Teleseer is a online, next-gen packet analysis suite for IT and security teams. It automates the complex task of analyzing your network so you can focus on managing and securing it.

Teleseer analyzes traffic recordings from any network you want to analyze. These recordings are called packet captures (PCAP). You can upload PCAPs taken one or more routers, switches, firewalls, or endpoints on your network. These can be collected from a SPAN port, network tap, or sensor on those devices.

Teleseer will analyze 5,000+ protocols, apps, and artifacts from your network traffic to produce a true network map, passive asset inventory, timeline of events, and registry of network artifacts (e.g. credentials).

Teleseer supports Zeek logs, PCAP, PCAP-ng, Google Stenographer formats. We also support certain compressed file formats. See our help pages for more information.

https://support.teleseer.com/docs/supported-file-types

Teleseer is 100% passive. No install, no agents, no scanning.

It does not interact with your network environment at all.

Teleseer can performs advanced analysis on metadata found within network traffic protocols in your uploaded PCAPs for:

• App identification
• Threat detection
• Asset discovery
• Network mapping
• Vulnerability analysis
• and more...

The time it takes to analyze your PCAP can vary depending on a few key factors:

1. Traffic density: Networks with many small connections (e.g. scanning) will take longer to analyze. Networks with mostly video and voice streaming traffic are faster to process.


2. Number of devices: Teleseer lets you track an unlimited number of assets. But the more there are on a network, the more time it will take to analyze.


3. Network complexity: Simpler network structures with a few subnets and VLANS are faster to analyze. Complex ones with numerous subnets, VLANs, and routing architectures.


4. Size & upload speed: The size of your PCAP and your computer's upload speed will affect how long it takes before we can receive an upload and analyze it.

Hence, even a small PCAP can take a long time if taken from a complex network with many small packets and lots of devices. A large PCAP can be very quick to analyze if the opposite is true.

Teleseer does not currently support real-time monitoring and analysis.

We are currently developing sensors that will let you process traffic locally on your network and stream analyzed flow data into your online project.

Teleseer encrypts all of your data at rest and in-transit with end-to-end encryption. We use industry best-practices to protect customer data and implement stringent access control policies. Our systems are regularly audited and continuously monitored for security purposes.

Teleseer runs in Google Cloud Platform, which is certified:

• FedRAMP High
• ISO/IEC 27001/27017/27018
• SOC 1/2/3.

You can delete your data at any time from the Teleseer dashboard. Everything you delete is fully purged from systems and backups after 30 days.

We do not access your data without your permission. You can grant us permission to access your data for troubleshooting and support purposes by emailing us at hello@cyberspatial.com

Most sensitive content within network traffic is protected with end-to-end encryption, for instance TLS/SSL. We can only analyze metadata and behavior for this traffic. We cannot access its content.

However, Teleseer is designed to help you discover unencrypted protocols on your network. We display open credentials and file transfers from these protocols. Teleseer helps you easily access the content of those protocols by carving and extracting their packets directly from the Teleseer interface

(feature coming soon).

If you are concerned about sending data to cloud platform, consider the following:

• Anti-virus and EDRs install agents with deep kernel-level access to your systems and sync activity data to the cloud. They have direct access to files and keys on disk and memory.


• Most vendors store and analyze security logs and telemetry in the cloud.


• Your personal and work files are likely stored or backed up to the cloud.


• Your HR, payroll, financial, personal information is likely processed and stored in the cloud.

Do not use Teleseer if you are not authorized to store or analyze PCAPs in the cloud.

Professional customers: https://teleseer.com/pricing

Enterprise customers: contact us at hello@cyberspatial.com

Your quota is limited in based on the amount of Data Under Analysis (DUA) for your account.
This is measured by the uncompressed amount of data you've uploaded to Teleseer.

You can free up DUA by deleting data from your account.

Teleseer also has a monthly transfer quota that is multiple of your DUA. The limit is designed to prevent automated abuse of continual data uploads and deletions.

Teleseer cannot decode encrypted traffic.

It currently supports carving and extracting encrypted traffic for offline decryption using your own keys from within the the Teleseer interface

(feature coming soon).

We may implement support for online decryption using user-provided keys in the future.

Teleseer offers private cloud instances for enterprise customers.
And, yes, we offer on-prem and fully offline solutions for enterprise customers. contact us for pricing and more information.

Teleseer does not currently provide API-based PCAP uploads to your projects.
We are working on supporting this feature soon.

Passive asset discovery is the widest, but not the most detailed device and service identification approach.
Your PCAP might not contain sufficient information for us to correctly identify device and software versions.

We are continually improving our asset detection and identification engine to overcome this limitation.

Your network map may appear differently depending on the network vantage point it was collected from. Certain collection points only provide visibility into a single network segment.

For instance endpoint device, wireless access point, or only one interface from a network device.

Collecting from multiple interfaces from a core router, switch, or firewall (using a SPAN port or aggregator tap) will provide visibility into multiple network segments.

If you upload PCAPs collected from multiple vantage points and network segments, we will combine them into one unified network map.