Sly Technologies Inc Information

Every organization with packet capture infrastructure has a rolling buffer. It fills, the oldest data gets purged, and the cycle repeats. Most teams have spent years optimizing within it — tuning retention windows, adding compression, trimming capture scope. The buffer remains. The rolling buffer is not a storage problem. It is an intelligence problem. Mandiant's M-Trends 2025 report puts the global median attacker dwell time at 11 days. A standard 72-hour retention window covers less than 28% of that period. When the alert fires on day 11, the packet evidence from day 1 is gone — deleted by a clock that had no idea what it was throwing away. Quarry, part of the Vantage Platform, changes the mechanism. Instead of purging by time, Quarry retains by significance. Its capture engine builds a continuous analytical record — decoded protocols, flow lifecycle, IDS correlations, anomaly signals — at 0.59% storage overhead. At rollover time, that record drives the decision: keep what was flagged, release what was routine. The same storage budget that supported a 72-hour buffer can support a year or more of flagged traffic on the same hardware. The analytical record survives the packet purge permanently — flow summaries, protocol events, IDS correlations, all fully queryable. Wireshark, Suricata, and Zeek work directly with Quarry without modification. Quarry is part of the Vantage Platform alongside Sentinel, a 24/7 capture daemon at up to 800 Gbps, and Lynx, a multi-user packet analysis interface. For developers, jNetPcap — our open-source Java SDK with 1M+ installs — is the entry point. jNetWorks is the scale-up path. Sly Technologies has been building packet intelligence infrastructure since 2005. Tampa, Florida.