Vendor lineage
The Sniffer lineage - Network General to NetScout
The 1986 Sniffer made protocol analysis a profession; through Dolch luggables, Network Associates, and Arbor's DDoS telemetry, the whole bloodline converged on NetScout.
One entry for five companies, because they are one story: Network General's Sniffer named the practice every engineer still uses, Volker Dolch's rugged luggables were its field chassis, the Network Associates merger and un-merger carried the brand through the roll-up era, Arbor Networks scaled packet thinking to internet-wide DDoS telemetry - and NetScout, founded two years before the Sniffer existed, became the house where the whole analyzer tradition came home.
The profile covers the 1986 Sniffer, Sniffer University, the Dolch chassis, the 1997 NAI merger and 2004 rebirth, Arbor's Peakflow and ATLAS, and NetScout's 2007 and 2015 consolidating acquisitions.
Founding stories
Network General
Harry Saal and Len Shustek productized something engineers had been improvising with oscilloscopes and hex dumps: a machine that captured network traffic and DECODED it, protocol by protocol, into English. The Sniffer named an entire activity - to this day engineers 'sniff' traffic regardless of whose analyzer they hold - and Sniffer University trained the first generation of people who could read a network's actual conversation. Everything this site teaches about capture points descends from the profession Network General created.
NetScout Systems
Founded as Frontier Software Development two years before the Sniffer existed, NetScout took the other road: not the portable analyzer in a field bag but permanent, distributed visibility - probes and the nGenius platform watching production networks continuously. Two decades later the roads merged: NetScout became the house where the whole packet-analysis bloodline - the Sniffer itself, and later Arbor's DDoS telemetry - came home.
The timeline
- The Sniffer ships
Protocol analysis becomes a product: capture, decode, display. The generic verb the industry still uses is this machine's trademark ghost.
- The Dolch chassis
Volker Dolch's rugged luggables - born of his 1976 logic-analyzer company - become the classic Sniffer portable: a field-grade PC with a handle, the ancestor of every hardened laptop in every field engineer's trunk.
- Network Associates
December 1997: Network General merges with McAfee Associates (~$1.3 billion) forming NAI - the Sniffer sharing a roof with antivirus, PGP, and the Gauntlet firewall in one of the era's grand security roll-ups.
Deal figures per the public record.
- Reborn to be acquired
NAI refocuses as McAfee and divests Sniffer Technologies to Silver Lake and TPG (~$275 million); the buyers revive the Network General name - a three-year second life for the original brand.
- Home to NetScout
NetScout acquires Network General (~$205 million): the portable-analyzer tradition and the continuous-monitoring tradition finally merge into one visibility house.
- Arbor joins
NetScout acquires Danaher's communications businesses (~$2.3 billion in stock) - Tektronix Communications and Arbor Networks, whose Peakflow and ATLAS defined DDoS detection and internet-scale threat telemetry since 2000. The bloodline now spans from a single captured frame to planetary attack weather.
Deal structure per the public record.
Flagship products and solutions
- The SnifferThe original protocol analyzer - capture and human-readable decode, the product that named the practice.
- nGenius platformNetScout's continuous, distributed visibility line - the analyzer grown into infrastructure.
- Arbor Peakflow / ATLASFlow-based DDoS detection and the global attack-telemetry network - packet analysis at internet scale.
Key innovations
- The decodeTurning frames into labeled, explained conversations created a profession; every Wireshark column header is the Sniffer's grandchild.
- Visibility as a permanent layerThe lineage's arc - from a luggable you carry to the problem, to probes that never leave - is the history of network operations growing up.
Main markets
NetScout today spans service assurance and DDoS defense (Arbor) across carriers and enterprises - the consolidated home of the analyzer tradition.
Analyst standing
- One entry for five companies, deliberately: the Sniffer, its Dolch chassis, the NAI detour, Arbor's telemetry, and NetScout's roof are a single story - the biography of the capture point.