| Platform | Architectures | Notes |
|---|
| Windows 10 / 11 | x64 | Windows 10 21H2+, Windows 11 22H2+ recommended |
| Windows Server 2019 / 2022 | x64 | Desktop Experience or Server Core with GUI components |
| Debian 12 (Bookworm) | amd64 | .deb package via apt |
| Ubuntu 22.04 / 24.04 LTS | amd64 | .deb package via apt |
ARM64 builds are not currently published for any platform.
Hardware Requirements
Product Base (Desktop only)
| Resource | Minimum | Recommended |
|---|
| CPU | x64, 2 cores | x64, 4+ cores, AVX2 support |
| RAM | 8 GB | 16 GB+ |
| Disk | 2 GB free (app + logs + telemetry) | 10 GB+ free (retained telemetry, multiple integrations) |
| Network | Access to managed infrastructure | Low-latency LAN to firewalls, switches, SIEM |
Disk usage breakdown:
- Application binaries: ~300 MB
- Local SQLite database (telemetry, events): 100 MB – 2 GB depending on retention
- Logs: 50 MB – 500 MB (rotating, configurable)
- ARGUS model (if enabled): additional 4–8 GB (see below)
ARGUS Local AI (Recommended)
| Resource | Minimum | Recommended |
|---|
| RAM | +8 GB (16 GB total) | +16 GB (32 GB total) |
| Disk | +4 GB (model + runtime) | +8 GB (larger model, cache) |
| CPU | AVX2 required | AVX2 + AVX-512 preferred |
| GPU | Optional (CPU inference) | NVIDIA GPU with 8+ GB VRAM (CUDA acceleration) |
Notes:
- ARGUS bundles a quantized GGUF model (~3.5–7 GB depending on variant) and a local inference server (
llama.cpp-compatible).
- Inference runs entirely on the local machine via loopback (
127.0.0.1). No model weights or prompts leave the host.
- First launch downloads the model if not bundled (future releases will bundle it). Subsequent runs are fully offline.
- GPU acceleration requires NVIDIA drivers + CUDA toolkit on Windows/Linux. AMD ROCm and Intel oneAPI are not yet supported.
Software Dependencies
Windows
- Npcap (WinPcap API-compatible mode) — Required for raw socket / packet capture features in Exposure Intelligence. Installer offers to install Npcap automatically if missing.
- Visual C++ Redistributable 2015–2022 — Typically present; installer includes bootstrapper.
Linux
libnss3, libatk1.0-0, libdrm2, libgbm1, libasound2 — Standard desktop dependencies (pulled by .deb).npcap equivalent not required; AF_PACKET sockets used directly.
Permissions
| Operation | Windows | Linux |
|---|
| Install (per-user) | Standard user | Standard user (apt install ./pkg.deb via sudo) |
| Install (system-wide) | Administrator | root via sudo |
| Local sensor (interfaces, ARP, routing) | Standard user (most data) / Admin (raw sockets) | Standard user (most data) / CAP_NET_RAW (packet capture) |
| ARGUS inference | Standard user | Standard user |
| Uninstall | Standard user (per-user) / Admin (system) | root |
No persistent Windows service runs as SYSTEM. The background telemetry collector runs in the user session.
Network Access Summary
| Feature | Direction | Destination | Protocol | Required |
|---|
| Local sensor | Outbound (LAN) | Managed devices (firewalls, switches, servers) | SNMP, SSH, HTTPS, ICMP | Per integration |
| ARGUS inference | Loopback only | 127.0.0.1:<port> | HTTP (local) | No (optional) |
| Public IP detection | Outbound | https://api.ipify.org or similar | HTTPS | Optional (Exposure Intelligence) |
| Model download (first run) | Outbound | huggingface.co / CDN | HTTPS (443) | Only if not bundled |
| Update check | Outbound | download.trace-wall.com | HTTPS (443) | Configurable |
Virtualization & Containers
- WSL 2 — Not supported as a deployment target. Run natively on Windows host.
- Docker / Podman — No official container image. Desktop is a GUI application.
- VDI / RDSH — Supported per-user. Each session maintains independent local database.
Unsupported Configurations
- Windows 7 / 8 / 8.1 / Server 2012 / 2016
- Windows on ARM (Surface Pro X, etc.)
- macOS (no build planned)
- 32-bit (x86) on any OS
- Headless Linux without display server (X11 or Wayland) — Desktop requires a graphical session for the UI; background telemetry can run via
tracewall-agent (future release).
Related Pages