• Main
  • Technical Data
  • AGGREGATION
  • Filtering
  • DTR
  • DEMULTIPLEXING
  • ROUTING
  • Datasheet

 

The CUBRO Packetmaster combines up to 24 x 10/100/1000 ports and 2 x 10Gbit ports with the most powerful network process engine available on the market. This unit can handle up to 30Gbit IP Traffic per second. Basically the Packetmaster is a Test Access Port (TAP) but can do a lot more and is a high performance multipurpose IP traffic handling engine. It can also be used as router, switch, cross connect, aggregator, filter, load balancer .....
 

  • Link/Port Aggregation

Aggregation of up to 24 Ports or 12 links to a single or multiple output ports.

  • Filter

Filters traffic by IP address, port number and physical input port.

  • Load balancing

Load balances traffic by IP address, port number and physical input port.

  • Duplicated traffic remover

This function fully automatically removes duplicated packets. This function is extremely important when monitoring multiple links and entities where the same traffic is usually captured more than once.

  • 10G traffic demultiplexer

If highly loaded 10G links have to be monitored the traffic can be easily demultiplexed into 24 low traffic Gbit links.

 

 
  • Flexible unit combination

Various units can be connected together – e.g. 240 input ports monitored at 24 output ports is straight forward and easy.

  • Cross connect function

Packetmaster can work as layer 3 cross connect plus aggregator and filter.

  • Jumbo Frame Support

The Packetmaster supports jumbo Ethernet frames with a size of up to 9000 Bytes – this feature is supported in all applications

  • Modular software
    concept and easy
    upgrade capabilties

Because of its open hardware and its flexible and modular software concept the Packetmaster can grow with customers requirements.

 

  

 
  • SFP and XFP Modules

For a maximum of flexibility the Packetmaster is designed to run with any kind of SFP and XFP

  • Rugged 19” Housing

The Packetmaster is delivered in a ruggedized 19” 1U housing with precise connector labeling on the front panel.

  • Different Power Versions

48 VDC or 230 VAC in dual and single power supply versions available.

  • Management

Management is possible over RS232 and Ethernet. Moreover a special option for in-band management is also available.

  • Easy use and operation

For straight-forward operation and supervision the Packetmaster supports SNMP and CLI.

 

 

Inputs*

24 Gbit full duplex SFP Ports for any kind of SFP

2 10 Gbit full duplex
XFP Ports for any kind of XFP

Outputs*

24 Gbit full duplex SFP Ports for any kind of SFP

2 10 Gbit full duplex
XFP Ports for any kind of XFP

* Each port can be input or /and output depending

on the application and configuration

Management

Management Port: (1) RJ45 10/100/1000
Configuration (CLI) Port: (1) RS-232 DB9

Performance

Networkprocessor performance up to 30 Gbit/sec, split
in 2 domains with 14 Gbit/sec each.

Indicators

(All ports) Link LEDs
(All ports) Activity LEDs
1 Alarm LED
2 Power LEDs
1 System LED

Operating Specifications

Operating Temperature: 0ºC to 40ºC
Storage Temperature: -10ºC to 70ºC
Relative Humidity: 10% min, 95% max,
non-condensing

Mechanical Specifications:

Dimensions: 44 mm high x 330 mm deep x 483 mm wide

Electrical Specifications:

Input Power: 100-240V, 2A, 47-63Hz
DC Input: -48VDC nominal. -36 to -72VDC, 4.0A
DC Receptacle: Terminal peak, 12-14 gauge wire

Certifications

Fully RoHS compliant

 

 
The Aggregation function helps to combine Ethernet traffic from different links or ports to one ore more ports, to reduce the amount of monitoring devices.

Multi Link Aggregation

The Packetmaster combines up to eleven 10/100/1000 Mbit/s links and ggregates this traffic from all of these links to one or two outputs. It is also possible to change the number of inputs to get more outputs (e.g. 10 links input and 4 outputs).
Multi Port Aggregation

Packetmaster can also be used as port aggregator. It aggregates up to 23 10/100/1000 Mbit/s ports to a single 1000 Mbit/s monitoring port.

The configuration is flexible – meaning that the number of input ports can be decreased while the number of output ports is increased (e.g. 20 input ports and 4 output ports).
Aggregation example

Packetmaster allows you to combine as many units as needed. Furthermore it is also possible to mix port aggregation with link aggregation.

The only limit is the output bandwidth of the monitoringport.

  

 

 
 
 
 
 

The filter function helps to reduce the monitored Ethernet traffic from different links or ports. This makes monitoring simpler and users can focus only on the traffic of interest.

 
 

Multiple output filter selector

This example shows the basic function of the filter selector. The selection per port is fully independent from the other outputs and the user can select the same traffic as often as needed.

The selection is also working on the 10G output and does not interfere with the live traffic by any means. The selector delay is less than 1ms, so there is no impact on the measurement at all.

 

 

 

 

 

Individual filters (up to 50) per port

positive filter / negative filter / negative input filter / Fingerprint filter
 
The Fingerprint Filter is a  unique feature to filter in  payload, this is necesary to reduce the load on the
monitoring. See example

 

What can be selected?

 
The user can select IP traffic by IP address and port number in a very smart way.

E.g. the user wants to monitor the traffic between the hosts
10.10.10.9 - 10.10.10.14  and  20.20.20.9  20.20.20.14

Without smart selection the user had to setup 72 different filters.

10.10.10.9 - 20.20.20.9   and opposite direction 20.20.20.9 - 10.10.10.9
10.10.10.9 - 20.20.20.10 and opposite direction 20.20.20.10 - 10.10.10.9
         UNTIL
10.10.10.14 - 20.20.20.14 and opposite direction 20.20.20.14 - 10.10.10.14

With smart selection only

 10.10.10.10/29 in address field one and
 20.20.20.20/29 on address filed two

need to be entered. Because the CUBRO Packetmaster does not differentiate between destination and source  - it filters always the full conversation. This is also done on port numbers – e.g.  if all http traffic should be filtered the selected port number is set to 80 and that´s it.
 

The duplicated traffic remover function helps to eliminate multi captured Ethernet traffic from different links. This reduces the amount of traffic and overcomes difficulties with duplicated packets in monitoring Systems.

Why do we have duplicated traffic ?

In modern NGN or IMS VoIP networks several links have to be tapped to get a full view of the network. Some of these links can be redundant or load balanced resulting in duplicated packets on the monitoring output. But traffic on the monitoring equipment could not only include duplicated packets, in most of the cases the same traffic is available three or four times.

Duplicated packets do not only cause unnecessary high traffic but also has a negative impact on quality of the call trace decoding. It easily happens that some decoding engines can not handle duplicated traffic and produce wrong call traces.

To overcome this problem with normal IP filtering this is nearly impossible because in most systems the IP addresses are dynamic. If IP addresses are static it is still a very complex and time consuming work to filter out duplicated packets.

The solution to remove duplicated packets is the traffic remover function of the Packetmaster, which does the job automatically.

The user only has to select a time frame (e.g. 100ms) and within this time frame every duplicated packet will be discarded automatically. The packet remover function is realized in hardware so even high traffic payloads are handled without problems.

Application protected links.

In the case of using protected links you have two identical links which carry the same load. One link is used for communication while the other link is on standby.
In case of a problem with link one the equipment switches automatically to the second link without any interruption. When monitoring such links the traffic appears twice at the monitoring equipment. With the duplicate packet remover feature this is no issue anymore because the duplicated traffic will be discarded automatically. The switching procedure has no impact on captured traffic.

New Feature Duplicate packet remover with different MAC address

In IMS networks you have the situation that you will find duplicated packets, but they will be sent out from different routers or router ports therefore the MAC address is different. To identify such packets as identical we have developed a very smart application. We look deeper into the packet and find unique marks.

Currently TCP and UDP is supported by this feature.

Monitoring on today´s highly loaded links is a difficult task. Usually monitoring equipment is not built to be used on high traffic links and gets easily overloaded. The Cubro Packetmaster with its load demultiplexing function is the right answer. Especially for capturing and long-term monitoring this feature is very useful.

 

Demultiplexing the traffic of a 10Gbit/s link

The optical 10G (full duplex) link will be splitted into two simplex optical links (one for the traffic A to B and another one for traffic B to A) by a CUBRO optical TAP. These two links are connected to the two 10G RX ports of the Packetmaster. UP to 8 Ports can be supported in the Packetmaster 2 Depending on your needs the Packetmaster divides the traffic in up to 24 x 1 Gbit Streams.

The dividing can be based on IP address ranges and/or Ethernet ports. Furthermore the demultiplexing feature can be combined with the load-balancing application.If the traffic is divided by Ethernet ports (example HTTP, SMTP, FTP, SIP, TORRENT, …) the user can configure more than a single Ethernet port to a physical output. For example: send HTTP, SMTP, FTP and SIP to port 2 while TORRENT is sent to port 3 and 4 because the load is too high for a single Gbit Port.

 

 

 

 

.

Interception and Modifikation

With this application you can insert a Packetmaster in a live link. The Packetmaster receive the traffic
and pass it through without any change. The Packetmaster is fully invisible to the network, the transfer
delay is in the range of 15 – 20 ns only.

With the application you can block traffic based on the advanced filters.

Modify the traffic in the Packetmaster.

Drop a specific range of traffic, process it externally in a server and re-insert it again in the active datastream

 

 

 
 
 

Customer Request:  Monitoring 12 x 10 Gig links and 8 x 1 Gig links on three sites. The three sites are connected via a layer 3 network. The traffic should be aggregated to  4 Gbit ports with advanced filtering capabilities. An additional request is that duplicated traffic should be filtered out because it causes problems in the decoder probes.

 

Cubro Solution :


Site 1
Here we use two units of  Cubro 8 x 10 Gig port aggregator to aggregate 6 x 10 Gig links (12 ports)  and a third Cubro 8 x 10 Gig port aggregator to aggregate one traffic link and the two outputs from the upper 10 Gig port aggregators.With this solution we have now aggregated 8 x 10 Gig links (16 ports) to one 10 G link. This 10 G link is fed into the Packetmaster. The Packetmaster also receives the aggregated traffic from sites 2 and 3.

! Attention the traffic from site two and three is routed over a layer 3 network !

Site 2
At this site we use one 8 x 10 Gig port aggregator to aggregate 3 x 10 Gig links (6 ports) and the output is fed to one Packetmaster. Together with 2 x 1 Gig Links the last 10 Gig link at this site is also fed to the Packetmaster. The aggregated traffic is now routed to the layer 3 network from the customer to site 1.

Site 3
On this smaller sized site we use the Packetmaster to aggregate 2 x 1 Gig links only and send it further on to site 1. Someone could say that to use a Packetmaster for aggregation of 2 x 1Gig is a waste of performance.
But don´t forget we need the Packetmaster because of its superior duplicate packet remover function and routing capabilities.

Duplicate Packet remover

The user has only to select a time frame (e.g. 100 ms)  and within this time frame all duplicated packets are automatically removed.

 

       
Packetmaster Packetmaster 2  Aggregation Application   Fillter Application    

 

Packet Master

Title Filter      Display #  
# Article Title Author Hits
1 Packetmaster 2 Administrator 450
2 Packetmaster Administrator 355
3 Packetmaster XL Administrator 296