Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Darktrace Network by Darktrace View product | Tcpdump by Tcpdump View product |
|---|---|---|
| Overview | ||
| What it is | Darktrace Network is a network detection and response for network detection and response and lateral movement interruption. See features and NDR alternatives. | Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives. |
| Product type | Network Detection and Response (NDR) | Command-Line Network Packet Analyzer & Capture Utility |
| Best for | Cross-industry, Finance, Healthcare, Manufacturing, Enterprise Networks, Banking | Network Engineering, Cybersecurity, System Administration, DevOps, Education |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | Cloud |
| Deployment details | Cloud; Physical Appliance; Virtual Sensor; Physical network tap; Virtual appliance; Cloud VPC mirror | Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux) |
| Data residency | United States; European Union; United Kingdom | Local Host System Only (Zero Remote Cloud Telemetry) |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: no |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: yes |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | Physical NetworksVirtual SwitchesCloud VPCs / VNets | LinuxUnixmacOS Network InterfacesCloud VMsNetwork Switches |
| Compliance | SOC 2 Type IIISO 27001GDPR | BSD 3-Clause LicenseCommon CriteriaNetwork Standards |
| Integrations & coverage | ||
| Integrations | CiscoPalo Alto NetworksCheck PointFortinetSplunk | libpcapWiresharkSnortSuricataLinux TerminalNetwork Interfaces |
| Industries | Cross-industryFinanceHealthcareManufacturingEnterprise NetworksBanking | Network EngineeringCybersecuritySystem AdministrationDevOpsEducation |
| Regions | Global | Global |
| Vendor | ||
| Company | Darktrace | Tcpdump |
| Headquarters | Cambridge, United Kingdom | Open Source Project |
| Company size | 1,000+ | 1-10 |
| Founded | 2013 | 1988 |
Overview
What it is
Darktrace Network
Darktrace Network is a network detection and response for network detection and response and lateral movement interruption. See features and NDR alternatives.Tcpdump
Tcpdump: real-time packet capture, Berkeley Packet Filter syntax and PCAP file format export. Built for BPF packet filtering. Compare Network Security alternatives.Product type
Darktrace Network
Network Detection and Response (NDR)Tcpdump
Command-Line Network Packet Analyzer & Capture UtilityBest for
Darktrace Network
Cross-industry, Finance, Healthcare, Manufacturing, Enterprise Networks, BankingTcpdump
Network Engineering, Cybersecurity, System Administration, DevOps, EducationPricing
Pricing model
Darktrace Network
Contact VendorTcpdump
Contact VendorFree trial
Darktrace Network
Free trial: yesTcpdump
Free trial: yesDeployment
Deployment options
Darktrace Network
Cloud
Tcpdump
Cloud
Deployment details
Darktrace Network
Cloud; Physical Appliance; Virtual Sensor; Physical network tap; Virtual appliance; Cloud VPC mirrorTcpdump
Open Source; CLI Tool; Open Source Command-Line Binary (Natively Included in Unix/Linux)Data residency
Darktrace Network
United States; European Union; United KingdomTcpdump
Local Host System Only (Zero Remote Cloud Telemetry)Key features
What it offers
Darktrace Network
- Deep packet inspection
- Passive traffic analysis
- Autonomous TCP resets
- IoT/OT visibility
- Lateral movement detection
- MITRE ATT&CK mapping
- Network detection and response
- Lateral movement interruption
Tcpdump
- Real-time packet capture
- Berkeley Packet Filter (BPF) syntax
- PCAP file format export
- Protocol header decoding
- Terminal command-line interface
- Command-line packet capture
- Network troubleshooting
- Security incident traffic investigation
Platform & access
API access
Darktrace Network
API access: yesTcpdump
API access: noSingle sign-on (SSO)
Darktrace Network
SSO: yesTcpdump
SSO: noRole-based access (RBAC)
Darktrace Network
RBAC: yesTcpdump
RBAC: yesMulti-tenant
Darktrace Network
Multi-tenant: yesTcpdump
Multi-tenant: noMobile app
Darktrace Network
Mobile app: noTcpdump
Mobile app: noSupported platforms
Darktrace Network
Physical NetworksVirtual SwitchesCloud VPCs / VNets
Tcpdump
LinuxUnixmacOS Network InterfacesCloud VMsNetwork Switches
Compliance
Darktrace Network
SOC 2 Type IIISO 27001GDPR
Tcpdump
BSD 3-Clause LicenseCommon CriteriaNetwork Standards
Integrations & coverage
Integrations
Darktrace Network
CiscoPalo Alto NetworksCheck PointFortinetSplunk
Tcpdump
libpcapWiresharkSnortSuricataLinux TerminalNetwork Interfaces
Industries
Darktrace Network
Cross-industryFinanceHealthcareManufacturingEnterprise NetworksBanking
Tcpdump
Network EngineeringCybersecuritySystem AdministrationDevOpsEducation
Regions
Darktrace Network
Global
Tcpdump
Global
Vendor
Company
Darktrace Network
DarktraceTcpdump
TcpdumpHeadquarters
Darktrace Network
Cambridge, United KingdomTcpdump
Open Source ProjectCompany size
Darktrace Network
1,000+Tcpdump
1-10Founded
Darktrace Network
2013Tcpdump
1988