About the
Network Monitor
performance test methodology for an environment with Endace cards

Endace high-speed packet capture cards (Endace DAG NICs) were discontinued in August 2021. Symantec recommends that you convert your packet capture hardware and software to Napatech.
A single IDM policy was enabled that covered a target 20-MB document.
Sizing guidelines were derived from a background load of real-world traffic samples. These samples were delivered at rates ranging from 15,000 to over 200,000 packets per second. The resulting sustained background load ranged from 70 Mbps to near gigabit-level saturation.
At each background load interval, 20 copies of the target file were played at a constant rate of 3000 packets per second. Monitors that correctly generated an incident for all 20 iterations of the target file at a 100% match rate were considered a success. That is, these monitors successfully handled the offered load. When a given capture method was no longer able to deliver total match accuracy, or when packet capture discards occurred, it was considered to have reached the limit of its performance capabilities.