Owner manual
GigaBit Fiber Port Aggregator Tap
4
Application Diagrams: Memory Operation
All trafc that passes through the Tap is sent to the monitoring device NIC on
a rst-in, rst-out basis, including trafc that is temporarily stored in memory.
(If two packets enter at the same time then one packet is processed while the
other is stored briey in memory, preventing collisions.)
When there is a burst of data, trafc in excess of the NIC's capacity is sent to
the Tap's memory. Up to 512 megabytes of data per side of the full-duplex
stream can be stored in memory. Memory continues to ll until its capacity is
reached, or the burst ends – whichever comes rst.
In both cases, the Tap applies a rst-in, rst out procedure, processing stored
data before new data from the link. If memory lls before the burst ends, the
memory stays lled as the stored data is processed – data that leaves the buffer
is immediately replaced. If the burst ends before the memory lls, memory
clears until the full megabyte of capacity is available, or another until another
burst in excess of the NIC's capacity requires additional memory.
The following three diagrams illustrate a simple example of a 1000 Mbps NIC
moving from 80% utilization, to 140% utilization, then back to 80%
utilization.
Figure 1: Aggregated trafc is less than NIC's capacity
Using a single NIC, the monitoring
device receives all combined traffic
from Side A and Side B, including
physical layer errors.
GigaBit SX SFP
Port Aggregator Tap
Span Port 2
Span Port 1
Monitoring Device
1
Side A Side B
Side A +
Side B
State 1: Side A + Side B is less than or equal to 100%
of the NIC's receive capacity.
Example: On a 1000 Mbps Span port, Side A is at 300 Mbps and Side B is at 500 Mbps.
The NIC receives 800 Mbps of traffic (80% utilization), so no memory is required
for the monitoring device NIC to process all full-duplex traffic.
1 2
Network
OUT IN OUT IN
A B
Port Aggregator
1
Network Monitor
2
A
B