This presentation for Inside Analysis' Briefing Room explains the ExtraHop architecture for stream analytics. This concept enables you to mine all your wire data, which is all the data in motion in your environment.

2. Host
Eric Kavanagh
CEO, The Bloor Group
Presenter
Erik Giesa
SVP, Marketing and
Business Development,
ExtraHop Networks
Analyst
Mark Madsen
Research Analyst,
Third Nature

5. 432 TB
of analysis
@40 Gbps/day
216 TB
of analysis
@20 Gbps/day
108 TB
of analysis
@10 Gbps/day
11 TB
of analysis @1
Gbps/day

6. Se

7. Se
VS
Machine Data:
System self-reported
Wire Data:
Real-time observed activity of all communications

8. 1) Data Collection
• Unmatched scalability – Up to 40 Gbps
sustained throughput. Bulk SSL decryption at
line rate up to 64,000 SSL TPS using 2048-bit
keys @ 40 Gbps.
2) StreamOS
• Full-stream reassembly – Requisite for true
application fluency; understand sessions,
flows, and transactions.
• Broad protocol support – 40+ wire protocols
supported out of the box, including storage
and all major databases.
3) Trigger Engine
• Automatically executes on system events
through the ExtraHop trigger API.
4) Streaming Datastore
• More than 3,000 metrics that populate
customizable, real-time dashboards.
5) Full Transaction Records
• Rich transaction, message, and flow data
continuously gathered from across tiers, in a
consistent format
1
2
3
4
5
1
2
3
5
4

9. Wire Data Example (a small subset)
Zero modifications to applications or infrastructure are required unlike logs, machine data, or APM agents.
All data is processed, indexed, and stored in real time from live data streams off the wire.
Customer adds products to ecommerce
shopping cart. All page objects and user
interactions are measured and recorded in
real time. Order is placed and confirmed.
Customer order and payment are
received and approved confirming order
above.
Application selects and writes to database.
Every individual database method,
statement, and associated contextual data is
measured and recorded.
Behavior / Action
Real-Time Business and IT
Intelligence
• Correlate end-user performance with
purchasing patterns
• Drive DevOps website optimization
• Invest in IT based on observed fact
• Guarantee SLAs
• Rapid triage and troubleshooting
• Proactively alert and warn
• Track product and customer demand
• Top sellers by location, time, and offers
• Multi-dimensional business analysis and
correlation
• Business process monitoring
• Security analytics
• Tune applications and databases
• Manage application lifecycles
• Perform root cause analysis
• Detect and prevent data exfiltration
• Enable smart capacity planning
ExtraHop is the only vendor who can transform all network packets into structured Wire Data as in this example.

10. Delivering real business impact

14. It’s an anomaly. We’ve only seen it once. We can work with the
merchant to understand why it happened and attempt to
resolve it.