Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Open NDR Platform by Corelight View product | Tcpdump by Tcpdump View product |
|---|---|---|
| Overview | ||
| What it is | Looking for NDR software? Corelight Open NDR Platform by Corelight provides SIEM/lake streaming for Network Analytics. Compare features and alternatives. | Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives. |
| Product type | Open Enterprise Network Detection & Response Platform | Command-Line Network Packet Analyzer & Capture Utility |
| Best for | Global Enterprise, Defense, Financial, Telecom, Healthcare | Network Engineering, Cybersecurity, System Administration, DevOps, Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudOn-Premise | Cloud |
| Deployment details | Hardware; Virtual; Cloud Sensors & SaaS; Hardware appliance; Virtual appliance; Cloud sensors | Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux) |
| Data residency | On-premises Data Center; Multi-Cloud | Local Host System Only (Zero Remote Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Bare-metal HardwareVMwareKVMAWSAzureGCP | LinuxUnixmacOS Network InterfacesCloud VMsNetwork Switches |
| Compliance | Common CriteriaFIPS 140-2SOC 2 Type IIISO 27001 | BSD 3-Clause LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | SplunkMicrosoft SentinelElasticCrowdStrikeSnowflakeKafka | libpcapWiresharkSnortSuricataLinux TerminalNetwork Interfaces |
| Industries | Global EnterpriseDefenseFinancialTelecomHealthcare | Network EngineeringCybersecuritySystem AdministrationDevOpsEducation |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | Tcpdump |
| Headquarters | San Francisco, California, USA | Open Source Project |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 1988 |
Overview
What it is
Corelight Open NDR Platform
Looking for NDR software? Corelight Open NDR Platform by Corelight provides SIEM/lake streaming for Network Analytics. Compare features and alternatives.Tcpdump
Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives.Product type
Corelight Open NDR Platform
Open Enterprise Network Detection & Response PlatformTcpdump
Command-Line Network Packet Analyzer & Capture UtilityBest for
Corelight Open NDR Platform
Global Enterprise, Defense, Financial, Telecom, HealthcareTcpdump
Network Engineering, Cybersecurity, System Administration, DevOps, EducationPricing
Pricing model
Corelight Open NDR Platform
Contact VendorTcpdump
Contact VendorFree trial
Corelight Open NDR Platform
Free trial: yesTcpdump
Free trial: yesDeployment
Deployment options
Corelight Open NDR Platform
Tcpdump
Deployment details
Corelight Open NDR Platform
Hardware; Virtual; Cloud Sensors & SaaS; Hardware appliance; Virtual appliance; Cloud sensorsTcpdump
Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux)Data residency
Corelight Open NDR Platform
On-premises Data Center; Multi-CloudTcpdump
Local Host System Only (Zero Remote Cloud Telemetry)Key features
What it offers
Corelight Open NDR Platform
- Open NDR architecture
- Zeek protocol parsing
- Suricata intrusion detection
- Encrypted traffic analysis
- SIEM/lake streaming
- NDR
- Network Analytics
- Network Security
Tcpdump
- Real-time packet capture
- Berkeley Packet Filter (BPF) syntax
- PCAP file format export
- Protocol header decoding
- Terminal command-line interface
- Command-line packet capture
- Network troubleshooting
- Security incident traffic investigation
Platform & access
API access
Corelight Open NDR Platform
API access: yesTcpdump
API access: noSingle sign-on (SSO)
Corelight Open NDR Platform
SSO: yesTcpdump
SSO: noRole-based access (RBAC)
Corelight Open NDR Platform
RBAC: yesTcpdump
RBAC: yesMulti-tenant
Corelight Open NDR Platform
Multi-tenant: yesTcpdump
Multi-tenant: noMobile app
Corelight Open NDR Platform
Mobile app: noTcpdump
Mobile app: noSupported platforms
Corelight Open NDR Platform
Tcpdump
Compliance
Corelight Open NDR Platform
Tcpdump
Integrations & coverage
Integrations
Corelight Open NDR Platform
Tcpdump
Industries
Corelight Open NDR Platform
Tcpdump
Regions
Corelight Open NDR Platform
Tcpdump
Vendor
Company
Corelight Open NDR Platform
CorelightTcpdump
TcpdumpHeadquarters
Corelight Open NDR Platform
San Francisco, California, USATcpdump
Open Source ProjectCompany size
Corelight Open NDR Platform
201-500Tcpdump
1-10Founded
Corelight Open NDR Platform
2013Tcpdump
1988