network Time Machine Application




Fluke Network Time Machine Datasheet

Fluke Portable Network Time Machine Datasheet
Products in this range...
CyberPro-High-speed Packet Capture
CyberPro-High-speed Packet Capture PORTABLE PACKET FORENSICS! The CyberPro is a portable all-in-one appliance for high-speed packet capture, IoC ev... Read More
 
Ixia ATI Processor 6212
Ixia ATI Processor 6212 Better Data for Better Decisions The Application and Threat Intelligence (ATI) Processor delivers real-time applic... Read More
 
Ixia BreakingPoint
Ixia BreakingPoint In today's world of crippling cyber-attacks and dynamic applications, you need to know that your networks are secure ... Read More
 
NetOptics Network Taps
NetOptics Network Taps Net Optics is the leader in passive network access for security and management applications. Our products allow custome... Read More
 
NetQuest I-9100 100G/40G/10G Interceptor
NetQuest I-9100 100G/40G/10G Interceptor NetQuest I-9100 Interceptor provides 100G, 40G and 10G network monitoring access for automatic discovery an... Read More
 
NetQuest OptiCop 10G ConvergerĀ®: P-Series
NetQuest OptiCop 10G ConvergerĀ®: P-Series The P-Series OptiCop 10G Converger systems can be configured to meet the most demanding applications, with the ability ... Read More
 
NetQuest OptiCop Interceptor
NetQuest OptiCop Interceptor NetQuest Interceptors are purpose-built, comprehensive access solutions for intercept applications. The products provid... Read More
 
Polystar OSIX system Network and Service Assurance
Polystar OSIX system Network and Service Assurance OSIX is a passive probe system that non-intrusively extracts information from the control and user planes in telecom ne... Read More