Network Monitoring Tools for TAP and SPAN Ports Traffic Monitoring and Packet Optimization

Why do You Need a Network Packet Broker(NPB) to Keep Your Networks Safe?

1. Product Background

The NetTAP® Network Packet Broker (NPB) is a device that optimizes the flow of traffic between TAP and SPAN connections and network monitoring, security and acceleration tools, it is network data visualization control device developed by Chengdu Shuwei Communication Co., Ltd.(short as: NetTAP®) is a comprehensive product of the whole visual data collection, data unified scheduling management, pretreatment and redistribution.Network elements which can realize different location, different exchange routing node link centralized collection of data receiving, processing engine, through the analysis of the device's built-in high-performance data will be collected original data accurate identification, analysis, statistical summary and tag, the original data redistribution output, monitoring equipment to meet all kinds of analysis in data mining, protocol analysis, signal analysis, security analysis, risk control, etc. And also they can then direct network traffic more efficiently and filters can be applied to optimize bandwidth usage on the network. This also means the performance of out of band tools will increase as they receive only actionable data.

2. Intelligent Traffic Processing Abilities​

ASIC Chip Plus Multicore CPU

1.8Tbps intelligent traffic processing capabilities

100GE Data Acquisition & 100GE Packet Capturing

25GE * 48 ports plus 100GE * 6 ports, Max Rx/Tx duplex processing, up to 1.8Tbps Traffic Data Transceiver at same time, for network Data Acquisition, simple Pre-processing

Data Replication

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Aggregation

Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports

Data Distribution & Packet Broker

Classified the incoming raw data accurately and discarded or forwarded different data services to multiple interface outputs according to the whitelist, blacklist or user’s predefined rules.

Data Filtering

Supported L2-L7 packet filtering matching, such as SMAC, DMAC, SIP, DIP, Sport, Dport, TTL, SYN, ACK, FIN, Ethernet type field and value, IP protocol number, TOS, etc. also supported flexible combination of up to 2000 filtering rules.

Load Balance

Supported load balance Hash algorithm and session-based weight sharing algorithm according to L2-L7 layer characteristics to ensure that the port output traffic dynamic of load balancing

UDF(User Defined Function) Match

Supported the matching of any key field in the first 128 bytes of a packet. Customized the Offset Value and Key Field Length and Content, and determining the traffic output policy according to the user configuration

Single Fiber Rx/Tx

Supported the single fiber Rx/Tx based on ports 10G, 25G, 40G, 100G working mode, to meet the requirement of single fiber data Rx/Tx in back-end devices, and can reduce the access cost of optical fiber materials for user to collect and distribute a large number of links.

Network Message Disitribution & Packet Distribution

A message splitting method based on multiple hash is characterized as follows: the method USES two hash algorithms to calculate two hash results respectively, USES one of the hash results to search the result of the spatial primary table as the benchmark index, and USES the other hash result to search the result of the spatial subtable as the auxiliary index to modify the benchmark index.

NetTAP® Visibility Platform

Supported NetTAP® Matrix-SDN Visual Control Platform Access

1+1 Redundant Power System(RPS)

Supported 1+1 Dual Redundant Power System

NT-FTAP-54ECX Network TAP NPB.pdf

3. Typical Application

Data Center Of Area:

Telecom,

Broadcasting,

Government,

Finance,

Energy,

Power,

Petroleum,

Hospital,

School,

Enterprise

And Other Industries

Network Packet Broker(NPB) Unified Schedule Application(as following)

In the network environment in the above, according to the back-end IDS, auditing, APT, Internet behavior management, and other different security monitoring analysis system, analysis of monitoring data object, the different latitude, the full amount of the original data in different data protocol, data structure and content of different data flow, accurately identify the useless, don't care about the background of the current implementation of screen operation, so as to achieve the user CARES about customization of the original data, visualization, and the purpose of the output to the back-end analysis equipment for processing, greatly improving the efficiency of backend systems.

Network Packet Broker(NPB) Centralized Collection Replication/Aggregation Application(as following)

Pictured above is the NetTAP® Network Packet Broker (NPB) : one of the typical applications of spectral image acquisition and link through the core switches, the method of multiple key node in the network access to the raw data flow after NetTAP® Network Packet Broker (NPB) centralized collection, again to get the data for identification, classification, statistics, correlation tracing, according to the demand to match the data of users care about or don't care about filtering, tag, the last in a variety of ways will have to deal with complete traffic sent to the back-end respectively all kinds of analysis of the monitoring system.

4. Specifications

*THE MORE ADVANCED FUNCTIONS WILL BE LAUNCHED SOON*