Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Corelight Sensors by Corelight View product | Tcpdump by Tcpdump View product |
|---|---|---|
| Overview | ||
| What it is | What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals. | Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives. |
| Product type | High-Performance Network Security Sensor Appliances | Command-Line Network Packet Analyzer & Capture Utility |
| Best for | Enterprise SOC, Data Centers, Telecommunications, Financial, Defense | Network Engineering, Cybersecurity, System Administration, DevOps, Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | CloudOn-Premise | Cloud |
| Deployment details | Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIs | Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux) |
| Data residency | On-premises; Customer Cloud VPCs | Local Host System Only (Zero Remote Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | 10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure | LinuxUnixmacOS Network InterfacesCloud VMsNetwork Switches |
| Compliance | FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001 | BSD 3-Clause LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS | libpcapWiresharkSnortSuricataLinux TerminalNetwork Interfaces |
| Industries | Enterprise SOCData CentersTelecommunicationsFinancialDefense | Network EngineeringCybersecuritySystem AdministrationDevOpsEducation |
| Regions | GlobalUSEU | Global |
| Vendor | ||
| Company | Corelight | Tcpdump |
| Headquarters | San Francisco, California, USA | Open Source Project |
| Company size | 201-500 | 1-10 |
| Founded | 2013 | 1988 |
Overview
What it is
Corelight Sensors
What does Corelight Sensors do? It covers log streaming and zeek protocol parsing. See typical use cases, appliance or cloud deployment and how it compares to rivals.Tcpdump
Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives.Product type
Corelight Sensors
High-Performance Network Security Sensor AppliancesTcpdump
Command-Line Network Packet Analyzer & Capture UtilityBest for
Corelight Sensors
Enterprise SOC, Data Centers, Telecommunications, Financial, DefenseTcpdump
Network Engineering, Cybersecurity, System Administration, DevOps, EducationPricing
Pricing model
Corelight Sensors
Contact VendorTcpdump
Contact VendorFree trial
Corelight Sensors
Free trial: yesTcpdump
Free trial: yesDeployment
Deployment options
Corelight Sensors
CloudOn-Premise
Tcpdump
Cloud
Deployment details
Corelight Sensors
Hardware Appliances; Virtual; Cloud AMI; Hardware appliances; Virtual appliances; Cloud AMIsTcpdump
Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux)Data residency
Corelight Sensors
On-premises; Customer Cloud VPCsTcpdump
Local Host System Only (Zero Remote Cloud Telemetry)Key features
What it offers
Corelight Sensors
- High-capacity packet capture (1G-100G)
- Zeek protocol parsing
- Suricata signature engine
- Hardware acceleration
- Log streaming
- NDR
- Network Security
- Network Monitoring
Tcpdump
- Real-time packet capture
- Berkeley Packet Filter (BPF) syntax
- PCAP file format export
- Protocol header decoding
- Terminal command-line interface
- Command-line packet capture
- Network troubleshooting
- Security incident traffic investigation
Platform & access
API access
Corelight Sensors
API access: yesTcpdump
API access: noSingle sign-on (SSO)
Corelight Sensors
SSO: yesTcpdump
SSO: noRole-based access (RBAC)
Corelight Sensors
RBAC: yesTcpdump
RBAC: yesMulti-tenant
Corelight Sensors
Multi-tenant: yesTcpdump
Multi-tenant: noMobile app
Corelight Sensors
Mobile app: noTcpdump
Mobile app: noSupported platforms
Corelight Sensors
10G/40G/100G Physical NetworksVMware ESXiKVMAWSAzure
Tcpdump
LinuxUnixmacOS Network InterfacesCloud VMsNetwork Switches
Compliance
Corelight Sensors
FIPS 140-2Common CriteriaSOC 2 Type IIISO 27001
Tcpdump
BSD 3-Clause LicenseCommon CriteriaNetwork Standards
Integrations & coverage
Integrations
Corelight Sensors
Corelight Fleet ManagerSplunkMicrosoft SentinelKafkaAWS
Tcpdump
libpcapWiresharkSnortSuricataLinux TerminalNetwork Interfaces
Industries
Corelight Sensors
Enterprise SOCData CentersTelecommunicationsFinancialDefense
Tcpdump
Network EngineeringCybersecuritySystem AdministrationDevOpsEducation
Regions
Corelight Sensors
GlobalUSEU
Tcpdump
Global
Vendor
Company
Corelight Sensors
CorelightTcpdump
TcpdumpHeadquarters
Corelight Sensors
San Francisco, California, USATcpdump
Open Source ProjectCompany size
Corelight Sensors
201-500Tcpdump
1-10Founded
Corelight Sensors
2013Tcpdump
1988