This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

network tap

0
1

Hi,

I see mention of using a network tap many places, but I haven't found anywhere to purchase one. Can somebody make a recommendation based on good personal experience?

Thanks.

asked 09 Apr '11, 19:15

eelarry's gravatar image

eelarry
368912
accept rate: 0%


3 Answers:

6

There are a number of vendors that sell those, and I have personally used TAPs from those vendors:

  1. Netoptics - www.netoptics.com
  2. Datacom - www.datacomsystems.com
  3. Finisar - www.finisar.com, not sure if they still sell taps, doesn't look like they do

Then there are others, which I haven't tested myself:

  1. Gigamon - www.gigamon.com
  2. VSS - www.vssmonitoring.com

and probably a couple more I haven't even heard of yet. I think most taps just work fine, I usually use the very basic full duplex taps from Netoptics and Datacom. My rules of thumb in using taps:

  1. Test them before going into the field. You need to be sure they deliver correct results
  2. Careful with link aggregation taps. I had two encounters with that kind of tap (once Datacom, once Netoptics) and they didn't work as expected. The Datacom tap put only about 10% of the real traffic on the output lines toward the analyzer, and the link was not even close to being half full (can't remember the model). Netoptics introduced CRC errors into a direct connection between a Cisco Switch and a Cisco router (it was an "iTap Triple-speed Port Aggregator" for Gigabit copper).
  3. Add-On Rule to #2: network taps are like modern cars: the less electronic doing fancy things, the better - there's less to break or go wrong :-)

answered 10 Apr '11, 03:16

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

edited 10 Apr '11, 03:19

Thank you for such a great reply!

(10 Apr '11, 08:00) eelarry

You're welcome! If you're happy with it you might accept it as an answer :-)

(10 Apr '11, 08:05) Jasper ♦♦

Definitely! I finally noticed the check mark icon :-)

(10 Apr '11, 08:09) eelarry

Ok, I have a question on this...I am recommending to my bosses that they invest in a tap. Ok, all is well in the land of milk and honey and I get 3/4 to use in the enterprise. But, I still need a capture tool/pc/laptop to plug into the tap to capture that traffic. What do people use? I've seen presentations from sharkfest about how poorly laptops perform, what do people use??

(28 Feb '14, 19:11) RTJ10

0

There is one from Netscout netscout tap

answered 24 Aug '12, 06:35

Harsha's gravatar image

Harsha
46115
accept rate: 0%

(24 Aug '12, 12:18) Harsha

0

And also some from Cubro they have also stupid ones :-)

answered 21 Oct '13, 07:21

chrisliom's gravatar image

chrisliom
1
accept rate: 0%