Packet Duplication

By selectively feeding appropriate traffic, or duplicating data streams originating on a single interface, to different applications or application instances, NinjaProbe can simultaneously perform multiple passive probe and sensor functions. Each virtual interface can be independently controlled and is afforded its own dedicated resources, such as system memory.

The system memory is divided into blocks of contiguous address spaces (memory holes) which form the basis of a large, circular, first-in / first-out (FIFO) buffer. This buffer flattens the natural peaks and troughs of the incoming data streams, allowing applications to efficiently consume the traffic in real-time and enables Endace’s modified storage subsystems to write the data (for post-analysis) to disk at wire-speed rates nearing 10Gbps.