Packet Broker

Applications:

  • Network analytics
  • Cybersecurity
  • DDoS
  • IDS, IPS
  • DPI

Key features:

  • Remote packet capture
  • Capturing by filters
  • Sampling, policing, duration
  • Packet slicing
  • HW timestamping
  • Event triggers
  • WireShark compatible
  • NetFlow agent

Description

Smart SFP Packet Broker is intended to improve network visibility and monitoring.

For monitoring and troubleshooting goals, Smart SFP Packet Broker supports remote packet capture according to user-defined filters. A copy of packets is transferred via ERSPAN protocol to a PC running Wireshark or to traffic auditing tools for further analysis.

Smart SFP Packet Broker allows to collect detailed traffic statistics by IP flows in NetFlow format. It can be used with any flow collector.

Smart SFP Packet Broker can be installed in SPAN port of a switch/router and perform security, performance monitoring, troubleshooting and etc.

Another possible application:

  • Network visibility: traffic patterns, top talkers, channel occupancy and other metrics
  • Security analysis: DDoS protection, ADS, IDS, DPI
  • Monitoring and troubleshooting: VoIP, APM
  • Reduce network and hardware load by mirroring only relevant traffic

Applications

Specification

Packet capture:

  • Remote packet capture via ERSPAN
  • Line and host interfaces
  • Capture by direction: Tx, Rx, both
  • Capture by filter on Rx
  • Rx filter fields: VLAN ID, protocol, IP src/dst, TCP/UDP src/dst ports, errored packets
  • Sampling, policing
  • Packet slicing
  • Duration: secs/bytes/packets
  • HW timestamping
  • WireShark compatible
  • Statistics

NetFlow:

  • NetFlow v9
  • Configurable sampling rate
  • Up to 1.5M/15M flows

Management:

  • CLI over SSH, SNMP, REST API
  • Static IP, DHCP
  • IPv4, IPv6, VRF
  • Loaned IP
  • VLAN
  • ACL, VPN
  • PTP slave, NTP client
  • Remote software upgrade

General:

  • 1/10 Gigabit Ethernet
  • Max frame size 9600 bytes
  • Inline or out-of-line installation
  • Digital Diagnostics Monitoring (DDM)
  • SFP/SFP+ MSA compliant
  • Multi-vendor compatibility
  • Industrial temperature

Documents

Documents