Install nTAPs on 10 Mb, 100 Mb, or 1 Gb copper links for quick, anytime access to network traffic. Depending on your network, choose 10/100 or 10/100/1000 copper nTAPs to send perfect copies of critical traffic to network analyzers, remote monitoring appliances, forensics tools, and similar dual-receive devices. For further flexibility a Copper-to-Optical Conversion nTAP is available.
Products:
10/100 Copper nTAP
- Copies Fast Ethernet traffic from a full-duplex copper link for a copper monitoring device
- Connects to the full-duplex link under test and an analyzer equipped with a dual-receive capture card
10/100/1000 Copper nTAP
- Copies gigabit traffic from a full-duplex copper link for a copper monitoring device
- Auto-negotiates to also support 10 Mb and Fast Ethernet networks
- Connects to the full-duplex link under test and an analyzer equipped with a dual-receive capture card
10/100/1000 Copper to Optical Conversion nTAP
- Copies gigabit traffic from a full-duplex copper link for a copper or optical monitoring device
- Connects to the full-duplex link under test, and a copper or optical analyzer equipped with a
dual-receive capture card
10/100/1000 Aggregator Conversion nTAP
Transfers network traffic from a full-duplex copper link to a copper or optical analysis or security device.
- The 10/100/1000 Aggregator Conversion nTAP not only aggregates full-duplex traffic but also can convert that traffic to be analyzed by a copper or optical single-receive analysis or security device.
- Aggregator nTAPs provide greater protection than a SPAN port against packet loss on low-utilization networks
- Choose from a 256 MB, 512 MB, or 1 GB buffer
- To connect to an optical device, the nTAP will need SFP modules (sold separately).
Install Conversion nTAPs on 10 Mb, 100 Mb, or 1 Gb links for quick, anytime access to network traffic. When analyzers and similar monitoring devices communicate over different topologies than the network, Optical-to-Copper or Copper-to-Optical nTAPs bridge the gap. Conversion nTAPs make copies of network data, sending one back to the network and the other out for analysis.
For single-receive devices, Aggregator Conversion nTAPs merge full-duplex links into single streams for transmission to up to two single-receive analysis devices. Industry-leading buffer sizes offer less likelihood of lost packets than SPAN ports to ensure critical traffic reaches analyzers, remote monitoring appliances, and forensics tools.
Products:
Optical to Copper Conversion nTAP
- Copies traffic from one full-duplex optical link to one copper monitoring device
- Connects to the full-duplex link under test and an analyzer equipped with a dual-receive capture card
- Compatible with network analyzers, security monitoring devices, forensics tools, remote monitoring appliances, and RMON probes
Optical to Copper Aggregator Conversion nTAP
- Copies traffic from one full-duplex optical link to one copper monitoring device
- Connects to the full-duplex link under test and an analyzer equipped with a single-receive
capture card
- Compatible with network analyzers, security monitoring devices, forensics tools, remote monitoring appliances, and RMON probes
- Choose from a 256 MB, 512 MB, or 1 GB buffer
10/100/1000 Aggregator Conversion nTAP
Transfers network traffic from a full-duplex copper link to a copper or optical analysis or security device.
- The 10/100/1000 Aggregator Conversion nTAP not only aggregates full-duplex traffic but also can convert that traffic to be analyzed by a copper or optical single-receive analysis or security device.
- Aggregator nTAPs provide greater protection than a SPAN port against packet loss on low-utilization networks
- Choose from a 256 MB, 512 MB, or 1 GB buffer
- To connect to an optical device, the nTAP will need SFP modules (sold separately).
Install nTAPs on 1 Gb or 10 Gb single- or multi-mode optical links for quick, anytime access to network traffic. Depending on your needs, choose an Optical nTAP that connects to one, two, or three full-duplex links to send perfect copies of critical traffic to network analyzers, remote monitoring appliances, forensics tools, and similar dual-receive devices. LC connections are standard. For further flexibility, Copper-to-Optical and Optical-to-Copper Conversion nTAPs are available.
Products:
One-Channel Optical Fiber nTAP
- Copies traffic from one full-duplex optical link for one optical monitoring device
- Connects to the full-duplex link under test and an analyzer equipped with a dual-receive capture card
- Available in both gigabit and 10 gigabit configurations
Two-Channel Optical Fiber nTAP
- Copies traffic from two full-duplex optical links for two optical monitoring devices
- Connects to two full-duplex links under test and two analyzers equipped with a dual-receive
capture card
- Available in both gigabit and 10 gigabit configurations
Three-Channel Optical Fiber nTAP
- Copies traffic from three full-duplex optical links for three optical monitoring devices
- Connects to three full-duplex links under test and three analyzers equipped with a dual-receive capture card
- Available in both gigabit and 10 gigabit configurations
Optical to Copper Conversion nTAP
- Copies traffic from one full-duplex optical link to one copper monitoring device
- Connects to the full-duplex link under test and an analyzer equipped with a dual-receive capture card
- Compatible with network analyzers, security monitoring devices, forensics tools, remote monitoring appliances, and RMON probes
Optical to Copper Aggregator Conversion nTAP
- Copies traffic from one full-duplex optical link to one copper monitoring device
- Connects to the full-duplex link under test and an analyzer equipped with a single-receive
capture card
- Compatible with network analyzers, security monitoring devices, forensics tools, remote monitoring appliances, and RMON probes
- Choose from a 256 MB, 512 MB, or 1 GB buffer
10/100/1000 Aggregator Conversion nTAP
Transfers network traffic from a full-duplex copper link to a copper or optical analysis or security device.
- The 10/100/1000 Aggregator Conversion nTAP not only aggregates full-duplex traffic but also
can convert that traffic to be analyzed by a copper or optical single-receive analysis or security device.
- Aggregator nTAPs provide greater protection than a SPAN port against packet loss on low-utilization networks
- Choose from a 256 MB, 512 MB, or 1 GB buffer
- To connect to an optical device, the nTAP will need SFP modules (sold separately).
Q: Does an nTAP require power?
A: Any nTAP with copper connections to the network or analyzer will require power to copy the data stream and send it to the monitoring device. However, the data stream continues to pass through the nTAP to the network even if power to the nTAP fails.
"Pure" optical nTAPs (fiber in and out) require no power to operate.
Q: Can I use a full-duplex nTAP to provide visibility into a half-duplex connection?
A: Yes, as long as your monitoring device is equipped with a dual-receive capture card.
An nTAP sends copies of the TX and RX of a half-duplex signal out through separate “send” ports to the monitoring device. If your monitoring device is equipped with a dual-receive capture card, you will be able to view both streams of data. However, if your monitoring device is equipped with only one receive port, it will only be able to view one stream of data at a time.
Q: The NIC in my analysis device has a single “receive” port. Will I get visibility into a full-duplex connection with an nTAP?
A: Yes, but you will only be able to view one side of the full-duplex link at a time. This is not recommended. An nTAP sends copies of the TX and RX of a full-duplex signal out through separate “send” ports to the monitoring device. If your monitoring device is equipped with a dual-receive capture card, you will be able to view both streams of data. However, if your monitoring device is equipped with only one receive port, it will only be able to view one stream of data. To view the entire full-duplex stream for analysis, the monitoring device should have two receive ports and the ability to aggregate TX and RX into a single stream.
Q: What split ratio do I need when deploying an optical nTAP?
A: If all devices between the connections are within 30 meters of the nTAP, a 50/50 split ratio is ideal. While we recommend that you always test the strength of your optical signal with a meter, for longer hauls, it may be necessary to choose a split ratio that diverts more of the signal to the distant device.
Q: Can I use standard cables with my nTAP?
A:Yes.
To connect a monitoring device to an optical nTAP:
Split a duplex cable (or use two simplex cables) and connect one end of each of those sides of the cable to the “send” ports on the nTAP, and the other end of each of those sides of the cable to the “receive” ports on the monitoring device’s NIC. We also offer a convenient analyzer (or splitter) cable to ensure this connection can be made without error.
To connect a monitoring device to an nTAP with copper outputs:
Use standard straight-through RJ45 Ethernet cables (cross over cables cannot be used with 10/100 Copper nTAP).
Q: Do nTAPs comply with European standards?
A: Yes. All copper nTAPs are CE certified to meet European standards for RF emissions. Optical nTAPs do not require RF certification because they are not electronic devices.
Q: What is an SFP module?
A: For flexibility in link access, some nTAPs include SFP (Small Form-Factor Pluggable) technology. SFPs are hot-swappable modules that can access different media types (Optical SX, LX, ZX, and Copper TX) and support varying data rates (10/100/1000). The Copper to Optical Conversion nTAP supports SFP technology, so the modules can be swapped out depending on the analyzer’s interface. For example, if a conversion nTAP currently has an SX SFP for the analyzer connection, and the analyzer has an LX interface, the current SX-based SFP can be swapped out with an LX SFP.
Q: What is the connector type in the SFP modules?
A: Optical SFPs (SX, LX, or ZX) have LC connectors; copper SFPs have RJ-45 connectors.
Q: What is the difference between single-mode (SM) and multimode (MM) cable?
A: Single-mode (SM) and Multimode (MM) cables differ by which wavelengths of light they are optimized for and the number of light signals they support. MM fiber is the most common cable and supports multiple light signals at various wavelengths simultaneously. The fiber core comes in 62.5 or 50 microns. SM fiber has a much smaller core (≈ 9 microns) and can only support a single wavelength of light signal. Because the SM cable has a smaller core and supports only one signal, there is less attenuation and data can travel longer distances.
Q: What do the labels SX and LX signify?
A: SX is the IEEE 802.3z standard for Gigabit Ethernet over short distances for multimode fiber cable. LX is the IEEE 802.3z standard for Gigabit Ethernet over longer distances for single-mode fiber cable.
Q: What is signal attenuation and how much attenuation does an nTAP cause?
A: Attenuation is the reduction of signal strength during transmission. Greater signal loss equals higher attenuation. A signal can lose intensity, or experience increased attenuation, with each surface or medium it traverses. As with all devices inserted into an optical link, one side effect of TAP usage is signal attenuation.
A TAP attenuates the signal for two reasons:
- The connections and internal TAP cables absorb and refract a portion of the signal.
- A portion of the signal strength is “siphoned off” and sent to the analyzer. How much of the signal strength is redirected for analysis depends on the split ratio.
An optical split ratio must be designated for each optical TAP. In most cases, a 50/50 split ratio is ideal, providing sufficient light to the network and to the monitoring device. However, there may be special cases that require an alternative ratio in order to meet signal power needs. For example, if a TAP is cabled close to the analyzer NIC (network interface card), and the link under test requires a long cable run, you may want to provide more power back to the network than the monitoring device. However, it may be more appropriate to implement a repeater on that segment. If you do choose an alternate ratio, keep in mind that the signal has to be strong enough for it to be interpreted at the destination. The table below shows an example of attenuation caused by a TAP at different split ratios. The rate of TAP attenuation can vary by TAP manufacturer.
Maximum insertion loss per split ratio
|
Multimode 62.5μm |
Multimode 50μm |
Single-mode 9μm |
|
1300nm |
850nm |
1300nm |
850nm |
1310nm |
50/50 |
3.9/3.9 |
4.7/4.7 |
4.5/4.5 |
5.5/5.5 |
3.6/3.6 |
60/40 |
3.0/5.0 |
3.8/5.7 |
3.7/5.6 |
4.7/6.6 |
2.8/4.8 |
70/30 |
2.3/6.3 |
3.0/7.0 |
2.9/7.0 |
3.9/8.0 |
2.0/6.1 |
80/20 |
1.7/8.3 |
2.4/9.0 |
2.3/9.0 |
3.2/10.0 |
1.3/8.0 |
90/10 |
1.2/12 |
1.9/12.5 |
1.8/12.8 |
2.7/13.5 |
.8/12.0 |
Q: Are nTAPs capable of passing data from their analyzer ports back through the TAP to the network?
A: In the diagram below you will see that a copy of the data coming out the right side of the processor chip is sent to the device attached to the "Analyzer" side of the TAP.
The “A” and “B” ports on the “Analyzer” side of the TAP must be capable of both transmitting and receiving data in order to negotiate a connection with the analyzer and they do this via the PHY. .
There is no connection between the receive port on the PHY and the processor. Therefore the TAP has no ability to transmit data from the analyzer back to the Link side of the TAP.
Includes our part numbers: TCTH-K, TCHG-K, TCOTHGT-xx-K, TAC256-K, TAC512-K, TACO256-K, TACO512-K
Q: What is the return policy?
A: Refunds are allowed on products within 30 days of purchase (purchase date on the invoice), provided the product is complete, in working order and both the product and packaging material is undamaged.
All returns must have a valid RMA number issued and the RMA number prominently displayed on the outside of the return shipping box. Before returning an item please contact our Technical Support.
7219 Kentwood Avenue