IBM SevOne Network Performance Management (NPM) vs Wireshark comparison

"One of the most valuable features is the graphs, which you can build instantly. I have used some open-source platforms in the past, but they are not as good. With SevOne, the sampling in the graph can be every few seconds, not just every few minutes, and that's really helpful. It's really fast."

"The most valuable feature is the NMS because that's the core of the system. Without the NMS, the other tools aren't that usable."

"I like SevOne's network flow reporting."

"Its ability to monitor practically any type of network device via SNMP is most valuable. This is the main functionality that we're using. If a network device exposes a metric, such as interface utilization, SevOne will monitor it for us."

"The out of the box reports and workflows are pretty good and they meet our requirements well."

"We find that the reporting is particularly valuable in terms of not only communicating with our peer teams but also with the executives."

"The modules and the performance management reports that come with data insights are two of the most valuable features. I also find the reports for Wi-Fi, Netflow, LAN, and WAN for monitoring to be very good."

"Scalability. I have never had to worry about how to handle really big environments."

"The initial setup is simple."

"The strongest feature of this solution, is the ability it gives us to carry out deep-packet inspections on our network, particularly when a function isn't performing as it should."

"Being able to dissect email data and figure out what is inside email messages was the most valuable feature. Such a feature is pretty helpful for an ongoing forensic investigation or when there is a potential insider threat that you are trying to investigate. It allows you to see the network activity of the users you are investigating. It also gives you more visibility into your network. It was very easy to set up. There is a lot of information out there on Google and YouTube about how to use it. There is also community support. If you have any trouble, it is pretty easy to find an answer online. You will have to do some digging only if you have a very specific use case."

"It has good basic features."

"I like the filtering feature as we can filter data easily. This feature is also available in tcpdump, but it's a simple piece of software. Wireshark is more advanced and has many features. It allows you to filter a lot of things. The output can be filtered easily. The most important feature is colorization. If I say, "Okay, this particular SMB protocol in red, it will show me red." It's easy to identify that protocol or capture data."

"The options that are required to get the details for the packet drops are good."

"The transmission and reception issues are valuable."

"Wireshark helps us to understand network traffic."

"With the administrative management of the appliance, if some object appears from SevOne because something changed in the network or whatever, then as an administrator you will not be aware. If you are using this object in a report, this object will disappear from the report and you will not be aware of it. So, if you have 1,000 reports, you cannot always check these reports everyday to see if objects are missing or information has disappeared. We don't have any information on alerts, saying that something is happening there and maybe we need to take action. If an object was replaced by another one, or if a link was replaced by another one, then the graph needs to be changed because it doesn't exist in the graph anymore. However, we don't have this information."

"There is room for improvement in the integration with different vendors and the reporting capabilities."

"Their virtualization solution is not compatible with our Kubernetes environment, which is one of the reasons we are ending our relationship with them."

"NMS has several areas for improvement. It should be more user-friendly inside of NMS for some of the functionality in there. It's been getting better the last version or two, but the there have been bugs in there whenever I've gone to new versions."

"The reports are easy to configure but they are a bit outdated in terms of appearance and visualization."

"Some similar solutions offer end-to-end visibility."

"The method of searching for SIP and the way to create the groups."

"SevOne should work with the graphs legend functionality."

"The product is great but I wish there were more of an emphasis on the command line tools."

"The product has been using the same GUI for many years."

"Big trace files (more than 1,000,000 packets) can be slow, but then you can use "TraceWrangler" (also free) to help with slicing and dicing the data."

"A room for improvement in Wireshark is its ease of use for beginners. It could be better. Another room for improvement in the tool is for it to provide more details about the traffic load. At the moment, Wireshark is adequate for me, so there isn't anything I'd like added to it in its next version."

"Wireshark is similar to an OS defense tool, meaning that it runs on an OS such as Ubuntu and Fedora, but I'm unsure if it's compatible with Windows or if it's a straightforward process to run it on Windows. Right now, my team needs to run Wireshark from a dongle to use it, so it's an OS-dependable tool, and that's an area for improvement. I was unable to use Wireshark on Windows, and I couldn't capture it, as I'm unsure how to configure the wireless card into monitoring mode on Windows. The process was straightforward on Linux, but it wasn't the case on Windows OS. It seems Wireshark isn't compatible with all OS. For example, you can analyze the log, and you can analyze it on the Windows server, but you can't do a capture in Windows. Configuring Wireshark for Windows isn't as easy as configuring it for Linux."

"The system could be improved upon by adding a better and more powerful data processing engine."

"Wireshark could be improved by adding more monitoring features."

"The speed of the Internet could be improved, especially its performance."

"The tool is not expensive. We were able to negotiate with SevOne on pricing."

"Many tools price things based on the number of KPIs that you're collecting around a device. In many cases, there could be hundreds of metrics that you need to collect. SevOne provides device-level pricing. That gives us the flexibility to turn on, and expand on, the metrics that we're collecting around those devices, without taking a financial hit."

"The pricing has been fair."

"A blocking point is the high upfront cost because it is challenging to get it accepted and the purchase approved."

"Choose a SevOne partner who can provide SevOne as a service and can deliver professional services and maintenance."

"Prices per license are not huge, but they exist."

"There are cheaper solutions available."

"Have a bank of licenses, because it is about the number of objects (RAM, ports, CPU, etc.)."

"Wireshark is open-source and free of charge."

"It's free."

"The tool is free."

"The solution is open source so is free."

"Wireshark is free of charge, and there's no license involved."

"This is an open-source product that can be used free of charge."

"We're using the free version of Wireshark."

"I've never personally had to pay for it, making it a highly valuable internet resource that's accessible for use. While they offer some paid versions, our firm has utilized the free version for the past three years."