The TimeMachine can record the entire contents of a high-volume network traffic stream in order to later "travel back in time" and inspect activity that has only become interesting in retrospect. Two examples of use are security forensics (determining just how an attacker compromised a given machine) and network trouble-shooting, such as inspecting the precursors to a fault after the fault. The TimeMachine is designed to work in Gigabit environments and to store several days of network traffic. It can interface with network intrusion detection systems to enable retrospective analysis.
