AR-GEActiveR&D Product

Lucia Network Analysis

Lucia Network Analysis is a domestically developed network monitoring and analysis platform that makes your corporate network infrastructure fully visible — from bandwidth usage to anomaly detection.

15+Features
12+Tech Details
7/24Support
MartaDeveloper

Developed by Marta Teknoloji

Mersin Technopark — R&D

Features & Capabilities

15 features
Real-time network traffic analysis and visualization
Bandwidth usage reporting (hourly, daily, monthly)
Machine learning-based anomaly and attack detection
User and application-based traffic tracking
NetFlow v5/v9, IPFIX and sFlow protocol support
Customizable threshold-based alert mechanisms
Device status monitoring with SNMP v2c/v3
Application layer visibility with Deep Packet Inspection (DPI)
Elasticsearch-based long-term traffic history
SIEM integration (Splunk, IBM QRadar, Wazuh)
Traffic segmentation by IP, port and protocol
Traffic source visualization on geographic map

Technical Details & Architecture

12 specs
1
Flow data collection from Cisco, Juniper, MikroTik and Huawei network devices via NetFlow v5/v9, IPFIX and sFlow; capacity to process 500,000+ flow records per second with UDP-based Netflow collector
2
libpcap-based mirrored port (SPAN/RSPAN) support for packet analysis; identification of 400+ protocols and applications (YouTube, Netflix, Teams, WhatsApp, BitTorrent, etc.) with nDPI library
3
Machine learning-based anomaly detection: deviation from baseline traffic profile using Isolation Forest and LSTM models; real-time alert generation; adaptive threshold to reduce false positives
4
Large-scale data storage with Elasticsearch + Kibana: petabyte-scale traffic history with data compression; automatic data archiving with ILM (Index Lifecycle Management)
5
Switch, router and access point status and performance monitoring via SNMP v2c/v3; CPU, memory, interface error counters and traffic metrics; custom metric collection via OID
6
Source/destination traffic visualisation on world map with IP geolocation (MaxMind GeoIP2); traffic distribution report by country and AS (Autonomous System)
7
Threshold breach, link failure, high error rate and anomaly alerts via email, SMS and webhook (Slack, Teams, PagerDuty); alert quiet hours and escalation rules
8
Real-time event forwarding to Splunk, IBM QRadar and Wazuh SIEM platforms via REST API; Kafka and syslog CEF format support

Interested in this product?

Schedule a live demo or request a technical brief from our team.

network analizağ izlemetrafik analizibant genişliğianormallik tespiti