[c-nsp] Physical Network TAP devices

[Murphy, William]

On the packet broker side we are using Arista 7504R and getting a ton of performance per dollar spent...  Arista has nice packet steering capability and we are really happy with the solution...  If you need some advanced features like packet de-duplication you may need to shell out the big bucks and go with GigaMON or Ixia or whatever...

Just looked at Big Switch Networks Big Monitoring Fabric in the past month and it sounds very interesting...  

On the tap side I've used taps from Netscout and didn't have any issues at all...

________________________________________
From: cisco-nsp <cisco-nsp-bounces at puck.nether.net> on behalf of Rick Martin <rick.martin at arkansas.gov>
Sent: Wednesday, July 19, 2017 10:50 AM
To: Nick Cutting; cisco-nsp at puck.nether.net; Tom Mazzola
Subject: Re: [c-nsp] Physical Network TAP devices

We have yet to make a purchase but over the years we have looked at several with GigaMon being one of the leaders. An interesting option that I think we will seriously consider is Cisco Nexus 9K platform running what Cisco calls Data Broker. I find it appealing that the Nexus switch can run in hybrid mode and function both as a tap aggregation device as well as a normal Nexus switch. This option can reportedly scale up to 100Gbps

https://urldefense.proofpoint.com/v2/url?u=http-3A__www.cisco.com_c_en_us_products_collateral_cloud-2Dsystems-2Dmanagement_nexus-2Ddata-2Dbroker_data-5Fsheet-5Fc78-2D729452.html&d=DwICAg&c=6vgNTiRn9_pqCD9hKx9JgXN1VapJQ8JVoF8oWH1AgfQ&r=KfZDYG9Z0HjJnyM7sFaf--H7klz6hYbHw7jZxQxoDkc&m=IIN-uK0EBf0lXMn3nOn-yoNwZ3Gl8CSfb8fG0G7em0o&s=NoIEH98o6QTtW9jy6L58SWtNqeExmo7UmOQx629KMXg&e=

Other options we have looked at include;

Anue
Arista - similar option as Cisco Data Broker
GigaMon
Ixia



-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Nick Cutting
Sent: Monday, July 17, 2017 12:39 PM
To: cisco-nsp at puck.nether.net; Tom Mazzola
Subject: [c-nsp] Physical Network TAP devices

Good afternoon,

We have a use case now to capture traffic at one of our egress points, and we need to use network taps.  We need at least 2 sources and two destinations, in a pair of devices. - Copper 1 gig at this point.  Is anyone using Copper/ Fiber Taps at 10g?

Can I please get some feedback on some of the brands of taps that you fine people use?

We were looking at gigamon, but I have not used TAPs in a very long time.  We have a need to move to a physical device because of limitations in the hardware in where we need to capture the traffic.

Any feedback is greatly appreciated.



Thank you,
Nick Cutting




_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://urldefense.proofpoint.com/v2/url?u=https-3A__puck.nether.net_mailman_listinfo_cisco-2Dnsp&d=DwICAg&c=6vgNTiRn9_pqCD9hKx9JgXN1VapJQ8JVoF8oWH1AgfQ&r=KfZDYG9Z0HjJnyM7sFaf--H7klz6hYbHw7jZxQxoDkc&m=IIN-uK0EBf0lXMn3nOn-yoNwZ3Gl8CSfb8fG0G7em0o&s=6lKo2WextAuU_N4LF6LN-Eo-GmBbLu8q8jCedZ4we-w&e=
archive at https://urldefense.proofpoint.com/v2/url?u=http-3A__puck.nether.net_pipermail_cisco-2Dnsp_&d=DwICAg&c=6vgNTiRn9_pqCD9hKx9JgXN1VapJQ8JVoF8oWH1AgfQ&r=KfZDYG9Z0HjJnyM7sFaf--H7klz6hYbHw7jZxQxoDkc&m=IIN-uK0EBf0lXMn3nOn-yoNwZ3Gl8CSfb8fG0G7em0o&s=PhLmKZ2CRP1a_PHrRhTgXYYgzXowBMe3-oIN-2Jcic0&e=
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://urldefense.proofpoint.com/v2/url?u=https-3A__puck.nether.net_mailman_listinfo_cisco-2Dnsp&d=DwICAg&c=6vgNTiRn9_pqCD9hKx9JgXN1VapJQ8JVoF8oWH1AgfQ&r=KfZDYG9Z0HjJnyM7sFaf--H7klz6hYbHw7jZxQxoDkc&m=IIN-uK0EBf0lXMn3nOn-yoNwZ3Gl8CSfb8fG0G7em0o&s=6lKo2WextAuU_N4LF6LN-Eo-GmBbLu8q8jCedZ4we-w&e=
archive at https://urldefense.proofpoint.com/v2/url?u=http-3A__puck.nether.net_pipermail_cisco-2Dnsp_&d=DwICAg&c=6vgNTiRn9_pqCD9hKx9JgXN1VapJQ8JVoF8oWH1AgfQ&r=KfZDYG9Z0HjJnyM7sFaf--H7klz6hYbHw7jZxQxoDkc&m=IIN-uK0EBf0lXMn3nOn-yoNwZ3Gl8CSfb8fG0G7em0o&s=PhLmKZ2CRP1a_PHrRhTgXYYgzXowBMe3-oIN-2Jcic0&e=