Active response communications network tap

• US 8,320,242 B2
• Filed: 07/01/2005
• Issued: 11/27/2012
• Est. Priority Date: 12/24/2004
• Status: Active Grant

• Current Assignee: Keysight Technologies Singapore (Holdings) Pte. Limited. (Keysight Technologies, Inc.)
• Original Assignee: Net Optics Incorporated (Keysight Technologies, Inc.)
• Inventors: Matityahu, Eldad, Shaw, Robert E., Strong, Stephen H., Carpio, Dennis A.
• Primary Examiner(s): Thier, Michael
• Assistant Examiner(s): PASIA, REDENTOR M
• Application Number:
  US11/174,033
• Publication Number:
  US 20060153092A1
• Time in Patent Office: 2,706 Days
• Field of Search: 370/230, 370/235, 370/236, 370/276, 370293-295, 370401-402, 709223-226, 709230-233
• US Class Current: 370/230
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks

Abstract

An active response network tap for use in monitoring a network comprises a first device interface terminal, a second device interface terminal, a first monitor interface terminal, and a second monitor interface terminal. A tap structure is coupled to the first device interface terminal, second device interface terminal, first monitor interface terminal and second monitor interface terminal. A memory is coupled to the tap structure and configured to store data. In one aspect, the tap structure is configured to communicate full-duplex traffic between the tap structure and a monitor device coupled to a monitor interface terminal. In another aspect, the tap structure is configured to insert data from a monitor coupled to the first monitor interface into the traffic between the first device and the second device. Advantages of the invention include the ability to provide monitor access to a network while also supporting communication with other network devices.

Claims

1. An active response network tap for use in monitoring a network, the active response network tap comprising:

a first device interface terminal;

a second device interface terminal;

a first monitor interface terminal;

a second monitor interface terminal;

a tap structure coupled to the first device interface terminal, the second device interface terminal, the first monitor interface terminal, and second monitor interface terminal; and

a memory coupled to the tap structure and configured to store data,

wherein the tap structure is configured to communicate first full-duplex traffic between the tap structure and a first monitor, the first monitor coupled to the first monitor interface terminal,

the tap structure is further configured to communicate second full-duplex traffic between the tap structure and a second monitor, the second monitor coupled to the second monitor interface terminal,

the tap structure is further configured to provide bandwidth priority to a network packet over a response packet if the network packet and the response packet arrive at the active response network tap at the same time, wherein the response packet is buffered and transmitted in a manner that yields the bandwidth priority to the network packet, the network packet originating from the network, the response packet originating from at least one of the first monitor and the second monitor;

wherein the tap structure is further configured to aggregate a first data stream received from the first device interface terminal and a second data stream received from the second device interface terminal to generate a combined data stream, and

the tap structure is further configured to simultaneously send a first copy of the combined data stream to the first monitor through the first monitor interface terminal and a second copy of the combined data stream to the second monitor through the second monitor interface terminal.

2. The active response network tap of claim 1, wherein:

the tap structure is configured to communicate third full-duplex traffic between a first device coupled to the first device interface terminal and a second device coupled to the second device interface terminal,

the tap structure is disposed between the first device interface terminal and the first monitor interface terminal, and

the tap structure is disposed between the second device interface terminal and the second monitor interface terminal.

3. The active response network tap of claim 1, wherein:

the tap structure is configured to insert data from the first monitor into traffic between a first device coupled to the first device interface terminal and a second device coupled to the second device interface terminal.

4. The active response network tap of claim 1, wherein:

the first monitor interface terminal is configured to inject data into traffic between a first device coupled to the first device interface terminal and a second device coupled to the second device interface terminal, and

the second monitor interface terminal disallows the second monitor to inject any data into the traffic.

5. The active response network tap of claim 1, wherein:

the first monitor interface terminal is a first RJ-45 jack, and

the second monitor interface terminal is a second RJ-45 jack.

6. The active response network tap of claim 1, wherein:

the active response network tap has an Internet Protocol address.

7. The active response network tap of claim 1, wherein:

the tap structure is configured to provide traffic associated with the first device, traffic associated with the second device, and physical layer errors to the first monitor, and

the tap structure is configured to provide the traffic associated with the first device, the traffic associated with the second device, and the physical layer errors to the second monitor.

8. The active response network tap of claim 1 further comprising a buffer pair, the buffer pair including a first buffer and a second buffer, the first buffer being configured to buffer first data traffic, the first data traffic arriving from at least one of the first device interface terminal and the second device interface terminal, the second buffer being configured to buffer second data traffic, the second data traffic arriving from at least one of the first monitor interface terminal and the second monitor interface terminal, traffic being released from the buffer pair on a first-in, first out basis.

9. A method of monitoring network traffic using a tap comprising a first device interface terminal, a second device interface terminal, a first monitor interface terminal, a second monitor interface terminal, a tap structure coupled to the terminals, and a memory coupled to the tap structure, the method comprising:

communicating first full-duplex traffic between a first device coupled to the first device interface terminal and a second device coupled to the second device interface terminal;

communicating second full-duplex traffic between the tap structure and a first monitor, the first monitor coupled to the first monitor interface terminal;

communicating third full-duplex traffic between the tap structure and a second monitor, the second monitor coupled to the second monitor interface terminal;

providing bandwidth priority to a network packet over a response packet if the network packet and the response packet arrive at the active response network tap at the same time, wherein the response packet is buffered and transmitted in a manner that yields the bandwidth priority to the network packet, the network packet originating from the network, the response packet originating from at least one of the first monitor and the second monitor;

aggregating a first data stream received from the first device interface terminal and a second data stream received from the second device interface terminal to generate a combined data stream; and

simultaneously sending a first copy of the combined data stream to the first monitor through the first monitor interface terminal and a second copy of the combined data stream to the second monitor through the second monitor interface terminal.

10. The method of claim 9, further comprising the step of:

inserting data from the first monitor coupled to the first monitor interface into the first full-duplex traffic between the first device and the second device.

11. The method of claim 9, wherein:

the first monitor interface terminal is an RJ-45 jack.

12. The method of claim 9, further comprising:

injecting data from one of the first monitor and the second monitor into the first full-duplex traffic through the first monitor interface terminal; and

disallowing the second monitor to inject any data through the second monitor interface terminal into the network traffic.

13. The method of claim 9, wherein:

the tap structure is disposed between the first device interface terminal and the first monitor interface terminal, and

the tap structure is disposed between the second device interface terminal and the second monitor interface terminal.

14. The method of claim 9, wherein:

the first monitor has an Internet Protocol address.

15. The method of claim 9, wherein:

the tap has an Internet Protocol address.

16. The method of claim 9, further comprising:

inserting a Transmission Control Protocol reset from the first monitor into the first full-duplex traffic.

17. The method of claim 9, further comprising:

inserting an Internet Control Message Protocol message from the first monitor into the first full-duplex traffic.

18. The method of claim 9 further comprising:

releasing traffic from a buffer pair on a first-in, first out basis, wherein the buffer pair includes a first buffer and a second buffer,

using the first buffer to buffer first data traffic, the first data traffic arriving from at least one of the first device interface terminal and the second device interface terminal;

using the second buffer to buffer second data traffic, the second data traffic arriving from at least one of the first monitor interface terminal and the second monitor interface terminal; and

providing the priority to the network packet over the response packet when both the first buffer and the second buffer are empty.