Beeks Analytics uses the following probe types:
Packet capture probes
Stack probes
Packet Capture probes
Packet capture probes capture packets to disk to provide a store of the captured data, which users can then consult if needed for diagnostics or evidence. Packets are stored in pcap files compressed with Gzip. VMX-Capture can capture network data, without loss, to compressed pcap files at up to 200Gb/s sustained.
You can configure multiple packet capture probes in a typical VMX-Capture deployment.
Packet capture (to disk) provides the following:
An absolute record of network traffic at packet-level. Use it as evidence in disputes, or if you need to go back to calculate some stats, or decode protocols that you didn't have decoders in place for at the time. Packet capture viewing tools (such as Wireshark) can be used to view the data in this repository, and VMX-Capture allows you to filter the capture files to the precise timing and BPF filter that you need.
Market Data replay with mdPlay, in which we very accurately reproduce market conditions by replaying market data from these captures with exactly the same timings as the original.
Stack probes
A typical deployment of VMX-Capture includes multiple stack probes. They perform decoding of messages, timestamping, mapping, anomaly detection, and generation of pre-aggregated stats. They then send the decoded message, anomalies, and pre-aggregated stats to the Agent service in VMX-Analysis. They can also output data directly to the Core Data Feed.
Stack probes provide data for analytics in VMX-Analysis and capture the following types of information:
Data about business objects (transmitted as Agent Events)
For example, data relating to a quote, order, fill, heartbeat.Latency stats
For example, Market Data wiretime, TCP roundtrip.Network stats
For example, bandwidth per link, microbursts per port, loss, window size etc.
To configure a Stack probe, you’ll define a Berkeley Packet Filter (BPF) filter to determine what the probe will listen for. This will be packet-level data such as packet headers, TCP ports, or protocol types. Then you’ll set the data that will be passed to VMX-Analysis.