What’s New and Improved with the cPacket 19.3.1 Release?

With the cPacket 19.3.1 release, users can expect significant upgrades and new features designed to improve efficiency and decrease complexity, while minimizing troubleshooting time and reducing overall costs for greater ROI.

The new release is generally available and fully supported by the cPacket cVu Series, cStor Series, and cClear Series product lines for all enterprise, healthcare, government, and service provider networks. It is used for the advanced network packet brokering (NPB), network performance monitoring (NPM), network traffic analysis (NTA), high-capacity packet capture, and network dashboard visibility applications as follows.

High-performance cBurst Monitoring at Full-line Rates of 10/40/100 Gbps

cBurst allows for millisecond-resolution monitoring of traffic streams to identify network problems in real-time and is used by many users for accurate capacity planning and monitoring. cBurst supports QoS, VLAN, IPv4, IPv6, and IPCONV filter types. This release has further extended cBurst support to the 100G enabled cVu 16100/8100/4100 product line, operating at full line-rates of 10/40/100 Gbps with Layer 2 VPN monitoring.

Advanced 100G Enabled NPB and NPM Multi-port Traffic Monitoring

The new 100G enabled cVu 16100/8100/4100 product line supports a range of 16-port, 8-port and 4-port systems respectively to optimize various deployment site requirements with common control and differentiated NPB/NPM features such as:

  • Millisecond-resolution, cBurst functionality at full line-rates of 10/40/100 Gbps on every port
  • Nanosecond ultra-high accuracy timestamping with NTP/PTP/PPS synchronized time sources
  • Smart filtering on every ingress/egress port at wire-speeds ranging from 10 Gbps to 100 Gbps feeding the right network traffic to the right tools
  • Header stripping of MPLS/VxLAN/VnTag protocol headers
  • Source-port tagging and stripping with VLAN IDs
  • Dynamic truncation of UDP/TCP variable packet payloads

The new 100G enabled cVu 16100/8100/4100 product line monitors, analyzes, and forwards network traffic as the source of truth for performance and security related investigations and audit-trails. It assures reliable and lossless data delivery through distributed full-matrix architecture and smart ports with pre-ingress and post-egress filters. It further integrates and deploys with leading security tools through open monitoring architecture with RESTful API integration. Collectively, it reduces mean-time-to-resolution for application, user, and network performance issues.

Smart Filters and Multi-cluster Load Balancing

Smart Filter feature overcomes the challenges of selectively filtering traffic to perform additional processing on a case by case basis. cPacket’s unique Smart Filter technology allows full packet inspection of every byte in every packet while concurrently performing count, pass, drop, load balance, packet slicing, etc. at wire-speed. This ensures fully granular traffic pruning for performance monitoring and network troubleshooting. In addition, cPacket’s Multi-cluster Load Balancing feature allows cVu devices to balance the same amount of data to multiple different clusters, with each cluster having a different number of nodes or elements. For example, one can have three tool clusters, each with a different number of servers all receiving the same data. By providing multi-cluster load balancing, cVu devices can easily solve the issues encountered with unequal tool capabilities. The Smart Filter and Multi-cluster Load Balancing feature capabilities are important advanced NPB capabilities that have been made available as part of the 100G enabled cVu 16100/8100/4100 product line in this release.

Arista Timestamp Handling and L2 VPN Monitoring

This release extends time stamping extraction and stripping capabilities further by adding support of Arista 7280/7500R switches. Specifically, a) extracting timestamp information from the header inserted by the Arista devices and replacing with a cPacket timestamp, and b) supporting both 64-bit and 48-bit timestamp formats. This release further extends cBurst features by adding Layer 2 VPN monitoring which allows users to filter and compute KPIs at millisecond accuracy for Layer 2 traffic routed over MPLS to connect end-customer sites over a VPN. New filtering keywords have also been added to the cBurst provisioning. Both the Arista timestamping and L2 VPN monitoring features are available in the cVu 160/240/400/560NG and cVu 2440/3240NG products starting in this release.

SNMPv3 Agent Support

This release enhances SNMP support by implementing SNMPv3 protocol specification to the SNMP agent besides the existing SNMPv2c protocol version. Users can manage cClear and all cVu devices (cVu 160/240/400/560, cVu 2440/3240, and cVu 16100/8100/4100) using either SNMPv3 or v2c compatible SNMP Manager(s) starting from this release. New SNMP settings page is available under the Config/Status menu with the ability to turn on/off the SNMPv2c and SNMPv3 independent of each other. The same level of SNMP-GET and Trap functionality per the SNMP MIB are supported for status and trouble reporting.

cStor Packet Capture and Manageability Improvements

The cStor 10 Series has been further enhanced in this release to include:

  • Options to remove VLANs and filtering based on STAG/CTAG
  • Zwin, Missing-SYN and Failed SYN-ACK monitoring
  • MFA latency computation and API retrieval

The cStor 40/25/15 Series and cClear Series have been upgraded in their operational and maintenance capabilities to include:

  • Configuration of NTP/PTP time synchronization for the cStor devices via cClear and API
  • Backup and restore of cStor configuration files via cClear and API
  • Alphabetized list and select/deselect-all listed cStor devices

Workflow and Security Improvements

cVu Series achieves end-to-end visibility across hybrid-IT environment through high-performance data acquisition, correlation and presentation of key analytics. This release contains multiple GUI workflow improvements, including:

  • Table search and drill-down per port for configuration and feature functionality
  • Faster navigation to each module, alerted port and report/filter page
  • Dynamic sizing of topology screen display with full port table details
  • Context-sensitive across multiple page views
  • Simplified port name update and automatic topology save
  • User-friendly tooltips for all buttons and icons

Security management improvements such as known security vulnerabilities including Spectre/Meltdown, deprecated SSH cryptographic settings, nginx remote integer overflow, and multiple OpenSSH vulnerabilities have been addressed.

To learn more about cPacket’s products and solutions, contact us for a free demo.