OTD Ethernet Sniffer-RFI

The FBI Operational Technology Division (OTD) is conducting market research to identify available sources for a commercially available Ethernet packet capture capability, also known as a "sniffer". The sniffer must be a software application that can be installed and operated on any industry-standard x86 physical and virtual computer using the Ubuntu Server operating system. The sniffer must have various features such as promiscuous mode, receive-only operation, and the ability to capture all Ethernet frames regardless of type, size, or Frame Check Sequence (FCS) validity. The sniffer must also provide an application programming interface (API) for custom filtering and virtual adapter modules. The FBI is seeking responses from manufacturers who can provide a product that meets these requirements. The responses will be used to formulate final requirements and identify qualified vendors. Some key features of the sniffer include: • High-performance and fully customizable Ethernet packet capture capability • Ability to operate in promiscuous mode and capture all Ethernet frames • Ability to provide an application programming interface (API) for custom filtering and virtual adapter modules • Ability to run as an unattended service within the operating system • Ability to operate with any commercial-off-the-shelf (COTS) PCIe-based Network Interface Card (NIC) • Ability to provide a persistent event log and network statistics • Ability to write captured packets to disk in an industry-standard, time-stamped PCAP format