The term TAP is an abbreviation and stands for Test Access Port. A Network TAP, also known as an Ethernet TAP, provides a passive access point to an optical or copper-based network connection, enabling the data signals transmitted over the cable to be read and evaluated securely and reliably for analysis purposes.
These TAPs are looped into the network line to be monitored and forward all data traffic while maintaining data integrity, without interruption and without packet loss.
Once installed, a TAP can be used to transparently deliver all traffic to various monitoring applications quickly, easily, and without affecting the active network line.
In contrast to data tapping via a SPAN port, you get a much more accurate measurement result when using a TAP and can thus identify network and application errors even faster and more precisely. This saves you valuable time when troubleshooting network errors and problems.
Instead of the time-consuming configuration of SPAN ports, Network TAPs can be installed and commissioned plug-n-play, without any prior technical knowledge, in a very short time. For good reason, Cisco, the world’s leading network equipment manufacturer, therefore deliberately advises against the use of such SPAN ports for network analysis.
Network TAPs have another decisive advantage due to the way they work: they fully route bi-directional data traffic. This means that you receive the send and receive directions of a full duplex line separately and can therefore, for example, analyze a 1G line loss-free even with a maximum load of 2Gbps. As a result, you need two network interfaces on the analyzer to record the network data.
Using this method, the sending and receiving directions can be easily differentiated from one another, which eliminates another source of error. SPAN ports, on the other hand, must aggregate this data in memory before it is passed on to the SPAN port, but this is not one of the primary tasks of a switch and thus has a significant negative impact on the quality of the analysis result.
Furthermore, due to the use of mirror ports, the switch processor is more highly utilized, which can cause data loss on the SPAN port.
This range of our PacketRaven Network TAPs are designed as portable TAPs, but can also be installed in a 19″ mounting frame in data centres using a mounting kit, or on a DIN rail using a DIN rail clip. These TAPs support network speeds of 10/100/1000Mbps (10/100/1000Base-T).
You can find out more about our Network TAPs, the available operating modes, split ratios and much more here: NEOXPacketRaven Portable Copper, SFP and Fiber Network TAPs.
You can find more detailed information on the topic of “Network TAP versus SPAN/Mirror port” in our Whitepaper.
Tapping network data in rough environments
NEOX NETWORKS’ PacketRaven M12 Network TAPs are FPGA-based active outcoupling elements for secure and reliable tapping of network data in harsh environments. These TAPs are looped into the copper-based network line to be monitored and forward all data traffic while maintaining data integrity, without interruption and without packet loss.
A PacketRaven Network TAP operates on OSI Layer 1 and has no MAC address. It is therefore invisible in the network and cannot be detected by any attacker. This is essential, especially in network forensics and security, as otherwise criminals might be suspicious of the presence of the TAP.
Furthermore, our Network TAPs behave passively on the network side, which means that there is no interruption of network traffic in the event of a power failure (the only exception is our SFP TAP).
In order to ensure the highest possible reliability on the monitoring side, these TAPs have redundant power supplies, but can also be additionally operated or fused with 12-48V DC voltage. With our Copper TAP and M12 TAP, a power supply via PoE is even possible in addition.
Furthermore, all our copper and M12 TAPs work like a data diode. This means that the monitoring ports are physically isolated from the network ports and, for security reasons, access to the network via the monitoring ports is prevented on the hardware side.
Thus, by adding this additional security layer, it is not possible to compromise the network connection and the production network.
Advantages of M12 connectors
The M12 connector is a circular connector that is often used in industrial automation, sensor and control applications and especially harsh environments.
Some of the advantages of the M12 connector are:
- Durability: M12 connectors are designed for use in harsh environments and are therefore suitable for applications where the connector is exposed to vibration, dust and extreme temperatures.
- Compact size: M12 connectors have a small diameter of 12 mm and require only slightly more space than, for example, M12 connectors. an RJ45 connector.
- EMI/RFI protection: M12 connectors feature 360 degree shielding to help protect against electromagnetic and radio frequency interference. This is important in applications where electrical interference may occur.
- Easy to install: M12 connectors have a quick-connect design that allows for easy installation and removal of the connector, which is especially useful in applications where the connector needs to be removed and replaced frequently.
- Versatility: M12 connectors are available in different codings (A-coded, D-coded, X-coded, etc.), which are used to distinguish between the different types of signals that the connector can transmit (e.g. power, data, etc.). X-coding is used for Ethernet communication and is widely used in industrial automation and control systems as it enables fast and reliable data transmission up to 10Gbit. Our PacketRaven M12 TAPs also have X-coded connectors.
Overall, the M12 connector is a robust, compact and very versatile connector that is well suited for use in (harsh) industrial automation and control systems.
Especially in the field of Ethernet communication, it is a reliable and fast solution for data transmission.
PacketRaven STANDARD FEATURES
- Safe, rock-solid FPGA-based design
- Supported network speeds: 10M, 100M and 1G
- Alternative to SPAN Ports – mirrors 100% of traffic including FCS/CRC errored packets that may be discarded by SPANs.
- Invisible in the network, no IP address, no MAC address, cannot be hacked
- Power supply via redundant AC/DC power supplies (5V) and/or 12-48V DC voltage and/or PoE
- Guaranteed no packet loss
- 100% reaction-free due to galvanic isolation (Data Diode Function)
- Plug & Play – Operating mode change via DIP switch
- Support Breakout, Aggregation and Regeneration modes
- Does not cause additional latency
- Support up to 16k Jumbo Frames
- Extra hardened models available
- Models available for mobile use, rackmount installation or DIN rail installation
- Designed, assembled, certified and tested in Germany
HARDENED Packetraven ADVANCED FEATURES
- Optionally preconfigured – do not allow subsequent configuration changes
- Secureboot Firmware – at every start of the TAP it is checked if the firmware to be executed has a valid signature and an authorized public key “Key”.
- Security seals – cannot be removed unnoticed
- Safety screws – special tool required
- IEC 62443 and CRITIS approved
DIMENSIONS (WxHxD) / WEIGHT |
---|
10.60 cm x 3.50 cm x 16.40 cm / ca. 0.5 kg |
CERTIFICATIONS |
---|
CE, FCC, RoHS, WEEE, EN55032 KL. A/B, EN55035, EN61000-3-2, EN61000-3-3, EN61000-6-2, EN 50121-4:2016, EN 50129 |
Mounting Options
TAPs with rack mount frame bracket or DIN rail clip can of course also be used in mobile applications!
Portable models - these models have no special mounting options and are primarily designed for mobile use.
To install our portable TAPs in a server rack, you need our server rack mounting frame with item number PRP-1U3-V2, as well as a rackmount frame mounting kit (item number PRP-1U3-CLIP) for the TAP.
The server rack mounting frame PRP-1U3-V2 provides space for up to 3 portable PacketRaven Network TAPs.
Both components are available as accessories.
As a further alternative, we also offer a top-hat rail clip for our TAPs for mounting on a TS35/7.5 DIN top-hat rail. This clip can be rotated by 180° so that the connections of the TAP can be aligned according to the respective requirements.
This DIN rail clip, available as an accessory, has the item number PRP-DIN-CLIP.
Models & Accessories
PacketRaven M12 TAPs Standard Models |
||||||||
---|---|---|---|---|---|---|---|---|
If you need a TAP with DIN rail mounting clip, please order additionally the mounting clip PRP-DIN-CLIP! If you need a TAP with mounting frame front panel, please order additionally the front panel PRP-1U3-CLIP! (see „Mounting options") | ||||||||
Item No. | Network | Media Type | Connector NET. |
Connector MON. |
Supported TAP Modes | |||
PRP-M12-1GA | 10/100/1000Base-T | 10M/100M/1G | M12 (X-coded) | M12 (X-coded) | Aggregation, Breakout, Regeneration | |||
PRP-M12-1GB | 10/100/1000Base-T | 10M/100M/1G | M12 (X-coded) | M12 (X-coded) | Breakout |
PacketRaven M12 TAPs Hardened Models |
||||||||
---|---|---|---|---|---|---|---|---|
If you need a TAP with DIN rail mounting clip, please order additionally the mounting clip PRP-DIN-CLIP! If you need a TAP with mounting frame front panel, please order additionally the front panel PRP-1U3-CLIP! (see „Mounting options") | ||||||||
Item No. | Network | Media Type | Connector NET. |
Connector MON. |
Supported TAP Modes | |||
PRP-M12-1GA-S | 10/100/1000Base-T | 10M/100M/1G | M12 (X-coded) | M12 (X-coded) | Aggregation, Breakout, Regeneration | |||
PRP-M12-1GAO-S | 10/100/1000Base-T | 10M/100M/1G | M12 (X-coded) | M12 (X-coded) | Aggregation | |||
PRP-M12-1GBO-S | 10/100/1000Base-T | 10M/100M/1G | M12 (X-coded) | M12 (X-coded) | Breakout |
ITEM NO. | RACKMOUNT ACCESSORIES |
---|---|
PRP-1U3-V2 | Server rack mounting frame for 3 portable TAPs |
PRP-1U3-BP-CLIP | Rackmount frame bracket for mounting frame PRP-1U3-V2 |
PRP-1U3-BP-V2 | Blank plate for mounting frame PRP-1U3-V2 |
|
ITEM NO. | POWER SUPPLIES & ACCESSORIES | ||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
PRP-PS-INT | PSU with EU, UK, and US plug head | ||||||||||||||||||||||
PRP-PS-*-A | Plug head *EU, *UK or *US | ||||||||||||||||||||||
PRP-PS-EU | Power supply unit with EU plug (head) | ||||||||||||||||||||||
PRP-PS-UK | Power supply unit with UK plug (head) | ||||||||||||||||||||||
PRP-PS-US | Power supply unit with US plug (head) | ||||||||||||||||||||||
|
Standard Features
|
10 Mbps – 1 Gbps |
|
Full network transparency |
|
No impairment of data traffic |
|
100% network data |
|
Invisible for attackers |
|
No network access via Monitoring Port |
|
Flexible deployable |
|
Plug-n-play |
|
Failure protection on power loss |
|
PoE+ Power over Ethernet |
|
Redundant power supply |
|
Various Split Ratios |
|
Fast and precise |
|
Supports Jumbo frames |
|
Extra hardened models available |
|
Made in Germany |
Hardened Features
|
(Optional) Fix preconfigured |
|
Secured and encrypted firmware |
|
Security seal against unnoticed opening |
|
Safety screws against unwanted opening |
DOWNLOADS