Packet De-Duplication

Remove duplicate packets to boost network monitoring accuracy and security tool effectiveness.

Why Your Packets Need De-Duplication

How many duplicate packets are weighing down your systems? Packet duplication occurs when multiple tap and aggregation points, deployed throughout the datacenter to acquire necessary traffic, result in redundant copies of packets. Duplicates can also be caused by inter-VLAN communication, incorrect switch policy settings or unavoidable SPAN/mirror port configurations.

Unfortunately, these additional copies can well exceed 80 percent of traffic volume seen on your network. This takes up vital monitoring infrastructure bandwidth and tool computing power. As a result tools get overwhelmed causing them to lose effectiveness, which results in inaccurate analysis.

Problems that arise from duplicated packets include :

  • Misinterpretation by security tools, resulting in false positives
  • Improper performance diagnosis due to artificially elevated packet and byte counts
  • Reduced data retention periods on forensic recorders due to added storage burdens
  • Inaccurate flow data in NetFlow/IPFIX reports

Gigamon Solution — Duplicate Packet Removal with GigaSMART

Stop Overloading Your Tools with Identical Packets

What is packet de-duplication? De-duplication is a technique whereby duplicate packets are identified and dropped, while unique packets are left untouched.

The GigaSMART® De-Duplication application targets, identifies, and eliminates duplicate packets, blocking unnecessary duplication and sending optimized flows to your security and network monitoring tools. GigaSMART offloads the de-duplication task from these tools, letting you centralize this function while providing multiple tools with the same feed.

GigaSMART De-Duplication benefits include:

  • Enjoy significantly improved tool effectiveness and accuracy
  • Experience increased traffic volume analysis without swelling tool expenditure
  • Gain better security analytics and reduce false positive results
  • Get faster, more accurate forensics and malware detection
  • Reduce tool storage capacity requirements

GigaSMART De-Duplication is accurate and customizable. It lets you tune duplicate detection to improve accuracy and effectiveness. For example, you can specify whether two packets that are identical except for specific headers or fields (for example, MAC address, IP TOS or TCP Sequence number) are considered duplicates. In addition, the duplicate detection window is configurable to match your network traffic acquisition deployment.

The application also supports service chaining so that you can direct the de-duplicated traffic stream to multiple GigaSMART applications in succession, such as to the NetFlow generation and export app.

SOLUTION BRIEF

De-duplication

Learn how you can unburden your tools from duplicate packets with De-duplication.

PRODUCT BRIEF

GigaSMART

Extend the intelligence and value of your GigaVUE® appliances with applications that improve tool performance.

CASE STUDY

Clemson University

Balancing network performance and security to connect and protect today's great minds.

Training: GigaSMART Packet De-duplication

Get the most out of your visibility and security investments with free online learning. Data De-duplication allows you to unburden your network from the weight of duplicate packets so it can run at hyper speed. To learn more, check out our GigaSMART packet De-duplication training video.

Man looking at a phone

A Guide to Saving Millions

If saving money is a top priority, then you need a solution that can feed tools only the traffic that really matters. Nothing more. Nothing less. When your tools run more efficiently, you can start seeing real savings.

GigaSMART Features

GigaSMART® offers a number of other essential traffic intelligence services required for active visibility into infrastructure blind spots, including:

NetFlow Generation

Delivering basic Layer 2–4 network traffic data to analysis tools. 

Advanced Flow Slicing

Eliminates these issues by slicing payloads and packets from long data flow.

Source Port Labeling

Provides context to packets and allows tools to properly assess network behavior and threats based on where they are.

Adaptive Packet Filtering

Identifies patterns across any part of the network packet, including the packet payload.

SSL/TLS Decryption

Creates a secure channel between the server and the end user's computer or other devices as they exchange information.

Packet Slicing

Truncates packets while preserving the portion of the packet (the protocol headers) required for network analysis.

Advanced Load Balancing

Divides and distributes traffic among multiple tools, so network and security visibility can scale.

De-duplication

Targets, identifies and eliminates duplicate packets, blocking unnecessary duplication and sending optimized flows.

Masking

Provides customizable data protection by overwriting specific packet fields with a set pattern. 

Tunneling

Alleviates blindness of business-critical traffic at remote sites, virtualized data centers, or hosted in a public cloud.

Application Visualization

Provides a complete view of the applications running on your network automatically.

Application Filtering Intelligence

Extends Layer 7 visibility to thousands of common and proprietary applications.

Application Metadata Intelligence

Empowers your security information and event management and network performance monitoring tools.

GTP Correlation

Enables mobile service providers to monitor subscriber data in GPRS Tunneling Protocol tunnels.

5G Correlation

Intelligently forward subscriber sessions to specific tools by filtering on subscriber, user device, RAN or network slice IDs.

FlowVUE Flow Sampling

Provides subscriber IP-based flow sampling.

SIP/RTP Correlation

Enables enterprises and service providers to monitor VoIP traffic.

Have Questions?

We're here to help you find the right solution for your business.

By submitting this form, you agree to our Terms & Agreement. View our Privacy Statement.

Related Pages

Visibility Analytics and Fabric

NETWORK VISIBILITY

Visibility and Analytics Fabric

Deliver a smarter, more proactive approach to monitoring and security.

GigaVUE-HC1

VISIBILITY APPLIANCE

GigaVUE-HC1 Appliance

Compact appliance that aggregates and optimizes network data.

GigaVUE-HC2

VISIBILITY APPLIANCE

GigaVUE-HC2 Appliance

Multi-purpose, mid-sized appliance built to address complex requirements.

 

GigaVUE-HC3

VISIBILITY APPLIANCE

GigaVUE-HC3 Appliance

High performance appliance that enables comprehensive traffic insights.