What is the difference between a network tap and a switched port analyzer SPAN )?
|
While deploying network monitoring tools, IT managers are often faced with questions, such as: "Can we do this and still ensure that we aren't impacting the production network?" or "Can I make sure that I can see 100% of network traffic?" or "What is the best way to get data into my monitoring and test tools?" The good news is that THERE IS a low-cost (and very impactful) technology that helps IT managers:
This technology is network TAPs, and they are the best way to get data from your network into any monitoring tool. What is the Difference Between SPAN Port vs TAPs?Before we dive too deep into network TAPs, let's take a step back and look at the most popular alternative for getting data into monitoring tools: a SPAN port, also known as a mirror port. SPAN ports are often included in network equipment and are used to send data to a monitoring tool for analysis. However, there are a few facts to consider while using this approach (spoiler alert, they are not good facts):
So, why do SPAN ports fall short in so many ways when it comes to network monitoring? Well, it's because they were a bit of an afterthought and were never designed for large-scale network monitoring and analytics. Think that is too bold of a statement? Hang tight, we're getting there. A brief history of SPAN portsSPAN/mirror ports were originally created by Cisco to send some data for testing and troubleshooting. SPAN port technology was never intended for large-scale network analytics, and Cisco will be the first to admit this. Here are a few bullets from Cisco's own whitepaper, "Using the SPAN port for SAN analysis":
So, what is a network TAP?At the highest level, a network TAP is a device that makes a copy of network traffic and then sends that copy to a tool for monitoring or analysis. You simply stick a network TAP between any two connected pieces of network infrastructure, and you will immediately have a full-fidelity copy of the traffic that is flowing between those two devices to send a monitoring/analytic tool or security device. By using a network TAP, you eliminate the need to "borrow" resources from your existing network equipment; a TAP does not impact your existing infrastructure in any way. OK, so we got there now: SPAN ports are bad and network TAPs are good. Simply put, there is a lot to be gained from implementing a TAP fabric when you take on a network monitoring requirement. As mentioned previously, TAPs provide 100% visibility into network traffic, and they do not affect the production network in any way, shape, or form; two very key benefits while implementing a network monitoring solution. However, these are just two examples of the many benefits to using network TAPs... Find out more about network TAPs by downloading our free
Bài Viết Liên Quan
Bản quyền © 2021 seongay.com Inc.
|
