Lancope is now part of Cisco Learn MoreLancope Arrow About Cisco
Stealthwatch Data Director Illustration

UDP Director


The UDP Director greatly simplifies the integration and distribution of multiple types of network and security data across the enterprise.

The UDP Director™ (formerly known as the Stealthwatch FlowReplicator) is a high-speed, high-performance appliance that receives essential network and security information from multiple locations, and then forwards it in a single data stream to one or more destinations, such as the Stealthwatch FlowCollector. Most network devices can only send messages to a single log management system, making changes to network devices time consuming and costly. The UDP Director solves this problem by providing a single destination for all UDP data formats (NetFlow, SNMP, Syslog, etc.). Source IP addresses remain the same, so devices do not need to be reconfigured multiple times.

UDP Director by Lancope screenshot

Dramatically Simplified Network Data Collection and Distribution

With the UDP Director, organizations can point disparate log data to a single destination without the need to reconfigure their infrastructure when new tools are added/removed. The appliance greatly simplifies network and security monitoring by streamlining device configuration and change management. The UDP Director can receive data from any connectionless UDP application, and is available as a physical or virtual appliance.


Improved Network Performance

In addition to saving vast amounts of configuration time, the UDP Director minimizes potential disruptions to network operations. The appliance also reduces data duplication, and therefore the amount of data flowing across the network, improving performance and bandwidth while still allowing for pervasive network and security monitoring.


"UDP Director helped our Incident Response team, giving them a tool that helped them with visibility on the network. UDP Director provides improved security and operational benefits."

David Wlodarczyk,TIAA - CREF
  UDP Director Virtual Edition
Packet Replication Rate (input)** 15,000 pps
Packet Replication Rate (output) ** 30,000 pps

Minimum Requirements

  • 1 virtual CPU
  • 3GHz
  • 1GB RAM
Disk 50 GB
Operating System Hardened Linux


  UDP Director 1010* UDP Director 2010*
Packet Replication Rate (input)** 25,000 pps 37,500 pps
Packet Replication Rate (output) ** 50,000 pps 75,000 pps


  • Mgt. Port – 1; 10/100/1000 copper
  • 1 Monitor/Listening Port
  • Integrated HTTPS Web-UI; Serial and KVM access to CLI
  • Mgt. Port – 1; 10/100/1000 copper
  • 3 Monitor/Listening Ports
  • Optional:  2 add-on Gigabit optical fiber single-port NICs
Storage 160 GB, Non-redundant 146 GB, RAID-6, redundant
Hardware Platform R21011 R620
Hardware Generation 11Gv2 12G
Rack Units (mountable) 1U
Power Single power supply (250W)

Redundant 750 W AC, 50/60 Hz

Auto Ranging (100V – 240V)

Heat Dissipation 1039 BTU/hr maximum 2891 BTU/hr maximum
Operating System Hardened Linux
Dimensions Height: 1.67 in. (4.24 cm)
Width: 17.09 in. (43.4 cm)
Depth: 15.5 in. (39.37 cm)
Height: 1.68 in. (4.3 cm)
Width: 18.99 in. (48.24 cm) with rack latches
17.08 in. (43.4 cm) without rack latches
Depth: 29.25 in. (74.3 cm) with power supplies and bezel
27.25 in. (69.2 cm) w/o power supplies and bezel
Unit Weight ~17.77 lbs (8.058 kg) 41 lbs (18.6 kg)
Rails  Rack Chassis with Versa Rail, round holes for 3rd-party racks Sliding Ready Rails with Cable Mgmt. Arm

UDP Director Product Details

UDP Director 1010 Copper: 

  • 1U chassis
  • No redundant power & no redundant disk
  • 1 (one) 10/100/1000 copper interface management port
  • 1 (one) 10/100/1000 copper interface monitoring port
  • Engine capable of 25,000 packets per second (pps) and 50,000 pps output. 

UDP Director 2010 Copper:

  • 1U chassis
  • Redundant power and RAID configured hard drive
  • 1 (one) 10/100/1000 copper interface management port
  • 3 (three) 10/100/1000 copper interface monitoring ports
  • Engine capable of 37,500 packets per second (pps) and 75,000 pps output.


UDP Director 2010 Fiber:

  • 1U chassis
  • Redundant power and RAID configured hard drive
  • 1 (one) 10/100/1000 copper interface management port
  • 2 (two) 10/100/1000 copper interface monitoring ports
  • Engine capable of 37,500 packets per second (pps) and 75,000 pps output. 
UDP Director Virtual Edition 
  • VMware only
  • Fully self-managed operating system and database included
  • Engine capable of 15,000 packets per second (pps) and 30,000 pps output. 
  • FCC (U.S. only) Class A
  • DOC (Canada) Class A
  • CE Mark (EN 55022 Class A, EN55024, EN61000-3-2, EN61000-3-3, EN60950)
  • VCCI Class A
  • UL 1950
  • CSA 950
*Specs for Stealthwatch v6.5
**Packets per second, sustained