01LayerTM is the intelligent unified operating platform that seamlessly integrates appliance control, advanced service design, high-performance traffic processing, real-time monitoring, and comprehensive audit-ready workflows — delivering one consistent, powerful experience across your entire ecosystem of FlowDirector, Service Node, and FlowMagic deployments.
Drag·Connect·Deploy
Build Service and Analysis Flows from Modular Functions with Clarity, Speed, and Control.
Major Capabilities
Best Fit
Remote or manual upload triggered analysis: operators place PCAP or PCAPng files into the PCAP_Uploads workspace while live capture can continue at the site, then analyze both traffic sources through the same workflow.
Capabilities
Session and Connection QoS AnalysisReview connection records and QoS trend views together, using endpoint, service, duration, byte count, connection state, missed-byte, and session-duration signals to identify unstable flows, resets, or performance outliers.Integrated Data Science Environment - Jupyter NotebookOpen packet-derived databases directly from an integrated notebook, combine SQL-style queries with Python analysis libraries, and build repeatable plots or investigation notebooks without exporting data to a separate workstation.Detailed Packet Decoding and ExportInspect selected packets with protocol-decoder and hex views while preserving timeline and table context, then download the targeted result as PCAP or export packet records to PktDb for analytic workflows.DNS Data MiningReview DNS transactions as searchable records with timestamp, source, destination, latency, query name, query type, and response code fields, making domain activity easier to filter, sort, and export for investigation.File Extraction CapabilitiesSurface files observed in packet sessions as searchable records with source and destination context, analyzer source, MIME type, filename, duration, and export controls for follow-up review.HTTP Protocol Analysis and Content ExtractionAnalyze HTTP transactions as structured records with client and server addresses, ports, method, host, URI, and transaction depth, helping operators isolate web activity and target content-bearing sessions for extraction or export.SSL Handshake and Certificate AnalysisSummarize SSL/TLS handshakes with client and server addresses, TLS version, cipher, curve, server name, resumption status, and alert fields so encrypted sessions can be triaged without opening each packet.Network Time Protocol AnalysisInspect NTP exchanges as structured records with source and destination endpoints, version, mode, stratum, polling interval, precision, root delay, root dispersion, reference ID, and reference time fields.Tunnel AnalysisIdentify tunneled traffic by endpoint, port, tunnel type, and tunnel action so operators can spot encapsulated flows, discovery events, and tunnel close activity during PCAP review.
Related Functions
Shared reference
Common Component Attributes
This shared reference summarizes the common property groups that appear across NextIO components: identity, display behavior, and pad connectivity.
Matrix component property panel with Component, Display Properties, and Connectivity sections.
Display Properties Buttons
Display Properties change how the component is drawn on the canvas for service review and documentation. They do not change packet processing behavior.
Right arrow buttonarrow_forwardPlace input pads on the left and output pads on the right.Left arrow buttonarrow_backSwap pad sides for reverse visual flow.Compact buttonclose_fullscreenReduce the component footprint while keeping pads visible.Expanded buttoncheck_box_outline_blankRestore the normal component body view.
Edit Pad Lists
Use the + control to add another numbered input or output pad. The Edit control beside each count opens the matching pad-list editor, where users can name pads, reorder pads, delete entries, then apply or close the dialog.
After using + on both counts, the Matrix component and Connectivity panel show three input pads and three output pads.
Input Pad Count Edit opens the Input Pad List, where the input pads are named Ingress-A through Ingress-C.Output Pad Count Edit opens the Output Pad List, where the output pads are named Tool-A through Tool-C.
Build services from any input to any output
01LayerTM makes packet services easier to create by turning sources, processing functions, and destinations into connected building blocks. The same model supports troubleshooting, validation, monitoring, replay, and analysis workflows.
Inputs
Start from live, virtual, or recorded traffic
Bring traffic into the service canvas from physical ports, port groups, bonded links, OS devices, virtual interfaces, PCAP files, and TAP sources. Each source enters the same flow model, so live traffic and recorded traffic can be designed, validated, and reused consistently.
Processing path
Connect function nodes into a service flow
Drag NextIO components onto the canvas, connect each node to form full packet processing data path. 01Layer's Flow-Based Service Design Environment turns complex into an intuitive visual experience, delivering instant validation, zero errors, and production-ready services in minutes with total confidence.
SelectConnectDeploy
01LayerTM helps teams reuse the same flow-based method for packet brokering, capture, replay, filtering, analysis, and validation instead of rebuilding each workflow from scratch.
Outputs
Send results to tools, files, and operating paths
Route results to egress ports, tool groups, OS interfaces, virtual devices, PCAP files, or serial TAP workflows from the same service definition.
Why 01LayerTM
One OS for FlowDirector series, Service Node, and FlowMagic appliances
Integrated NextIO data plane, design environment, and operations workflows
Single-pane visibility across distributed nodes and mixed protocols
Built for high availability, compliance readiness, and secure operations
01LayerTM unifies the same operational model across the visibility stack.
Common functions
Core capabilities shared across appliances and deployment types.
Unified user experience
Visually consistent interface across product families
Search-first navigation to discover functions
Long-running charting and reporting support
Appliance management
Hardware integrity checks and device status monitoring
Management IP, timezone, location, and device operations
User/group administration and firmware updates
Service design environment
Service creation with diagram and code environments
Labeled connections and mixed active/inactive components
Full lifecycle controls: create, edit, start, stop, monitor, auto-restart
Component architecture
Input/output sources and sinks
Packet broker and advanced packet broker functions
NetFlow, metadata extraction, capture, and testing tools
Multi-node operations
Correlated workflows across fixed, mobile, and converged networks
Support for multi-node and multi-protocol deployments
Consistent operations model across distributed infrastructure
Security and audit readiness
Operating system hardening baseline
Security and compliance audit-oriented workflows
Timeline and reporting functions for operations traceability
Product-specific capabilities on 01LayerTM
Workflows and feature sets tailored to each product family while preserving a common operating model.
FlowMagic specific
Traffic generation and validation workflows
FlowMagic Visibility Studio extends 01LayerTM with generation and validation tools for test-driven operations.
Stateless traffic generator and stateful AppSim
Client simulation, server simulation, and PCAP replay
RFC-2544 workflows with packet database and PCAP templates
Use captured traces or extracted session data to generate test traffic