Uncompromisingly secure network access for full network transparency

Maximize your network visibility with our cost-effective and innovative Network TAPs!

NEOXPacketRaven - Logo
IT-Security - Made in Germany

What are Network TAPs and what advantage do they have over SPAN ports?


The term TAP is an abbreviation and stands for Test Access Port. A Network TAP, also called Ethernet TAP , creates a passive access point to a network connection, with which the data signals transmitted via the cable can be read and evaluated for analysis purposes.
Once installed, all data traffic can be made available for various monitoring applications transparently, quickly, easily and without impairing the active network line with the help of a TAP. A Network TAP works on OSI Layer 1 and does not have a MAC address. It is therefore invisible in the network and cannot be detected by any attacker. This is indispensable in network forensics and security, as otherwise criminals could take the TAP into account.

The use of TAPs has another advantage: You decide where you want to access the data. This flexibility is of great benefit, as you are able to greatly influence and improve the quality of your measurement results.

Network TAPs are passive components and do not affect the original data traffic in any way. Thanks to the additional “fail-open” technology in the Ethernet copper TAPs, the data line is also switched through in the event of a power failure, the Network TAP works like a cable bridge and protects your productive network from failure. This means that you receive accurate data for error-free analysis directly from the line.
By using SPAN ports, however, the result can be falsified, as this technology works in store-and-forward mode and discards CRC errors at OSI Layer 2 instead of outputting them to the Mirror Port. In contrast, Ethernet taps remove these critical CRC errors without affecting the original data. Furthermore, a Network TAP with copper or SFP monitoring port works like a diode and does not allow access to the network via the monitoring ports for security reasons. Professional network analysis is therefore only guaranteed by using TAPs.

In addition, when using multiple TAPs, you get a much more accurate measurement result and can identify network and application errors even faster and more precisely. This saves you valuable time troubleshooting network errors. Instead of the complex configuration of SPAN ports, Network TAPs can be plug’n play installed and put into operation without any prior technical knowledge. Cisco, the world’s leading network equipment supplier, therefore advises against using such SPAN ports for network analysis with good reason.

Due to the way they work, Network TAPs have another decisive advantage: They completely divert the bi-directional data traffic. This means that you receive the send and receive directions of a full duplex line separately and can therefore, for example, analyze a 1G line loss-free even with a maximum load of 2Gbps. As a result, you need two network interfaces on the analyzer to record the network data.
Using this method, the sending and receiving directions can be easily differentiated from one another, which eliminates another source of error. SPAN ports, on the other hand, have to aggregate this data in the memory before it is passed on to the SPAN port, but this is not one of the primary tasks of a switch and thus has a significant negative impact on the quality of the analysis result. Furthermore, due to the use of mirror ports, the switch processor is used more heavily, which can result in data loss on the SPAN port.

Experts therefore only recommend the use of Network (Ethernet) TAPs for loss-free and reliable recording of network data!

Aggregation TAPs for fiber optics (multimode, singlemode) and copper network cables


Aggregation TAPs have the ability to bundle several data streams or, as the name suggests, to aggregate them. This results in a significant advantage: you can use this technology to evaluate the data from several lines simultaneously using a single network interface on your analyzer. When a single network connection is aggregated, it is referred to as a Port Aggregation TAP. If aggregation is exercised on multiple lines, this technique is called Link Aggregation.

The diagram below shows the schematic of a Port Aggregator. As you can see on this picture, the TX & RX line of a network connection is aggregated to port C & D respectively, so you are able to capture the data of a full duplex route bundled with only one network port. Thus, port C and D each receive the entire traffic of a route and, using this Aggregation TAP, one could send the network data to an analyzer such as OmniPeek or Wireshark for analysis purposes and simultaneously have the network traffic monitored by a security device such as an IDS.

Furthermore, our Aggregation TAPs can also be operated in TAP mode, also called break-out mode, and can be conveniently switched between these functions by means of a DIP switch. This is a significant advantage and allows you to use the Aggregation TAP like a conventional TAP for analysis purposes if needed. In addition, a Port Aggregation TAP, as shown below in the diagram on the right, can also be used as a Regeneration TAP. In this case the applied signal on port A is copied to B, C and D. This is a convenient way to multiply a simple signal to up to 3 ports without complex configuration, which allows you to analyze the applied data with 3 different monitoring tools simultaneously.

Regeneration or Regenerator TAPs


Regeneration or Regenerator TAPs are used to capture 100% full-duplex traffic that can be sent to multiple monitoring devices for analysis of your network.

Available TAP Modes:


TAP Modes - Copper to Copper

Split Ratios / Light Splitting for Fiber TAPs:


Fiber Network TAP - Split Ratio / Light Splitting Diagram - 50:50
Fiber Network TAP - Split Ratio / Light Splitting Diagram - 60:40


10/100/1000Base-T Copper TAPs

PacketRaven Copper TAPs are intelligent FPGA-based mirroring devices for secure and reliable tapping of network data in copper-based networks. These TAPs are looped into the copper line to be monitored and forward all data traffic without interruption.

Our Copper TAPs have redundant power supplies, which guarantees high reliability. They do not have a MAC or IP address, but work on OSI Layer 1, and are therefore not detectable in the network without expensive measurement equipment. Hackers and other attackers thus have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are increasingly used in the areas of network forensics, security and monitoring.

PacketRaven Copper TAPs were designed as portable TAPs, but can also be installed in data centers using a mounting kit in a 19″ mounting frame. They support 10M, 100M and 1G speeds.

With PacketRaven copper TAPs you get permanent network access without risk and provide e.g. your monitoring tools with 100% reliable network data without introducing a single point of failure. Because your network security tool is only as good as the data source!

Highlights

  • Safe, rock-solid FPGA-based design
  • Supports 10M, 100M and 1G network speeds – 10Base-T, 100Base-TX, 1000Base-T, 10/100/1000 BaseT
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible on the network, no IP address, no MAC address, cannot be hacked
  • Guaranteed no packet loss
  • Power supply via redundant AC/DC power supply units (5V) or 12-48V DC voltage
  • Supports PoE 802.3af passthrough
  • Supports failsafe mode for resilience in the event of a power failure
  • Supports breakout, aggregation and regeneration mode
  • Simple configuration via DIP switches
  • 100% reaction-free through galvanic isolation (data diode function)
  • Supports Jumbo Frames
  • Plug-n-Play
  • Designed, assembled, certified and tested in Germany
PacketRaven COPPER TAP OPTIONS
Article No.Media TypeNetworkConnector NET.Connector MON.
PRP-SCC-1GA 10/100/1000Base-T 10M/100M/1G RJ45 RJ45
PRP-SCS-1GA 10/100/1000Base-T 10M/100M/1G RJ45 SFP
PRP-SCC-1GB* 10/100/1000Base-T 10M/100M/1G RJ45 RJ45
PRP-SCS-1GB* 10/100/1000Base-T 10M/100M/1G RJ45 SFP

* Only Break-Out Mode available

DIMENSIONS (WxHxD) / WEIGHTCERTIFICATIONS
10.60 cm x 3.50 cm x 16.40 cm / ca. 1 kgCE, FCC, RoHS, WEEE, EN55032 KL. A/B, EN55035, EN61000-3-2,
EN61000-3-3, EN61000-6-2

Flexible SFP TAP

Our flexible SFP TAPs are intelligent FPGA-based mirroring devices for secure and reliable tapping of network data in optical and copper-based networks. These TAPs are looped into the network line to be monitored and route all data traffic without interruption.

The great advantage of SFP TAPs is that they can be used extremely flexibly in different network types and for different media types due to the simple interchangeability of their SFP transceivers.

Our TAPs have redundant power supplies, which guarantees high reliability. They do not have a MAC or IP address, but work on OSI Layer 1, and are therefore not detectable in the network without expensive measurement equipment. Hackers and other attackers thus have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are increasingly used in the areas of network forensics, security and monitoring.

PacketRaven SFP Network TAPs are designed as portable TAPs, but can also be installed in data centers via a mounting kit in a 19″ mounting frame and support networks up to 1G. With PacketRaven Network TAPs you get permanent network access without risk and provide e.g. your monitoring tools with 100% reliable network data – without introducing a single point of failure. Because your network security tool is only as good as the data source!

Highlights

  • Safe, rock-solid FPGA-based design
  • Supports 10/100/1000Base-T, 100Base-FX, 1G Singlemode 1000Base-LX, 1000Base-SX, 1000Base-ZX and 1000Base-TX
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible on the network, no IP address, no MAC address, cannot be hacked
  • Guaranteed no packet loss
  • Power supply via redundant AC/DC power supply units (5V) or 12-48V DC voltage
  • 100% passive without affecting the active network connection
  • Interchangeable SFP transceivers
  • Supports breakout, aggregation and regeneration mode
  • Simple configuration via DIP switches
  • 100% reaction-free through galvanic isolation (data diode function)
  • Supports Jumbo Frames
  • Plug-n-Play
  • Designed, assembled, certified and tested in Germany
PacketRaven SFP TAP OPTIONS
Article No.Media TypeNetworkConnector NET.Connector MON.
PRP-SSS-1GA 10/100/1000Base-T, 100Base-FX, 1G Singlemode 1000Base-LX, 1000Base-SX, 1000Base-ZX, 1000Base-TX 10M/100M/1G SFP SFP

DIMENSIONS (WxHxD) / WEIGHTCERTIFICATIONS
10.60 cm x 3.50 cm x 16.40 cm / ca. 1 kgCE, FCC, RoHS, WEEE, EN55032 KL. A/B, EN55035, EN61000-3-2,
EN61000-3-3, EN61000-6-2

1G - 400G Singlemode Fiber TAPs

PacketRaven Fiber TAPs are passive mirroring devices for secure and reliable tapping of network data in optical networks. These TAPs are looped into the fiber optic line to be monitored and route all data traffic without interruption.

Our fibre TAPs do not have a MAC or IP address, but work on OSI Layer 1, and are therefore not detectable in the network without expensive measurement equipment. Hackers and other attackers thus have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are increasingly used in the areas of network forensics, security and monitoring.

PacketRaven Fiber TAPs are designed as portable TAPs, but can also be installed in data centers via a mounting kit in a 19″ rack, and support network speeds up to 400G.
With PacketRaven Fiber TAPs you get permanent network access without risk and provide e.g. your monitoring tools with 100% reliable network data without introducing a single point of failure. Because your network security tool is only as good as the data source!

Highlights

  • 1000Base-LX/ZX – supported network speeds: 1G, 10G, 25G, 40G, 50G, 100G, 200G and 400G
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible on the network, no IP address, no MAC address, cannot be hacked
  • Guaranteed no packet loss
  • 100% passive without affecting the active network connection, no additional latency
  • Available in different split ratios – e.g. 50:50, 60:40, 70:30, 80:20, 90:10
  • No power supply needed, 100% passive
  • Plug-n-Play
  • Supports Jumbo Frames
  • Designed, assembled, certified and tested in Germany
PacketRaven Singlemode FIBER TAP OPTIONS
Article No.NetworkMedia & Fiber TypeWavelengthConnector NET.Connector MON.TAP Version
PRP-OS2-SLL-*1/10/25/40/50/100/200/400G1000Base-LX/ZX, OS2**1310 / 1550 nm LC Singlemode LC SinglemodeSingle-TAP
PRP-OS2-DLL-*1/10/25/40/50/100/200/400G1000Base-LX/ZX, OS2**1310 / 1550 nm LC Singlemode LC SinglemodeDual-TAP

  * Basic article number plus “-50” for a 50:50 split ratio, -60 for 60:40 and -70 for 70:30
  ** OS1 compatible

DIMENSIONS (WxHxD) / WEIGHTCERTIFICATIONS
10.60 cm x 3.50 cm x 16.40 cm / ca. 1 kgCE, FCC, RoHS, WEEE
Maximum Insertion Loss
Split Ratio (more on request)50:5060:4070:30
Singlemode OS1, OS23.4 dB / 3.4 dB2.5 dB / 4.5 dB1.7 dB / 5.8 dB

1G Singlemode Fiber TAPs
w/ Media Conversion
& Regeneration

PacketRaven Fiber TAPs with media conversion and regernation are active mirroring devices for the secure and reliable tapping of network data in optical and copper-based networks. These TAPs are looped into the fiber optic line to be monitored and route out all data traffic without interruption.

Our active Fiber TAPs have redundant power supplies, which guarantees high reliability. They do not have a MAC or IP address, but work on OSI Layer 1, and are therefore undetectable in the network without expensive measurement equipment. Hackers and other attackers therefore have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are being used more and more in the areas of network forensics, security and monitoring.

PacketRaven Fiber TAPs are designed as portable TAPs, but can also be installed in data centers via a mounting kit in a 19″ rack, and support 1G network speeds.
With PacketRaven Fiber TAPs you get permanent network access without risk and provide e.g. your monitoring tools with 100% reliable network data without introducing a single point of failure. Because your network security tool is only as good as the data source!

Highlights

  • Secure, rock-solid FPGA-based design
  • 1000Base-LX and 1000Base-ZX – supported network speed: 1G
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible on the network, no IP address, no MAC address, cannot be hacked
  • Guaranteed no packet loss
  • Power supply via redundant 5V AC/DC power supply or 12-48V DC voltage
  • 100% passive without affecting the active network connection, no additional latency
  • Available in different split ratios – e.g. 50:50, 60:40, 70:30, 80:20, 90:10
  • Support breakout, aggregation and regeneration mode
  • Easy configuration via DIP switch
  • 100% reaction-free due to galvanic isolation (data diode function)
  • Plug-n-Play
  • Supports Jumbo Frames
  • Designed, assembled, certified and tested in Germany
PacketRaven Singlemode FIBER TAP OPTIONS
Article No.Media TypeNetworkFiber TypeWavelengthConnector
NET.
Connector
MON.
PRP-OS2-SLC-*1000Base-LX1GOS2**1310 nmLC SinglemodeRJ45
PRP-OS2-SLS-*1000Base-LX1GOS2**1310 nmLC SinglemodeSFP
PRP-OS2-SLZC-*1000Base-ZX1GOS2**1310 nmLC SinglemodeRJ45
PRP-OS2-SLZS-*1000Base-ZX1GOS2**1310 nmLC SinglemodeSFP

  * Basic article number plus “-50” for a 50:50 split ratio, -60 for 60:40 and -70 for 70:30
  ** OS1 compatible

DIMENSIONS (WxHxD) / WEIGHTCERTIFICATIONS
10.60 cm x 3.50 cm x 16.40 cm / ca. 1 kgCE, FCC, RoHS, WEEE, EN55032 KL. A/B, EN55035, EN61000-3-2,
EN61000-3-3, EN61000-6-2
Maximum Insertion Loss
Split Ratio (more on request)50:5060:4070:30
Singlemode OS1, OS23.4 dB / 3.4 dB2.5 dB / 4.5 dB1.7 dB / 5.8 dB

1G - 400G Multimode Fiber TAPs

PacketRaven Fiber TAPs are passive mirroring devices for secure and reliable tapping of network data in optical networks. These TAPs are looped into the fiber optic line to be monitored and route all data traffic without interruption.

Our Fibre TAPs do not have a MAC or IP address, but work on OSI Layer 1, and are therefore not detectable in the network without expensive measurement equipment. Hackers and other attackers thus have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are increasingly used in the areas of network forensics, security and monitoring.

PacketRaven Fiber TAPs are designed as portable TAPs, but can also be installed in data centers via a mounting kit in a 19″ rack, and support network speeds up to 400G. With PacketRaven Fiber TAPs you get permanent network access without risk and provide e.g. your monitoring tools with 100% reliable network data without introducing a single point of failure. Because your network security tool is only as good as the data source!

Highlights

  • Supported network speeds: 1G, 2.5G, 5G, 10G, 25G, 40G, 50G, 100G, 200G and 400G
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible on the network, no IP address, no MAC address, cannot be hacked
  • Guaranteed no packet loss
  • 100% passive without affecting the active network connection, no additional latency
  • Available in different split ratios – e.g. 50:50, 60:40, 70:30, 80:20, 90:10
  • No power supply needed, 100% passive
  • Simple configuration via DIP switches
  • Plug-n-Play
  • Supports Jumbo Frames
  • Designed, assembled, certified and tested in Germany
PacketRaven Multimode FIBER TAP OPTIONS
Article
No.
NetworkFiber
Type
Wave-
length
Connector
NET.
Connector
MON.
TAP
Version
PRP-OM4-SLL-*1G/10G/25GOM4** 850 nm LC Multimode LC Multimode Single-TAP
PRP-OM4-DLL-*1G/10G/25GOM4** 850 nm LC Multimode LC Multimode Dual-TAP
PRP-OM4-SML-*1G/10G/25G/40G/50G/100GOM4** 850 nm MTP Multimode LC Multimode Single-TAP
PRP-OM4-DML-*1G/10G/25G/40G/50G/100GOM4** 850 nm MTP Multimode LC Multimode Dual-TAP
PRP-OM4-SMM-*1G/10G/25G/40G/50G/100GOM4** 850 nm MTP Multimode MTP Multimode Single-TAP
PRP-OM4-DMM-*1G/10G/25G/40G/50G/100GOM4** 850 nm MTP Multimode MTP Multimode Dual-TAP
PRP-OM5-SLL-*1G/10G/25G/40G/50G/100GOM5 850 –
950 nm
LC Multimode LC Multimode Single-TAP
PRP-OM5-DLL-*1G/10G/25G/40G/50G/100GOM5 850 –
950 nm
LC Multimode LC Multimode Dual-TAP
PRP-OM5-SML-*1G/10G/25G/40G/
50G/100G/200G/400G
OM5 850 –
950 nm
MTP Multimode LC Multimode Single-TAP
PRP-OM5-DML-*1G/10G/25G/40G/
50G/100G/200G/400G
OM5 850 –
950 nm
MTP Multimode LC Multimode Dual-TAP
PRP-OM5-SMM-*1G/10G/25G/40G/
50G/100G/200G/400G
OM5 850 –
950 nm
MTP Multimode MTP Multimode Single-TAP
PRP-OM5-DMM-*1G/10G/25G/40G/
50G/100G/200G/400G
OM5 850 –
950 nm
MTP Multimode MTP Multimode Dual-TAP

  * Basic article number plus “-50” for a 50:50 split ratio, -60 for 60:40 and -70 for 70:30
  ** OM3 compatible

DIMENSIONS (WxHxD) / WEIGHTCERTIFICATIONS
10.60 cm x 3.50 cm x 16.40 cm / ca. 1 kgCE, FCC, RoHS, WEEE
Maximum Insertion Loss
Split Ratio (more on request)50:5060:4070:30
Multimode OM3, OM4, OM53.8 dB / 3.8 dB2.8 dB / 4.8 dB2.2 dB / 6.1 dB


1G Multimode Fiber TAPs
w/ Media Conversion
& Regeneration

PacketRaven Fiber TAPs with media conversion and regernation are active mirroring devices for the secure and reliable tapping of network data in optical and copper-based networks. These TAPs are looped into the fiber optic line to be monitored and route out all data traffic without interruption.

Our active Fiber TAPs have redundant power supplies, which guarantees high reliability. They do not have a MAC or IP address, but work on OSI Layer 1, and are therefore undetectable in the network without expensive measurement equipment. Hackers and other attackers therefore have no chance, and since the integrity of the outgoing data remains unaltered due to this tapping method, Network TAPs are being used more and more in the areas of network forensics, security and monitoring.

PacketRaven Fiber TAPs are designed as portable TAPs, but can also be installed in data centers via a mounting kit in a 19″ rack, and support 1G network speeds.
With PacketRaven Fiber TAPs you get permanent network access without risk and provide e.g. your monitoring tools with 100% reliable network data without introducing a single point of failure.

Because your network security tool is only as good as the data source!

Highlights

  • Secure, rock-solid FPGA-based design
  • Support 1G Multimode 1000Base-SX
  • Alternative to SPAN ports – mirrors 100% of traffic including FCS/CRC errored packets that may be dropped by SPANs
  • Invisible on the network, no IP address, no MAC address, cannot be hacked
  • Guaranteed no packet loss
  • Power supply via redundant 5V AC/DC power supply or 12-48V DC voltage
  • Available in different split ratios – e.g. 50:50, 60:40, 70:30, 80:20, 90:10
  • 100% passive without affecting the active network connection, no additional latency
  • Support breakout, aggregation and regeneration mode
  • Easy configuration via DIP switch
  • 100% reaction-free due to galvanic isolation (data diode function)
  • Plug-n-Play
  • Supports Jumbo Frames
  • Designed, assembled, certified and tested in Germany
PacketRaven Multimode FIBER TAP OPTIONS
Article No.Media TypeNetworkFiber TypeWavelengthConnector
NET.
Connector
MON.
PRP-OM4-SLC-*1000Base-SX1GOM4**850 nmLC MultimodeRJ45
PRP-OM4-SLS-*1000Base-SX1GOM4**850 nmLC MultimodeSFP
PRP-OM5-SLC-*1000Base-SX1GOM5850 nm
– 950 nm
LC MultimodeRJ45
PRP-OM5-SLS-*1000Base-SX1GOM5850 nm
– 950 nm
LC MultimodeSFP

  * Basic article number plus “-50” for a 50:50 split ratio, -60 for 60:40 and -70 for 70:30
  ** OM3 compatible

DIMENSIONS (WxHxD) / WEIGHTCERTIFICATIONS
10.60 cm x 3.50 cm x 16.40 cm / ca. 1 kgCE, FCC, RoHS, WEEE, EN55032 KL. A/B, EN55035, EN61000-3-2,
EN61000-3-3, EN61000-6-2
Maximum Insertion Loss
Split Ratio (more on request)50:5060:4070:30
Multimode OM3, OM4, OM53.8 dB / 3.8 dB2.8 dB / 4.8 dB2.2 dB / 6.1 dB

Accessories

ARTICLE NO.ACCESSORIES
PRP-1U3Server rack mounting frame for 3 TAPs
PRP-1U3-BPBlank plate for mounting frame (see center in photo)
Mounting Frame for 3 Portable PacketRaven Network TAPs w/ Blind Plate in the centre

Contact Us
Unser Online-Shop

DOWNLOADS:

Datasheet
NEOXPacketRaven Family

Datasheet Download - NEOXPacketRaven - Portable Network TAPs Family

Datasheet
Copper TAPs

Datasheet - Cover - Copper-TAPs

Datasheet
SFP TAP

Datasheet - Cover - SFP-TAP

Datasheet
Singlemode Fiber TAPs

NEOXPacketRaven - Datasheet Download - Singlemode Fiber TAPs

Datasheet
Singlemode Fiber TAPs
w/ Media Conversion
& Regeneration

NEOXPacketRaven - Datasheet Download - Singlemode Fiber TAPs with Media Conversion and Regeneration

Datasheet
Multimode Fiber TAPs

NEOXPacketRaven - Datasheet Download - Multimode Fiber TAPs

Datasheet
Multimode Fiber TAPs
w/ Media Conversion
& Regeneration

NEOXPacketRaven - Datasheet Download - Multimode Fiber TAPs with Media Conversion and Regeneration

We will be happy to consult you and look forward to hearing from you!