Multi-port network tap

• US 20050050205A1
• Filed: 12/19/2003
• Published: 03/03/2005
• Est. Priority Date: 08/29/2003
• Status: Active Grant

• Current Assignee: Viavi Solutions, Inc. (Lumentum Holdings Inc.)
• Original Assignee: Finisar Corporation (II-VI Incorporated)
• Inventors: Beyers, Timothy M., Lawson, Arthur Michael, Gordy, Stephen C.
• Granted Patent: US 7,308,705 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: G06F 13/387 for adaptation of different data processing systems to different peripheral devices, e.g. protocol converters for incompatible systems, open system

Abstract

The present invention provides for network taps capable of connecting to a plurality of communication cables. The network taps provide one or more levels of multiplexers which allow network data signals from a particular communication cable to be delivered to an attached device in order to monitor the activity of the communication cable. The network taps also include integrated circuitry which control the various functions and components of the network tap. Embodiments of the network taps include ones in which network data signals from each communication cable are communicated to the integrated circuitry to allow the integrated circuitry to monitor across all communication cables; network taps having switches to provide for different port configurations; network taps having switches which allow attached devices to transmit data into the network tap; network taps having ports which allow for cascade configurations; and network taps having integrated circuitry which can communicate with a remote client device to provide additional functionality.

Claims

1. A network tap configured to communicate with network data carried on a plurality of network cables, comprising:

a plurality of port sets configured to selectively connect a plurality of network cables to the network tap, each of the plurality of port sets comprising;

a first port that can receive an end of a first segment of a network cable, and

a second port that can receive an end of a second segment of a network cable such that when the first segment and the second segment of a network cable are received, network data is permitted to be communicated between the first segment and the second segment;

a plurality of couplers, each coupler being connected to each of the first ports and the second ports, wherein each coupler is configured to receive a network data signal and generate a plurality of duplicate network data signals;

and

an integrated circuitry in communication with a duplicate network data signal from each coupler.

2. The network tap as recited in claim 1, further comprising a control port in communication with the integrated circuitry, the control port configured to be selectively connected to a remote client.

3. The network tap as recited in claim 1, wherein the integrated circuitry is configured to extract statistics from each of the network data signals from each coupler.

4. The network tap as recited in claim 1, further comprising at least one tap port through which a copy of the network data of one network cable can be transmitted to an attached device.

5. The network tap as recited in claim 4, wherein the at least one tap port is configured to receive device data from the attached device and to communicate the received device data through at least one of the first port and the second port of at least one of the plurality of port sets.

6. The network tap as recited in claim 4, further comprising a first level of multiplexers disposed in communication with the plurality of port sets and the at least one tap port, the first level of multiplexers comprising:

a first series of multiplexers connected to the couplers corresponding to the first ports; and

a second series of multiplexers connected to the couplers corresponding to the second ports.

7. The network tap as recited in claim 4, further comprising a switch disposed in communication between the plurality of port sets and the at least one tap port.

8. The network tap as recited in claim 7, wherein the switch is in communication with the integrated circuitry.

9. The network tap as recited in claim 7, further comprising a fan out buffer disposed in communication between the plurality of port sets and the switch.

10. The network tap as recited in claim 1, wherein the integrated circuitry comprises a Field Programmable Gate Array.

11. The network tap as recited in claim 1, wherein the network tap is configured to be connected in series to a second network tap, the network tap further comprising at least one cascading network port configured to be selectively connected to the at least one tap port of the second network tap.

12. The network tap as recited in claim 11, further comprising at least one cascade control port in communication with the integrated circuitry, the at least one cascade control port configured to communicate with a cascade control port of the second network tap.

13. A network tap that permits an attached device to communicate with network data carried on a plurality of network cables, comprising:

a plurality of port sets configured to selectively connect a plurality of network cables to the network tap, each of the plurality of port sets comprising;

a first port configured to transmit a network data signal, the first port configured to receive an end of a first segment of a network cable,

a second port configured to transmit a network data signal, the second port configured to receive an end of a second segment of a network cable such that when the first segment and the second segment of a network cable are received, network data is permitted to be communicated between the first segment and the second segment; and

at least one tap port through which a copy of the network data of one network cable can be transmitted to an attached device, the at least one tap port being configured to receive device data from the attached device and to communicate the received device data through at least one of the first port and the second port of at least one of the plurality of port sets.

14. The network tap as recited in claim 13, wherein one of the first port and the second port is adapted to communicate with a firewall of a network and wherein the device data includes a kill packet for controlling the operation of the firewall.

15. The network tap as recited in claim 13, wherein the attached device is an intrusion detection system.

16. The network tap as recited in claim 13, wherein a switch is disposed between the plurality of port sets and the at least one tap port to act as a routing node for transmission of network data and device data between the network tap and the attached device.

17. The network tap as recited in claim 16, wherein the switch is configured to combine a network data signal from the first port and the second port of one of the plurality of port sets forming a combined network data signal and transmit the combined network data signal to the at least one tap port.

18. The network tap as recited in claim 17, wherein the switch is configured to mirror the combined network data signal, forming a mirrored network data signal, and transmit the mirrored network data signal to the at least one tap port.

19. The network tap as recited in claim 16, wherein the switch is configured to receive device data from an attached device connected to the at least one tap port and transmit the device data to at least one of the first port and second port of at least one of the plurality of port sets.

20. The network tap as recited in claim 16, further comprising at least one fan out buffer disposed between the switch and the plurality of port sets, wherein the switch directs the device data to the fan out buffer to be transmitted by the fan out buffer to at least one of the first port and second port of at least one of the plurality of port sets.

21. The network tap as recited in claim 13, further comprising an integrated circuitry.

22. The network tap as recited in claim 21, wherein the at least one tap port is in communication with the integrated circuitry so that the integrated circuitry receives a copy of the device data.

23. A network tap that permits an attached device to communicate with network data carried on a plurality of network cables, comprising:

a plurality of port sets configured to selectively connect a plurality of network cables to the network tap, each of the plurality of port sets comprising;

a first port that can receive an end of a first segment of a network cable, and

a second port that can receive an end of a second segment of a network cable such that when the first segment and the second segment of a network cable are received, network data is permitted to be communicated between the first segment and the second segment;

a plurality of couplers, each coupler being connected to each of the first ports and the second ports, wherein each coupler is configured to receive a network data signal and generate a plurality of duplicate network data signals;

a first level of multiplexers connected to the plurality of couplers comprising;

a first series of multiplexers connected to the couplers corresponding to the first ports, and

a second series of multiplexers connected to the couplers corresponding to the second ports;

at least one tap port through which a network data signal from at least one of the first series of multiplexers and the second series of multiplexers can be transmitted to an attached device; and

an integrated circuitry disposed in communication with the first level of multiplexers for controlling which of the network data signals from the first and second series of multiplexers is sent to the at least one tap port.

24. The network tap as recited in claim 23, further comprising a second level of multiplexers comprising:

a first series of multiplexers connected to the first series of multiplexers of the first level of multiplexers; and

a second series of multiplexers connected to the second series of multiplexers of the first level of multiplexers.

25. The network tap as recited in claim 24, further comprising a third level of multiplexers comprising:

a first series of multiplexers connected to the first series of multiplexers of the second level of multiplexers; and

a second series of multiplexers connected to the second series of the multiplexers of the second level of multiplexers.

26. The network tap as recited in claim 23, further comprising a management port in communication with the integrated circuitry, the control port being configured to be selectively connected to a remote client.

27. The network tap as recited in claim 23, wherein the integrated circuitry comprises a Field Programmable Gate Array

28. The network tap as recited in claim 27, wherein the Field Programmable Gate Array comprises:

a physical layer device;

a buffer; and

a packet analysis module.

29. The network tap as recited in claim 28, wherein the Field Programmable Gate Array further comprises:

a memory; and

a control logic.

30. The network tap as recited in claim 29, wherein the Field Programmable Gate Array further comprises a buffer configured to communicate with a remote client.

31. The network tap as recited in claim 23, wherein a switch is disposed between the first level of multiplexers and the at least one tap port.

32. The network tap as recited in claim 31, wherein the switch is configured o receive device data from an attached device connected to the at least one tap port and transmit the device data to at least one of the first port and second port of at least one of the plurality of port sets.

33. The network tap as recited in claim 32, further comprising at least one fan out buffer disposed between the switch and the plurality of couplers, wherein the switch directs the device data to the fan out buffer to be transmitted by the fan out buffer to at least one of the plurality of couplers.

34. The network tap as recited in claim 31, wherein the switch is configured to combine a duplicate network data signal from the first series of multiplexers of the first level of multiplexers and a duplicate network data signal from the second series of multiplexers of the first level of multiplexers forming a combined network data signal and transmit the combined network data signal to the at least one tap port.

35. The network tap as recited in claim 34, wherein the switch is configured to mirror the combined network data signal, forming a mirrored network data signal, and transmit the mirrored network data signal to the at least one tap port, the at least one tap port comprising a first tap port and a second tap port.

36. A system of network taps configured to operate in a cascading configuration, each of the network taps being configured to communicate with network data carried on a plurality of network cables, comprising:

a first and second network tap configured to connect in series, each network tap comprising;

a plurality of port sets configured to selectively connect a plurality of network cables to the network tap, each of the plurality of port sets comprising;

a first port that can receive an end of a first segment of a network cable;

a second port that can receive an end of a second segment of a network cable such that when the first segment and the second segment of a network cable are received, network data is permitted to be communicated between the first segment and the second segment;

at least one tap port through which a copy of the network data of one network cable can be transmitted to an attached device;

at least one cascading network port configured to be selectively connected to the at least one tap port of another network tap and to transmit network data of the other network tap to the at least one tap port; and

means for controlling which network data signal is delivered to the at least one tap port.

37. The system as recited in claim 36, wherein the means for controlling which network data signal is delivered to the at least one tap port comprises:

a first level of multiplexers comprising;

a first series of multiplexers connected to the couplers corresponding to the first ports, and

a second series of multiplexers connected to the couplers corresponding to the second ports;

an integrated circuitry in communication with the first level of multiplexers; and

at least one cascade control port in communication with the integrated circuitry, the at least one cascade control port configured to communicate with the at least one cascade control port of another network tap.

38. The system as recited in claim 36, wherein each network tap further comprises a control port configured to be selectively connected to a remote client.

39. The system as recited in claim 37, further comprising a second level of multiplexers comprising:

a first series of multiplexers connected to the first series of multiplexers of the first level of multiplexers; and

a second series of multiplexers connected to the second series of multiplexers of the first level of multiplexers.

40. The network tap as recited in claim 39, further comprising a third level of multiplexers comprising:

a first series of multiplexers connected to the first series of multiplexers of the second level of multiplexers; and

a second series of multiplexers connected to the second series of the multiplexers of the second level of multiplexers.

41. The network tap as recited in claim 40, wherein the third level of multiplexers is connected to the at least one cascading network port.

42. The network tap as recited in claim 41, further comprising a coupler connected to each of the first series and second series of multiplexers in the third level of multiplexers.

43. The network tap as recited in claim 42, wherein the coupler comprises:

a physical layer device; and

a transformer.

44. The network tap as recited in claim 36, further comprising a switch disposed in communication between the plurality of port sets and the at least one tap port.