DAG Packet Capture Cards

DAG Packet Capture Cards

Endace DAG (Data Acquisition and Generation) Packet Capture Cards guarantee 100% packet capture on any network regardless of packet size, interface type, or network load.

For more than 15 years the world’s leading banks, telecommunications and service providers, governments, defence agencies, e-commerce giants and other enterprises with high speed, complex networks have trusted DAG cards to be top of the class in reliability, accuracy, and performance for their packet capture applications.

DAG cards are the gold standard packet capture (sometimes called packet sniffer) cards used in appliances for security and network monitoring.

They are available in a range of models for monitoring every type of network interface: from entry level cards for monitoring 10/100/1000 Ethernet links, to cards supporting 10GbE, 40GbE and SONET/SDH links (up to SONET OC192, SDH STM-64 clear channel or channelized to STS3/STM-1).

DAG cards have up to four monitoring ports per card so they deliver industry-leading port density to save on rack space, power and cooling which ensures low cost of ownership. They are engineered for reliability and performance and, unlike a number of other packet capture cards, feature a fanless design that completely removes the possibility of failure due to moving parts.

DAG Card Features and Functions

In addition to 100% full line-rate packet capture, DAG cards also provide a range of additional hardware-based functions, delivering further significant performance benefits over software-only network sniffing tools.

These include:

Load balancing: Evenly balance loads up to 10 Gigabits of network traffic to a maximum of 32 memory buffers using intelligent hardware. Evenly distribute traffic from a single interface across multiple memory buffers while maintaining flow and session continuity. Each application can access its own receive stream in a separate memory buffer.

Packet filtering and classification: Hardware-based classification and filtering let you interrogate packet protocol headers and compare them with pre-set rules in hardware. This allows packets to be filtered (accepted or dropped) or classified as they arrive at the DAG card interface, providing pre-classified network packets to consuming applications and dramatically speeding up their performance.

Traffic replication: Packets may be cloned to multiple memory buffer locations to provide network traffic replication.

Time stamping: Nanosecond-level accurate packet time stamping and clock synchronization from external time references.

Learn More

New DAG 9.5G4 and DAG9.5G4F released

Two new DAG models have been announced (specifications below). The new quad port 9.5G4 and 9.5G4F models are designed to provide high-performance packet capture and processing on 10/100/1000Base-T networks and are recommended as replacements for the venerable DAG 7.5G4 (which is still available for compatibility with existing designs).

Both models provide onboard, hardware-based processing on a host of enterprise protocols and encapsulated telecom protocols, such as General Packet Radio Service Tunneling Protocol (GTP) and Generic Routing Encapsulation (GRE), for load balancing, classification and filtering.

The DAG 9.5G4F has a built-in failover mode, removing the need for a network tap and allowing the card to be used in inline mode.

Click "Older Model DAG Cards" to see a list of our older cards.

Older Model DAG Cards

Current DAG Card Models

Endace sells a range of DAG cards designed to meet the widest range of deployment options for high-speed packet capture solutions.

Listed below are our current models - recommended for new designs.

Current Model DAG Cards

Model 10X4-P 10X4-S 10X2-P 10X2-S 9.2SX2 9.5G4F 9.5G4 7.5G4 7.4S
Downloads Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet Datasheet
Interface type 1000 Base-T, 1GbE/10GbE Optical, 40GbE SR 1000 Base-T, 1GbE/10GbE Optical, 40GbE SR 1000 Base-T 1GbE/10GbE Optical 1000 Base-T 1GbE/10GbE Optical 10 GigE/SONET OC-192c (SDH STM-64) 10/100/1000 Base-T 10/100/1000 Base-T, 1GbE Optical 10/100/1000 Base-T, 1GbE Optical SONET (OC-3c/12c, OC-48c) (STM-1c/4c/16c)
Number of ports 4x SFP+ 4x SFP+ 2x SFP+ 2x SFP+ 2x SFP+ 4 x fixed copper 4x SFP 4x SFP 2x SFP
Bus type x8 lane PCI Express 3.0 x8 lane PCI Express 3.0 x8 lane PCI Express 3.0 x8 lane PCI Express 3.0 x8 lane PCI Express 2.0 x4 lane PCI Express 3.0 x4 lane PCI Express 3.0 x4 lane PCI Express 1.1 x8 lane PCI Express 1.1
Maximum capture speed 40Gbps 40Gbps 20Gbps 20Gbps 20Gbps 4Gbps 4Gbps 4Gbps 5Gbps
Transmit streams 4 (1 per port) 4 (1 per port) 2 (1 per port) 2 (1 per port) 1 4 (1 per port) 4 (1 per port) 1 1
Hardware Classification Rules 64 16 64 16 64 64 64 64 64
Time synchronization PPS, IRIG-B, PTP PPS, IRIG-B, PTP PPS, IRIG-B, PTP PPS, IRIG-B, PTP PPS, IRIG-B PPS, IRIG-B, PTP PPS, IRIG-B, PTP PPS, IRIG-B PPS, IRIG-B
Timestamp resolution 4ns 4ns 4ns 4ns 4ns 6.7ns 6.7ns 15ns 7.5ns
Protocols supported VLAN, MPLS, IPv4, IPv6, TCP, UDP, GTP, GRE VLAN, MPLS, IPv4, IPv6, TCP, UDP VLAN, MPLS, IPv4, IPv6, TCP, UDP, GTP, GRE VLAN, MPLS, IPv4, IPv6, TCP, UDP VLAN, MPLS, IPv4, IPv6, TCP, UDP VLAN, MPLS, IPv4, IPv6, TCP, UDP VLAN, MPLS, IPv4, IPv6, TCP, UDP VLAN, MPLS, IPv4, IPv6, TCP, UDP VLAN, MPLS, IPv4, IPv6, TCP, UDP
Encapsulation Ethernet Ethernet Ethernet Ethernet Ethernet, SONET(SDH) OC-192c SR-1 (STM I-64.1) Ethernet Ethernet Ethernet POS, ATM (OC-3c/12c), Raw SONET
Dimensions Full height, half length Full height, half length Half height, half length Half height, half length Full-height, half-length Full-height, half-length Full-height, half-length Full height, Half length
Half height, Half length
Supported OS Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x Linux 64 bit, FreeBSD 8.x, 9.x, 10.x