Port mirroring allows network packets seen on one port (or an entire VLAN) to be copied to another port, where packet traffic can be analyzed for security or other inspection purposes. In the age of constant and increasingly sophisticated cyberthreats, the demand for full packet traffic analysis is only rising. Feed data to your analysis engines fast, easy and with low cost.
There are two traditional methods of deploying port mirroring on-premises.
The first is Integrated Port Mirroring, often referred to as a Switched Port Analyzer (SPAN) port. The challenge with SPAN ports is there is a limited number available on any given switch or router; and when running at high bandwidth rates, they can be an unwanted tax on the CPU. If processing tradeoffs are required when a switch or router comes under load, the port mirror is the first to be starved, meaning important traffic is not copied and sent to analyzers.
The second is an external test access point (TAP) - a hardware device inserted at a specific point in the network to monitor data. TAPs alleviate the processing load on the switch or router, but are very expensive.
Neither approach is ideal.
As the need for traffic monitoring shifts from on-premises to the cloud, network operators do not have access to cloud provider switch infrastructure tools. Integrated Port Monitoring is, therefore, not an option in the cloud - forcing the user to the traditional TAP approach.
Leading cloud TAP solutions require agents to be deployed, which introduces unwanted complexity and additional operating costs.
TNSR® software acts as a "software TAP" with built-in traffic monitoring - enable high volume traffic copying with ease - on-premises or in the cloud.
High throughput. Easy scalability. Low cost.
Key capabilities include:
There’s always something new with open-source, secure networking and TNSR software. Keep up with us by visiting our blog, social communities