Network traffic analysis (NTA) software monitors network traffic and provides expanded visibility into network activity and communications. These tools are used to document and analyze network resource utilization and performance, constantly tracking granular details related to network communications. NTA tools are typically automated and provide insights into who is using a network, how they’re accessing it, where they’re located, and what they’re doing within the network.
Businesses use NTA tools to identify suspicious traffic-related activity and pinpoint network performance issues such as slow download speeds or throughput. These tools are typically administered by a company’s IT department and used to bolster network security efforts and optimize network performance. Many NTA solutions provide real-time analysis to alert IT administrators of abnormal activity or performance, assisting them in remediating threats and reducing network failure.
There is some overlap between network traffic analysis software and network monitoring software, but the difference is their intended use. While many NTA solutions are used for performance monitoring and baselining, network monitoring tools don't offer the same level of granularity when detailing network activity and typically won’t provide features related to encrypted traffic analysis, NetFlow metrics, or behavioral analysis.
To qualify for inclusion in the Network Traffic Analysis category, a product must:
- Facilitate raw packet and/or traffic flow analysis
- Monitor internal and external network communications
- Provide behavioral analysis or anomaly detection features
