Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Detection Collections by Corelight View product | Tcpdump by Tcpdump View product |
|---|---|---|
| Overview | ||
| What it is | Corelight Detection Collections offers curated network detection rules and behavioral analytics. Use it for Network Behavior Analysis. See Threat Detection alternatives. | Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives. |
| Product type | Curated Network Threat Detection & Analytics Rules | Command-Line Network Packet Analyzer & Capture Utility |
| Best for | Enterprise SOC, Financial, Defense, Government, Healthcare | Network Engineering, Cybersecurity, System Administration, DevOps, Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | Cloud |
| Deployment details | Software Rule Packages; Sensor Integration; Software rule packages; Sensor-native execution | Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux) |
| Data residency | Customer Network / On-premises / Cloud VPCs | Local Host System Only (Zero Remote Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Corelight SensorsZeekSuricataSplunkSentinel | LinuxUnixmacOS Network InterfacesCloud VMsNetwork Switches |
| Compliance | SOC 2 Type IIISO 27001FIPS 140-2 | BSD 3-Clause LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | Corelight SensorsSplunkMicrosoft SentinelCrowdStrikeElastic | libpcapWiresharkSnortSuricataLinux TerminalNetwork Interfaces |
| Industries | Enterprise SOCFinancialDefenseGovernmentHealthcare | Network EngineeringCybersecuritySystem AdministrationDevOpsEducation |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | Tcpdump |
| Headquarters | San Francisco, California, USA | Open Source Project |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 1988 |
Overview
What it is
Corelight Detection Collections
Corelight Detection Collections offers curated network detection rules and behavioral analytics. Use it for Network Behavior Analysis. See Threat Detection alternatives.Tcpdump
Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives.Product type
Corelight Detection Collections
Curated Network Threat Detection & Analytics RulesTcpdump
Command-Line Network Packet Analyzer & Capture UtilityBest for
Corelight Detection Collections
Enterprise SOC, Financial, Defense, Government, HealthcareTcpdump
Network Engineering, Cybersecurity, System Administration, DevOps, EducationPricing
Pricing model
Corelight Detection Collections
Contact VendorTcpdump
Contact VendorFree trial
Corelight Detection Collections
Free trial: yesTcpdump
Free trial: yesDeployment
Deployment options
Corelight Detection Collections
Tcpdump
Deployment details
Corelight Detection Collections
Software Rule Packages; Sensor Integration; Software rule packages; Sensor-native executionTcpdump
Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux)Data residency
Corelight Detection Collections
Customer Network / On-premises / Cloud VPCsTcpdump
Local Host System Only (Zero Remote Cloud Telemetry)Key features
What it offers
Corelight Detection Collections
- Curated network detection rules
- Behavioral analytics
- MITRE ATT&CK mapping
- C2 beacon detection
- DNS tunneling defense
- NDR
- Threat Detection
- Security Analytics
Tcpdump
- Real-time packet capture
- Berkeley Packet Filter (BPF) syntax
- PCAP file format export
- Protocol header decoding
- Terminal command-line interface
- Command-line packet capture
- Network troubleshooting
- Security incident traffic investigation
Platform & access
API access
Corelight Detection Collections
API access: yesTcpdump
API access: noSingle sign-on (SSO)
Corelight Detection Collections
SSO: yesTcpdump
SSO: noRole-based access (RBAC)
Corelight Detection Collections
RBAC: yesTcpdump
RBAC: yesMulti-tenant
Corelight Detection Collections
Multi-tenant: yesTcpdump
Multi-tenant: noMobile app
Corelight Detection Collections
Mobile app: noTcpdump
Mobile app: noSupported platforms
Corelight Detection Collections
Tcpdump
Compliance
Corelight Detection Collections
Tcpdump
Integrations & coverage
Integrations
Corelight Detection Collections
Tcpdump
Industries
Corelight Detection Collections
Tcpdump
Regions
Corelight Detection Collections
Tcpdump
Vendor
Company
Corelight Detection Collections
CorelightTcpdump
TcpdumpHeadquarters
Corelight Detection Collections
San Francisco, California, USATcpdump
Open Source ProjectCompany size
Corelight Detection Collections
201-500Tcpdump
1-10Founded
Corelight Detection Collections
2013Tcpdump
1988