A hardware device placed inline along a network link to capture live data traffic across the network link, which is sent to security or monitoring tools.