Flowmon
Packet Investigator
Specification
MODELS LIST

Valid from December 1, 2023

Flowmon Packet
Investigator
Lite
FP-FPI-L

Standard
FP-FPI-S

Business
FP-FPI-B

Coporate
FP-FPI-C

Enterprise
FP-FPI-E

Ultimate
FP-FPI-U

1

2

4

816

Unlimited

Licensed probes
Monitoring ports

1/10/40/100GbE

HW requirements*

1 CPU and 4GB RAM per running PCAP analysis* The hardware requirements are based on the number of analyses executed in parallel for allusers. A single analysis runs on a single CPU core. Memory utilization is up to 4GB of RAM for asingle running analysis of a PCAP of reasonable size and structure. The reference PCAP file has thefollowing characteristcs: a mixture of supported protocols, 100MB file size, 150k packets, 10k flows.
The FPI is designed to perform root-cause analysis on packet traces captured selectively when
specific troubleshooting, such as client-server compatibility, protocol mismatch, or network failure,is required. For a smooth analysis and clear results, it is recommended to limit the scope of thecapture to a minimal set of full-packet data required to diagnose the issue. It is not recommended
to run analysis on PCAP files larger than 100MB. The memory consumption and processing timedepends on the PCAP’s characteristics and procotol mixture, e.g. a PCAP composed of 1 million
DNS packets of a total size of 200MB will take around 20 minutes to process while consuming up
to 8GB of RAM.
The memory requirement refers to the memory consumed by the Packet Investigator only. The
total memory required for the Flowmon appliance depends on the appliance type, and othersoftware modules installed with respect to corresponding appliance or module specification.
Key features:•

Full packet capture in PCAP format•

Rolling capture buffer•

PCAP analysis & diagnostics•

Triggered capture via Flowmon ADS (Anomaly Detection System)•

REST API controlled traffic recording and access to PCAP files

Full packet capture provides the ability to record network traffic on the fly on all the Flowmon
Probes deployed over the infrastructure. Packet recording can be scheduled for a specific time and2

© 2023 Progress. All Rights Reserved.

result in a set of PCAP files for subsequent analysis. Flowmon Packet Investigator provides various
traffic filtering criteria such as IP address, CIDR, MAC address, protocol, port, VLAN tag, MPLS
label, and their combinations. Maximum data volume, which can be recorded from the traffic andstored on disk, is 500Mbps.
Rolling buffer stores the first N packets for each flow for a defined period in the memory buffer,
which allows it to capture communications that have already started. Packets stored in the rolling
buffer are included in the recording triggered either by Flowmon Packet Investigator or an event
detected by Flowmon ADS module.
PCAP analysis diagnoses and interprets full packet data recorded by Flowmon Packet
Investigator or uploaded by the user. The module automatically performs an expert decisiontree analysis, looking for deviations from the RFC specifications of the respective protocols andtheir combinations, and records any error codes or other failures. The results of the analysis
are provided in the form of events with a detailed description of detected issues. Moreover, themodule also contains in-built expertise with interpretations of error codes and suggestions forremedial actions. PCAP analysis supports the most commonly used enterprise network protocols
for network configuration, network storage, e-mail, and other protocols. List of currently supportedprotocols is the following: ARP, CoAP, DHCP, DNS, FTP, GOOSE, HTTP, ICMP, IEC104, IMAP, IMF, IP,MMS, MQTT, NTP, POP, SIP, SLAAC, SMB, SMTP, SSL and TCP. PCAP files can be recorded in thenetwork or uploaded from existing data.
Customer with Flowmon FPI is eligible to use FPI Probe functionality on defined number ofFlowmon Probes per specification. All Flowmon Probes used for Flowmon Packet Investigator need
to be properly licensed and covered by valid technical support service. The practical limitation ismaximum of 100 unique monitoring ports on these probes to be used for Flowmon FPI in parallel.
This limitation is valid for all versions including Ultimate.

About Progress

Worldwide Headquarters

Dedicated to propelling business forward in a technology-driven world, Progress(NASDAQ: PRGS) helps businesses drive faster cycles of innovation, fuel momentum andaccelerate their path to success. As the trusted provider of the best products to develop, deploy
and manage high-impact applications, Progress enables customers to build the applications andexperiences they need, deploy where and how they want and manage it all safely and securely.
Hundreds of thousands of enterprises, including 1,700 software companies and 3.5 million developers,
depend on Progress to achieve their goals—with confidence. Learn more at www.progress.com

Progress Software Corporation
15 Wayside Rd, Suite 400, Burlington, MA01803, USA
Tel: +1-800-477-6473

2024 Progress Software Corporation and/or its subsidiaries or affiliates. All rights reserved.
Rev 2024/02 RITM0168479

facebook.com/progresssw
twitter.com/progresssw
youtube.com/progresssw
linkedin.com/company/progress-software
progress_sw_