How to Boost Network Monitoring Tool Efficiency
February 07, 2019

Alastair Hartrup
Network Critical

Share this

Having the right tools and good visibility are critical to understanding what's going on in your network and applications. However, as networks become more complex and hybrid in nature, organizations can no longer afford to be reactive and rely only on portable diagnostic tools. They need real-time, comprehensive visibility.

To accomplish this, more and more organizations are deploying network monitoring platforms and solutions that utilize TAPs (Terminal Access Points) and Packet Brokers to permanently establish network links and gather critical performance data. These technologies provide maximum utilization of connected tools for IT teams looking for comprehensive monitoring and management in, for example, a Network Performance Monitoring and Diagnostics (NPMD) platform.

Why are TAPs so important? Network TAPs are stand-alone devices that make a mirror copy of all of the traffic that flows between two network end-points (or nodes). This can then be output to various network tools, while the live traffic continues to pass through the network. Because they are independent of the network, they're fully configurable. This allows complex packet manipulation to be performed by network performance (or security) solutions.

Packet Brokers take the technology a step further and allow for the combination, integration, separation, manipulation and processing of inputs from many sources (including TAPs), and then deliver that data to a wide variety of appliance, platform and tool destinations. 

Both play a major role in providing the data necessary for real-time, comprehensive network visibility.

Monitoring tools such as sniffers, probes and NPMD solutions can be permanently and safely installed on all network links using TAPs. They connect in-line on a network link, making a mirror copy of all network traffic and then forward that information directly to a monitoring tool (or Packet Broker). TAPs are also extremely safe – if power is lost, the network traffic will continue to flow. For more complex networks with a variety of connected tools, Packet Brokers are used with TAPs.

What are some of the key features that organizations should look for when deploying TAPs and Packet Brokers? Here are three key features to consider:

1. Flexible Port Mapping

Flexible port mapping allows the user to choose which ports the packets will travel through with no preset requirements. Packets may come in from the network, go back out to the network and also be directed to a connected monitoring tool. Some TAPs require certain ports be used for network traffic and others to be used to support monitoring tools. Flexible Port Mapping allows any port to be utilized for any type of traffic. This eliminates the need to buy a bigger system than necessary just because one type of port is maxed out, while other ports are open and unused. It also makes it simpler to add links and tools when any open port can be utilized for a tool or network access at any time. Not all TAPs and Packet Brokers offer this "scale out" flexibility.

2. Easy Aggregation

Aggregation is the combining of traffic from multiple links and sending that traffic to one specific tool. Often, links are underutilized. A 10 Gbps link, for example, may actually be carrying only 4 Gbps of actual traffic.

Understanding the actual traffic on links and aggregating underutilized links to a single TAP or Packet Broker port can provide dramatic savings on monitoring tools. Doing the math, aggregating five links running at 2 Gbps to a single 10 Gbps output port connected to one monitoring tool can reduce the tool budget by a factor of five.

Imagine the savings opportunity in a large complex network. Using this strategy on hundreds of links, organizations can save hundreds of thousands of dollars.

3. Independent Filtering

Independent filtering eliminates traffic that is not relevant to the mission of the connected monitoring tool. It helps tools run faster, more efficiently and allows them to monitor more links.

Hierarchical filtering is the traditional way that filtering is designed. This can be very complicated and prone to network affecting errors. If packets are filtered out at the top of the list, they cannot be re-introduced later.

Independent fast filtering allows filter maps to be created quickly without consequence to other filters further down the list. Independent filtering is faster and more accurate than hierarchical filtering. Look for TAPs or Packet Brokers that allow you to created multiple filters quickly on any stream with no need to distinguish between ingress and egress ports (and be sure you can create filter criteria with ranges and individual criteria).

When independent filtering is combined with aggregation, packets are filtered out of streams, allowing a higher aggregation ratio of links being sent to a monitoring tool. This means that independent filtering not only helps save OPEX by allowing faster, more accurate tool deployment, it also saves CAPEX by enhancing the link to tool aggregation ratio.

When looking to deploy or optimize your network monitoring solutions, consider the impact of strategically deploying network TAPs and Packet Brokers. Be sure you're using the aforementioned features, as they can offer significant tool cost savings and allow for a more efficient network monitoring solution.

Alastair Hartrup is CEO of Network Critical
Share this

The Latest

March 26, 2020

While remote work policies have been gaining steam for the better part of the past decade across the enterprise space — driven in large part by more agile and scalable, cloud-delivered business solutions — recent events have pushed adoption into overdrive ...

March 25, 2020

Time-critical, unplanned work caused by IT disruptions continues to plague enterprises around the world, leading to lost revenue, significant employee morale problems and missed opportunities to innovate, according to the State of Unplanned Work Report 2020, conducted by Dimensional Research for PagerDuty ...

March 24, 2020

In today's iterative world, development teams care a lot more about how apps are running. There's a demand for fixing actionable items. Developers want to know exactly what's broken, what to fix right now, and what can wait. They want to know, "Do we build or fix?" This trade-off between building new features versus fixing bugs is one of the key factors behind the adoption of Application Stability management tools ...

March 23, 2020

With the rise of mobile apps and iterative development releases, Application Stability has answered the widespread need to monitor applications in a new way, shifting the focus from servers and networks to the customer experience. The emergence of Application Stability has caused some consternation for diehard APM fans. However, these two solutions embody very distinct monitoring focuses, which leads me to believe there's room for both tools, as well as different teams for both ...

March 19, 2020

The 2019 State of E-Commerce Infrastructure Report, from Webscale, analyzes findings from a comprehensive survey of more than 450 ecommerce professionals regarding how their online stores performed during the 2019 holiday season. Some key insights from the report include ...

March 18, 2020

Robinhood is a unicorn startup that has been disrupting the way by which many millennials have been investing and managing their money for the past few years. For Robinhood, the burden of proof was to show that they can provide an infrastructure that is as scalable, reliable and secure as that of major banks who have been developing their trading infrastructure for the last quarter-century. That promise fell flat last week, when the market volatility brought about a set of edge cases that brought Robinhood's trading app to its knees ...

March 17, 2020

Application backend monitoring is the key to acquiring visibility across the enterprise's application stack, from the application layer and underlying infrastructure to third-party API services, web servers and databases, be they on-premises, in a public or private cloud, or in a hybrid model. By tracking and reporting performance in real time, IT teams can ensure applications perform at peak efficiency — and guarantee a seamless customer experience. How can IT operations teams improve application backend monitoring? By embracing artificial intelligence for operations — AIOps ...

March 16, 2020

In 2020, DevOps teams will face heightened expectations for higher speed and frequency of code delivery, which means their IT environments will become even more modular, ephemeral and dynamic — and significantly more complicated to monitor. As a result, AIOps will further cement its position as the most effective technology that DevOps teams can use to see and control what's going on with their applications and their underlying infrastructure, so that they can prevent outages. Here I outline five key trends to watch related to how AIOps will impact DevOps in 2020 and beyond ...

March 12, 2020

With the spread of the coronavirus (COVID-19), CIOs should focus on three short-term actions to increase their organizations' resilience against disruptions and prepare for rebound and growth, according to Gartner ...

March 11, 2020

Whether you consider the first generation of APM or the updates that followed for SOA and microservices, the most basic premise of the tools remains the same — PROVIDE VISIBILITY ...