DAG Packet Capture Cards
DAG Packet Capture Cards
Endace DAG (Data Acquisition and Generation) Packet Capture Cards guarantee 100% packet capture on any network regardless of packet size, interface type, or network load.
For more than 15 years the world’s leading banks, telecommunications and service providers, governments, defence agencies, e-commerce giants and other enterprises with high speed, complex networks have trusted DAG cards to be top of the class in reliability, accuracy, and performance for their packet capture applications.
DAG cards are the gold standard packet capture (sometimes called packet sniffer) cards used in appliances for security and network monitoring.
They are available in a range of models for monitoring every type of network interface: from entry level cards for monitoring 10/100/1000 Ethernet links, to cards supporting 10GbE, 40GbE and SONET/SDH links (up to SONET OC192, SDH STM-64 clear channel or channelized to STS3/STM-1).
DAG cards have up to four monitoring ports per card so they deliver industry-leading port density to save on rack space, power and cooling which ensures low cost of ownership. They are engineered for reliability and performance and, unlike a number of other packet capture cards, feature a fanless design that completely removes the possibility of failure due to moving parts.
DAG Card Features and Functions
In addition to 100% full line-rate packet capture, DAG cards also provide a range of additional hardware-based functions, delivering further significant performance benefits over software-only network sniffing tools.
Load balancing: Evenly balance loads up to 10 Gigabits of network traffic to a maximum of 32 memory buffers using intelligent hardware. Evenly distribute traffic from a single interface across multiple memory buffers while maintaining flow and session continuity. Each application can access its own receive stream in a separate memory buffer.
Packet filtering and classification: Hardware-based classification and filtering let you interrogate packet protocol headers and compare them with pre-set rules in hardware. This allows packets to be filtered (accepted or dropped) or classified as they arrive at the DAG card interface, providing pre-classified network packets to consuming applications and dramatically speeding up their performance.
Traffic replication: Packets may be cloned to multiple memory buffer locations to provide network traffic replication.
Time stamping: Nanosecond-level accurate packet time stamping and clock synchronization from external time references.
New DAG 9.5G4 and DAG9.5G4F released
Two new DAG models have been announced (specifications below). The new quad port 9.5G4 and 9.5G4F models are designed to provide high-performance packet capture and processing on 10/100/1000Base-T networks and are recommended as replacements for the venerable DAG 7.5G4 (which is still available for compatibility with existing designs).
Both models provide onboard, hardware-based processing on a host of enterprise protocols and encapsulated telecom protocols, such as General Packet Radio Service Tunneling Protocol (GTP) and Generic Routing Encapsulation (GRE), for load balancing, classification and filtering.
The DAG 9.5G4F has a built-in failover mode, removing the need for a network tap and allowing the card to be used in inline mode.
Click "Older Model DAG Cards" to see a list of our older cards.
Current DAG Card Models
Endace sells a range of DAG cards designed to meet the widest range of deployment options for high-speed packet capture solutions.
Listed below are our current models - recommended for new designs.
Current Model DAG Cards
|Interface type||1000 Base-T 1GbE/10GbE Optical||1000 Base-T 1GbE/10GbE Optical||1000 Base-T 1GbE/10GbE Optical||1000 Base-T 1GbE/10GbE Optical||10 GigE/SONET OC-192c (SDH STM-64)||10/100/1000 Base-T||10/100/1000 Base-T, 1GbE Optical||10/100/1000 Base-T, 1GbE Optical||SONET (OC-3c/12c, OC-48c) (STM-1c/4c/16c)|
|Number of ports||4x SFP+||4x SFP+||2x SFP+||2x SFP+||2x SFP+||4 x fixed copper||4x SFP||4x SFP||2x SFP|
|Bus type||x8 lane PCI Express 3.0||x8 lane PCI Express 3.0||x8 lane PCI Express 3.0||x8 lane PCI Express 3.0||x8 lane PCI Express 2.0||x4 lane PCI Express 3.0||x4 lane PCI Express 3.0||x4 lane PCI Express 1.1||x8 lane PCI Express 1.1|
|Maximum capture speed||40Gbps||40Gbps||20Gbps||20Gbps||20Gbps||4Gbps||5Gbps|
|Transmit streams||4 (1 per port)||4 (1 per port)||2 (1 per port)||2 (1 per port)||1||1||1|
|Hardware Classification Rules||64||16||64||16||64||64||64||64||64|
|Time synchronization||PPS, IRIG-B, PTP||PPS, IRIG-B, PTP||PPS, IRIG-B, PTP||PPS, IRIG-B, PTP||PPS, IRIG-B||PPS, IRIG-B, PTP||PPS, IRIG-B, PTP||PPS, IRIG-B||PPS, IRIG-B|
|Protocols supported||VLAN, MPLS, IPv4, IPv6, TCP, UDP, GTP, GRE||VLAN, MPLS, IPv4, IPv6, TCP, UDP||VLAN, MPLS, IPv4, IPv6, TCP, UDP, GTP, GRE||VLAN, MPLS, IPv4, IPv6, TCP, UDP||VLAN, MPLS, IPv4, IPv6, TCP, UDP||VLAN, MPLS, IPv4, IPv6, TCP, UDP||VLAN, MPLS, IPv4, IPv6, TCP, UDP||VLAN, MPLS, IPv4, IPv6, TCP, UDP||VLAN, MPLS, IPv4, IPv6, TCP, UDP|
|Encapsulation||Ethernet||Ethernet||Ethernet||Ethernet||Ethernet, SONET(SDH) OC-192c SR-1 (STM I-64.1)||Ethernet||Ethernet||Ethernet||POS, ATM (OC-3c/12c), Raw SONET|
|Dimensions||Full height, half length||Full height, half length||Half height, half length||Half height, half length||Full-height, half-length||Full-height, half-length||Full-height, half-length||Full height,
||Half height, Half length|
|Supported OS||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x||Linux 64 bit, Windows 7 & 2008 64 bit||Linux 64 bit, FreeBSD 8.x, 9.x, 10.x|