PacketScan™ HD - Network Monitoring Appliance

Capture and analyze high speed Ethernet traffic over
1 Gbps, 10 Gbps, 25 Gbps, 40 Gbps and 100 Gbps networks.

Overview

PacketScan™ HD is a high-density Ethernet monitoring appliance equipped with specialized network interface cards, large storage capacity, and advanced protocol analysis software. Customers can select the Ethernet data rate that best fits their needs, with options including 4 x 1 GigE, 2 x 10 GigE, 2 x 40 GigE, and 2 x 40 / 2 x 100 GigE. The system can capture and decode nearly all VoIP and wireless protocols over the IP transport layer, making it an ideal solution for troubleshooting complex network issues.

PacketScan™ Software and PDA Feature

PacketScan™ HD comes with integrated PacketScan™ software, offering powerful real-time and post-process data investigation through its Packet Data Analysis (PDA) feature. The PDA view enables comparison of multiple RTP sessions and presents call details in both graphical and tabular formats.

The PDA feature supports protocols including SIP, H.323, MEGACO, MGCP, GSMA, Skinny, and IuCS based calls.

PacketScan™ HD also integrates seamlessly with NetSurveyorWeb™, a centralized monitoring system that delivers a comprehensive view of network performance. NetSurveyorWeb™ provides rich visualization through graphics, ladder diagrams, and Call Detail Records (CDRs).

A centralized web server with an Oracle® database manages the system, while multiple PacketScan™ HD probes can be deployed across remote sites to passively monitor VoIP traffic and send real-time data back to NetSurveyorWeb™.

Key Features

Highlights

High-density, multi-rate Ethernet capture
Supports multiple configurations including 4 × 1 GigE, 2 × 10 GigE, 2 × 40 GigE, and 2 × 40 / 2 × 100 GigE via specialized network interface modules
Portable and rack-mount capable
Available in both fixed rack and transit-case portable form factors

Capture and Filtering Capabilities

Wirespeed hardware filtering
Supports up to 10 simultaneous hardware filters across Layer 2–5, including Ethernet, VLAN, IPv4/IPv6, ARP, TCP/UDP, SIP/RTP, SCTP, and tunnel protocols like GTP, GRE, VXLAN
High-precision timestamping
Records timestamps with 4-nanosecond resolution, offering absolute, relative, difference, and NTP time formats
Extensive protocol coverage
Handles a wide range of VoIP and wireless protocols (e.g., GSM, UMTS, LTE, SIP, RTP, T.38, RTCP), with optional licensing for more advanced protocols
Capture formats
Exports data in GL’s proprietary HDL file format and also other file formats such as PCAP, PCAPNG; frame decodes can also be saved as TXT

Performance and Scalability

Massive simultaneous call handling
Capable of monitoring 20,000 bi-directional RTP calls over 1 GigE, and 30,000 calls over 2×10 GigE. With further scaling, it can support up to 50,000 calls
Deployable across networks
Multiple units can be distributed across a network and integrated into NetSurveyorWeb™ for central monitoring and aggregated reporting

Analysis, Monitoring and Replay Features

Packet Data Analysis (PDA)
Built-in PDA offers real-time and post-process views, displaying call data in graphical and tabular formats (e.g., ladder diagrams, call traces) for protocols such as SIP, H.323, MGCP, and more
Call Detail Records (CDRs) & QoS Metrics
Generates CDRs, voice quality stats (MOS, packet loss, jitter, delay), and integrates with VoiceBand Analyzer (VBA) and CDR applications; data can be exported to Excel via add-ins
NetSurveyorWeb™ integration
Enables rich visual dashboards, custom reporting, and remote performance monitoring through a centralized web interface and database

Extended Capture, Extraction and Replay Tools

FastRecorder™ and PacketExtractor™ support
These companion applications enable wirespeed capture (up to 100 Gbps) across electrical and optical interfaces, with features like filtering, slicing, auto-resume, and packet extraction into PCAP, PCAPNG, or HDL formats
Packet Recorder & Playback
Within PacketScan™ HD, the Packet Recorder captures up to 10 Gbps with hardware filtering and nanosecond precision, and the Playback module can re-transmit recorded traffic for lab-based analysis
Optional protocol analysis modules
Modules for eCPRI, IP Analytics™, TCP Analytics, and 5G protocol analysis are available to extend capabilities for RAN interfaces, QoS metrics, and deep IP conversation analysis

Optional Applications for extended Analytics

Capture, Storage, and eCPRI Analysis

GL’s FastRecorder™ and PacketExtractor™ applications enable high-speed packet capture and recording on 1, 10, 25, 40, and 100 Gbps networks at full wire speed. Packets are first recorded using FastRecorder™, then extracted via PacketExtractor™, and finally analyzed with PacketScan™ HD.

PacketScan™ HD can be configured with several terabytes of storage to meet customer requirements. The application supports decoding of the eCPRI protocol, along with a dedicated eCPRI protocol analysis tool. This tool provides detailed analysis and statistics of various eCPRI message types, including IQ Data, Bit Sequence, Generic Data Transfer, Remote Memory Access, One-Way Delay Measurement, Remote Reset, and Event Indication.

QoS and IP Analytics

GL’s IP Analytics™ tool, in combination with FastRecorder™ and PacketExtractor™, helps ensure Quality of Service (QoS) by analyzing IP-based data streams against performance standards.

IP Analytics™ delivers detailed statistics across multiple parameters, including Layer 3, Class of Service (CoS), Layer 4, IPv4/IPv6 endpoints, UDP/TCP endpoints, and conversations, enabling precise evaluation of network performance.

With millisecond-level precision, the tool computes and visualizes key network metrics such as Packet Count, Byte Count, Packets/sec, and Bits/sec, providing real-time insights that are critical for optimizing network efficiency.

Traffic Recording and Playback

GL’s Packet Recorder and Playback application captures and replays Ethernet and IP traffic at rates up to 10 Gbps. It supports simultaneous Record and Playback modes—allowing high-speed traffic capture with precise hardware timestamping and advanced hardware filtering, as well as retransmission of recorded traffic for analysis. Recordings can be saved in PCAP (Wireshark®) format and replayed on selected ports, with support for tools like GL’s PacketScan™. Playback mode enables users to recreate live network conditions in the lab using previously captured traffic from the Recorder, PacketScan™, or Wireshark®.

5G Protocol Analysis

GL’s PacketScan™ 5G Protocol Analyzer provides comprehensive monitoring of 5G networks, with the ability to capture, segregate, monitor, and generate statistics for all calls across the N1N2, N4, N8, N10, N11, N12, and N13 interfaces.

The 5G Protocol Analyzer is available as an optional add-on module to the PacketScan™ platform.

TCP Analytics Application

GL’s TCP Analytics application analyzes TCP connections between both internal Local Area Network (LAN) and external Wide Area Network (WAN) computers including servers and clients. The application helps troubleshoot large bandwidth consumption, failed TCP sessions, packet loss, poor TCP throughput, rogue connections, security incidents including exfiltration of files, and more. TCP Analytics (PKV400) is an optional application with PacketScan™ HD - Network Monitoring Appliance.

Frequently Asked Questions

What is PacketScan™ HD?: PacketScan™ HD is a high-density Ethernet monitoring appliance designed to capture and analyze Ethernet traffic at speeds including 1 Gbps, 10 Gbps, 25 Gbps, 40 Gbps, and 100 Gbps.
Which types of network traffic and protocols does it support?: PacketScan™ HD can capture and decode almost all VoIP and wireless protocols over the IP transport layer, including 5G, LTE, IMS, SIP, RTP, T.38, RTCP, UMTS, GSM, and more (some protocols require extra licensing).
What analysis features are included?: The device features Packet Data Analysis (PDA) for in-depth, real-time, and post-process data investigation—showing call information in both graphical and tabular formats.
Does PacketScan™ HD support central monitoring?: Yes, it can integrate with NetSurveyorWeb™, a central monitoring system, for a comprehensive view of network performance. This setup allows multiple probes in remote locations, with statistics and call detail records sent to a central database.
What storage capacity does it offer?: PacketScan™ HD can be provisioned with several terabytes of storage, tailored to specific customer requirements.
Which data recording and extraction tools are available?: GL’s FastRecorder™ and PacketExtractor™ applications are included for capturing, recording, and extracting Ethernet packets at wire speed on supported networks.
Does it support eCPRI and 5G protocols?: Yes, PacketScan™ HD supports eCPRI protocol analysis (including IQ Data, Bit Sequence, Generic Data Transfer, etc.) and 5G network monitoring via an optional protocol analyzer module.

What types of performance metrics and statistics are available?: The appliance provides real-time statistics for various parameters such as Layer 3, Layer 4, IP endpoints, QoS, packet/byte counts, transmission rates, and more, with millisecond-level precision.
Can it replay network traffic?: Yes, the Packet Recorder and Playback application allows capture and replay of Ethernet/IP traffic at up to 10 Gbps, including hardware timestamping and advanced filtering, saving in PCAP format, and recreating live conditions in the lab.
What codec support does it offer?: PacketScan™ HD supports almost all industry-standard voice codecs. For details on supported codecs, refer to GL’s Voice Codec webpage.
Are there optional modules or add-ons?: Yes, options include 5G protocol analysis and TCP Analytics for LAN/WAN traffic diagnostics, failed sessions, security incidents, and more.
What platforms and hardware are supported?: Systems require Intel or AMD processors, with various rack-mount and portable configurations available (4x1GigE, 2x10GigE, 2x40/2x100GigE).
Can PacketScan™ HD integrate with other analysis tools?: Yes, it works with GL’s VoiceBand Analyzer and Call Detail Record applications, generating CSV and voice files for detailed analysis using built-in Excel tools

Features

Capacity	PacketScan™ can monitor up to 2000 simultaneous calls with bidirectional RTP traffic PacketScan™ HD can monitor 20000 simultaneous calls with bidirectional RTP traffic from 1 Gbps to 100 Gbps link rates. Up to 50000 calls can be achieved by scaling with higher configurations Circular buffer with capture and view filters Monitor networks for long time periods spanning weeks or months at a time Users can deploy multiple PacketScan™ HD systems throughout a network and send data to a centralized database for complete network visibility Decrypt and analyze Voice over Long-Term Evolution (VoLTE) calls over Internet secured Protocol Security (IPsec) connection Provides VoNR call statistics such as caller, callee, MOS scores, discarded packets and voice storage
Real-time and Offline Analysis Screen Shot of Real-time Analysis	Capture and analyze packets at wirespeed. Save the captured trace to a disk Analyze in real-time or analyze recorded trace files off-line Export captured files in CSV or ASCII file format All or filtered traffic can be recorded into a trace file Options to control the saving of trace file - user-defined prefixes, trace file with date-time prefixes, slider control to indicate the total number of files, file size, frame count, or time limit Basic view comprises of – Summary, Detail, and Hex Dump view Any field from the protocol headers can be added to Summary view, i.e, user-configurable summary fields User can select a frame in Summary View to analyze and decode each frame in the Detail View. Options provided to hide/display, and copy content to clip board The Hex dump view displays the frame information in HEX and ASCII octet dump format Ability to export data to a comma delimited file for subsequent importing into a database or spreadsheet
Call Detail Records Screen Shot of Call Detail Record and Statistics View	Calls and sessions are classified as active, completed or failed giving the user an idea about the calls and its status in the network View call specific information such as duration of the completed call, source & destination addresses, type of call, release cause, conference id, call identifier and more Option to search for a particular call detail record from the captured traces PacketScan™ can work with GL’s VoiceBand Analyzer (VBA) and Call Data Records (CDR) applications to provide useful call detail records. These records can be investigated for bad calls using custom Excel® addins Ability to export completed calls summary report of PDA in CSV file format, and analyze using custom Excel® addins
Statistics	Aggregate statistics can be obtained for any field or parameter in the protocol headers to study the performance of the overall VoIP network Provides frame count, byte count, frames/sec, and bytes/sec etc of any of the protocol fields
Supported Protocols	SIP (Session Initiation Protocol) RFC 3261- MAC, IP, IPv6, UDP, TCP, SMPP SIP ED-137 for Air Traffic Monitoring (Ground-to-Air, and Ground-to-Ground) SIP-I, SIP-T 5G N1N2, N4, N8, N10, N11, N12 and N13 Message Session Relay Protocol (MSRP) - RFC 4975 SCTP and Tunnel Filtering Megaco- RFC 3525, RFC 3015 MGCP – RFC 3991 H.323/H.225 RTP - RFC 3550, RTCP, T.38 and Video SS7 SIGTRAN – SS7 over IP (ISUP, MAP, CAP, TCAP, INAP, CNAM, CAMEL) SIGTRAN ISDN over IP - Q.931, DASS2 and DPNSS over DUA (ISDN Q.921-User Adaptation Layer) GSMA over IP - BSSAP+, BSSMAP, CC, MM, RR, GCC, BCC, SMS GSM Abis over IP - BTSM, CC, MM, RR, GCC, BCC, SMS GPRS - GPRS-Gb interface (BSSGP, LLC, SNDCP, GMM, SMG) GPRS – GPRS-Gn interface (GTPv2, GTP-IP, GTP-TCP, GTP-UDP) T.38 Fax and Video calls UMTS IuCS and IuPS over IP - RANAP, RNSAP, NBAP, CC, MM, RR LTE - S1AP, X2AP, NAS, eGTP Diameter – S6a, S6d, Cx, Dx, Zn, Zh, Wx, Gq, Gy, Sh, Dh, Gx, Rf, RO, Wg, Wm, Pr, Wa, Wd, Rx interfaces Skinny Call Control Protocol (SCCP) PacketScan™ supported Protocols
Supported Codecs	Almost all industry standard codecs supported. For more information, please see "Voice Codec" webpage.
As a stand-alone tool	Capture calls in real-time for infinite time In-depth real-time and post-process data investigation using Packet Data Analysis feature Monitor adherence to protocol standards and report Flexibility to add any protocol field to the summary view, filtering, and search features Analyze with rich graphics, ladder diagrams, call trace Complex Filtering and Search capabilities to record all or filtered traffic into a trace file Option to create multiple aggregate column groups and prioritize the groups as per the requirement to display the summary results efficiently Consolidated interface allows access to all the important settings, and auto-startup actions; all the configurations done in any of these options can be saved to a file, and later loaded back to perform automated and repeated testing Ability to connect to a central database for remote monitoring. The database may be accessed through a web browser for convenient viewing and analysis
As a Probe with Central Monitoring System - NetSurveyorWeb™	PacketScan™ can send protocol fields, and call detail records, along with traffic summary of captured calls to a central database. NetSurveyorWeb™ displays the data from the database in a simple web-based browser, featuring rich graphics, custom search, report and filter configurations.
As a Single Point Packet over IP CDR Analysis System	PacketScan™ HD can work with GL’s VoiceBand Analyzer and Call Detail Records applications to generate call detail records as CSV files and voice files for each direction. The call detail records are used for further analysis using built-in Excel® tools.
Filtering and Search Screen Shot of Real-time Capture filter Screen Shot of Offline View Filter	Filtering and search capabilities add a powerful dimension to the SIP analyzer Allows the user to automatically create search/filter criteria from the current screen selection Analyze frames of interest, user can select real-time capture filters which also includes protocol filter Isolate required frames from original frames in real-time/offline Set filters on Data Link layer, MAC layer, IP, TCP/UDP and more Any protocol field can be added to the filtering, and search features providing users more flexibility to monitor required protocol fields The offline filter allows filtering based on frame number, time, length, message types, etc User can create their own filters using custom filter option which provides flexibility to the user to check the fields and use the logical conditions more efficiently
Packet Data Analysis	SIP, MSRP, RTP, H.323, MEGACO, MGCP, GSMA, IuCS, and Skinny (SCCP) protocols supported RTP packet statistics for each direction of a call Full RTP Analysis with audio capture/playback supported for all common codecs Supports decoding of AMR and AMR_WB codec with IuUP Header Supports decoding of Voice over LTE A host of counters gives the user an instantaneous snapshot of the VoIP traffic on the network Graphical representation of statistics including ladder diagrams of VoIP calls Save calls in HDL, PCAP, or PCAPNG file format for further analysis Ability to export PDA summary and detail reports of selected or all calls in PDF file format Ability to export completed calls summary report of PDA in CSV file format, and analyze using custom Excel® addins The RTCP-XR (Real-time Transport Control Protocol Extended header) VoIP Metrics Report Block 7 provides the information about the voice quality (i.e MOS score) of the opposite traffic channel Provides a complete call flow of a 5G session Generates VoIP Key Performance Indicators (KPI) Reports: Call Success Ratio Calls Per Second Post Dial Delay Error Code Distribution Answer Seizure Ratio Call Duration Creates SIP Registration KPI Reports: Register messages per sessions Registrar(s) distribution Registration(s) vs Deregistration(s) Over Time Error code distribution
Performance Metrics	Signaling, audio, and video QoS parameters for each call T.38 Analysis - The application has the call graph and T.38 ladder diagram display. User can decode T.38 frames received over VoIP calls and can have ladder diagram for T.38 traffic flow, reassemble the fragmented data and to identify the T.30 message from it Displays a summary of signaling, audio, and video parameters such as Source/Destination Video Channels, Media Type, SSRC, Average Delay/Gap, Packet Counts, Media Delivery Index and Frame Rate for all video calls Minimum, maximum and average round trip delay Inband (DTMF & MF) events, Outband events as per RFC 2833 or RFC 4733 events, RFC 2833 events, RTP/RTCP packet count and reports per direction
QOS Parameters	E-model (G.107) based MOS/R-Factor scores Media Delivery Index (Delay Factor: Media Loss Rate) for video calls H.263, H.264 codec support Measure jitter, delay and gap for audio and video traffic
Triggers and Actions	Trigger intelligent actions based on signaling and traffic conditions Filter incoming packets based on occurrences of particular signaling or traffic parameters followed by a set of actions for the completed calls
Traffic (Digits, Audio, Video, Fax) Handling	Segregation of IP traffic, VoIP, and Fax calls Filters based on WhiteList Calls, Criteria based Voice/Trace Recording All traffic supported – Digits, Tones, Voice, Video, Fax Capture Fax calls and extract fax images in TIFF format Audio capture/playback - Listen and Record RTP (Audio) streams
SIP Registration Details	Registration statistics and trace messages depicted graphically Provides the registration summary of each SIP registration including the user agent, registrar, status, registered time, expiry time, time to live, remaining time, and Registration Request Delay (RRD)
Utilities	Provides HDL File Conversion Launcher to convert Ethereal format file (.PCAP, .CAP, and .PCAPNG) to GL's file format (.HDL) and vice-versa Includes Excel® Addins to import CDRs into Excel® to analyze using Pivot Table, and Pivot Charts

Platforms

PacketScan™ HD - Network Monitoring Appliance

Specifications
Supported Interfaces	4x 1 Gbps – 850/1310 nm SFP Module; Ethernet/Optical SFP modules 2x 10 Gbps – 10GBASE-SR SFP+; Optical only 2x 40 Gbps – MTP/MPO Connector for CFP2; Optical only 2x 40/2x 100 Gbps – MTP/MPO Connector for CFP2; Optical only
Hardware Filters Screenshot of Hardware Filters	Supports defining up to 10 filters at Layer 2, 3, 4, and 5 MAC: Frames can be filtered out based on Ether Type and FCS Error VLAN 0, 1, 2: Filters frames based on Tag protocol ID, User Priority, CFI, and VLAN ID IPV4: Frames can be filtered based on Source IP Address, Destination IP Address, Protocol Type, Header Length, Differentiated Services, Ds_ECN, DS_CodePoint, Total Length, Check Sum Error, IP Datagram ID, Fragmentation Offset, Flag_DontFragment and Flag_MoreFragments IPv6: Frames can be filtered based on Source IP address, Destination IP address, Next Header, and Payload Length Tunnel Traffic: Tunnel filter provides a method to filter the packets of one protocol within another protocol. GTP, GRE and VXLAN are available tunneling methods. Hardware filters can be applied to Tunnel 1 and Tunnel 2 layers ARP: Frames can be filtered based on Sender MAC Address, Target MAC Address, Sender IP Address, Target IP Address and Option Code TCP: In TCP layer Frames, can be filtered based on source port, destination port and check sum error UDP: In UDP layer Frames can be filtered based on source port, destination port, check sum error, UDP length and payload. For more details, refer to SCTP: SCTP packets can also be filtered based on source port or destination port SIP and RTP: SIP and RTP packets can also be filtered based on source port or destination port
OSI	MAC, ARP, IP, IGMP, ICMP, TCP, UDP, SCTP, FTP, HTTP, TLS, SMTP
Protocols	GSM, UMTS, LTE, IMS, SIP, RTP, T.38, RTCP, and much more (some protocol support requires additional licensing)
Capture Timestamp	Absolute, Relative, Difference, NTP 4 Nano-second resolution
Captured Trace Format	GL’s Proprietary HDL, PCAP, PCAPNG Frame Decodes can be saved to TXT file format
Filter	Hardware Filter at line rate, Application Level Capture Filter, and Post Processing Filter and Search
Performance	4 x 1GigE - 20000 calls with bi-directional RTP traffic 2 x 10GigE - 30000 calls with bi-directional RTP traffic Extracting/recording voice 2500 simultaneous calls (maximum) Option to record filtered calls of interest only
Protocols	5G, LTE, IMS, SIP, RTP, T.38, RTCP, UMTS, GSM, and more (some protocols require additional licensing)
Rack/Portable System Specifications	Dual Processor Xeon/Single processor Expandable memory up to 128 GB Intel DQ67SW uATX LGA1155/Q67 motherboard 17" 1280 x 1024 LCD (Optional Resistive Touch) LCD Specifications: 180 H/180 V viewing angle, 250 nits, 1500:1 contrast ratio 16.7M colors, 8ms response time DVI-A for integrated LCD video interface Standard I/O Interfaces: Integrated GbE, Serial Port, 2 USB3, 4 USB2, 2 eSATA, 2 SATA6, 2 SATA3, 1394, Audio/Speaker PCI Expansion Slots: One PCIex 16, one PCIex 4 (or PCI) PCI Slot Lengths: 9-13" depending on configuration Removable hard drives up to 4x2.5" SATA/SSD 500 GB NVME SSD, customizable up to 240 TB Optical Drive: DVD/CD Writer or BluRay Burner Video Projector Ports: DVI-I and Display Port Power Supply: 275 Watt 90 – 264VAC 50 – 60 Hz Size Closed: 16"W x 16.3"H x 5.4"D Size Open: 16"W x 16.3"H x 8"D Environmental: 0° - 50°C 10-90% Rel. humidity Transit Case (optional): Pelican 1610 with custom polyethylene foam Weight: 26 pounds; Total Weight of Computer with Transit 40-45 pounds

Retrive Data: Failed

Codecs

Resources

Note: PCs which include GL hardware/software require Intel or AMD processors for compliance.

Item No.	Item Description
PKV120	PacketScan™ HD – High Density IP Traffic Analyzer w/ 4x1GigE includes PKV100 – Online (not Offline) for temporary audio codec support Accessories SFP Transceiver for 1 Gbps, Electrical, RJ45 (2) Ethernet cables (2)
PKV120p	PacketScan™ HD w/4 x 1GigE - Portable Accessories SFP Transceiver for 1 Gbps, Electrical, RJ45 (2) Ethernet cables (2) Pelican Carry Case (1) Power Cable with international standards (1)
PKV122	PacketScan™ HD – High Density IP Traffic Analyzer w/ 2x10GigE includes PKV100 – Online (not Offline) for temporary audio codec support Accessories Multirate SFP+ (SM or MM) (2)
PKV122p	PacketScan™ HD w/2 x 10 GigE - Portable Accessories Multirate SFP+ (SM or MM) (2) Pelican Carry Case (1) Power Cable with international standards
PKV124	PacketScan™ HD w/40/100 GigE Accessories QSFP+ (SM or MM) (2) Optical cable as required
PKV124P	PacketScan™ HD w/40/100 GigE - Portable Accessories Multirate SFP+ (SM or MM) (2) Optical cable as required Pelican Carry Case (1) Power Cable with international standards (1)
PKV121	PacketScan™ FB - (Offline Analyzer)
PKV123	PacketRecorder™ HD & PacketRePlay™ HD
PKV400	TCP Analytics (Optional with PacketScan™)

Specifications are subject to change without notice.

Brochures
PacketScan™ HD Brochure
PacketScan™ 5G Protocol Analyzer Brochure
TCP Analytics Brochure

Presentations
PacketScan™ HD Presentation
PacketScan™ 5G Protocol Analyzer Presentation
TCP Analytics Presentation

Webinars

IP/VoIP Analysis & Simulation