Netwerkanalyzers

Netwerkanalyzers, or network analyzers, are tools or devices used to capture, inspect, and interpret data moving across a computer network. They are employed to troubleshoot problems, monitor performance, and assess security. They can be software programs running on general-purpose computers or dedicated hardware appliances that operate at the network edge or within a data center. Many analyzers support both passive capture of traffic and active techniques such as sending probe traffic, depending on the use case.

Typical capabilities include capturing packets from a network interface, decoding protocols, reassembling streams, and presenting data in tables, charts, or human-readable summaries. Users can apply filters to focus on particular hosts, protocols, or time intervals, and they can extract metrics such as throughput, latency, packet loss, and error rates. Output can be displayed in real time, stored in capture files (often in pcap format), or exported to dashboards and SIEM systems.

There are different forms of netwerkanalyzers. Software-based analyzers run on general-purpose machines and often use sensors or taps to access traffic. Hardware-based analyzers are purpose-built appliances placed inline or passively on a network tap. Wireless networks require analyzers with support for monitor mode and spectrum analysis to inspect radio signals in addition to protocol data.

Widely used examples include Wireshark, tcpdump, and ntopng, as well as broader analysis frameworks like Zeek. While powerful, analyzers are limited by encryption, high traffic volumes, and privacy constraints, and their use may be subject to legal and organizational rules.