IP Library Granted Patent US 7,613,837
Granted Patent B2
US 7,613,837 · App. 10/735,417 · Granted Nov 3, 2009

Network tap with interchangeable ports

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,613,837
App. No.
10/735,417
Granted
Nov 3, 2009
Kind
B2
Abstract

A network tap for enabling attached devices, such as an intrusion detection system, to transmit information into a communication line of the network without disrupting the network traffic on the communication line. When the attached device is an intrusion detection device, the network tap is connected to a firewall. An Ethernet switch or field programmable gate array (FPGA) is incorporated in the network tap to coordinate the transmission of device data to avoid data collisions with data transmissions already existing in the communication line. The network tap may be operated in various modes to accommodate different capabilities of attached devices. In addition, the network tap has various port configurations to allow a user to connect various attached devices through a single cable or dual cables.

Claims (60)

1. A network tap that permits an attached device to communicate with a node of a network, the node of the network communicating with a network cable transmitting network data thereon, the network cable having a first segment and a second segment, the network tap comprising:

a first and second tap port, at least one of which is configured to receive a copy of network data obtained from the network cable, wherein the attached device can be selectively connected to at least one of the first and second tap ports and at least one of the first and second tap ports is configured to receive device data from the attached device, the first and second tap ports being capable of operating in a plurality of modes, each being defined by enabling or disabling the ability of the first and second tap ports to receive network data and device data;

means for inserting device data from the attached device into the network cable without disrupting the flow of network data in the network cable, wherein the means for inserting device data coordinates transmission of the device data in the network cable with the network data flowing therein to avoid data collisions; and

means for selecting one of the plurality of modes in which the first and second tap ports operate.

2. The network tap as recited in claim 1 , wherein in one mode, the first and second tap ports are both enabled to receive the network data.

3. The network tap as recited in claim 2 , wherein in one mode, at least one of the first and second tap ports are enabled to receive device data.

4. The network tap as recited in claim 2 , wherein in one mode, the first and second tap ports are both disabled from receiving device data.

5. The network tap as recited in claim 1 , wherein in one mode, one of the first and second tap ports is enabled to receive network data and the other of the first and second tap ports is disabled from receiving network data.

6. The network tap as recited in claim 5 , wherein in one mode, the one of the first and second tap ports that is enabled to receive network data is also enabled to receive device data.

7. The network tap as recited in claim 5 , wherein in one mode, the one of the first and second tap ports that is enabled to receive network data is disabled from receiving device data.

8. The network tap as recited in claim 5 , wherein in one mode, the one of the first and second tap ports that is disabled from receiving network data is enabled to receive device data.

9. The network tap as recited in claim 5 , wherein in one mode, the one of the first and second tap ports that is disabled from receiving network data is also disabled from receiving device data.

10. The network tap as recited in claim 1 , wherein means for inserting received device data into the network cable without disrupting the flow of data therein comprises an Ethernet switch.

11. The network tap as recited in claim 1 , wherein means for inserting received device data into the network cable without disrupting the flow of data therein comprises an integrated circuit.

12. The network tap as recited in claim 11 , wherein the integrated circuit comprises a field programmable gate array.

13. The network tap as recited in claim 1 , wherein means for selecting one of the plurality of modes in which the first and second tap ports may operate comprises:

a management port configured to selectively connect to a remote computer; and

an integrated circuit configured to receive management data from the management port to at least indirectly enable or disable the ability of the first and second tap port to receive at least one of network data and device data.

14. The network tap as recited in claim 1 , wherein means for selecting one of the plurality of modes in which the first and second tap ports may operate comprises one or more manual switches located on the network tap.

15. A network tap that permits an attached device to communicate with a node of a network, the node of the network communicating with a network cable transmitting network data thereon, the network cable having a first segment and a second segment, the network tap comprising:

a first tap port configured to receive a copy of network data obtained from the network cable;

a second tap port configured to receive a copy of network data obtained from the network cable, wherein the attached device can be selectively connected to at least one of the first tap port and second tap port, wherein at least one of the first tap port and second tap port is configured to receive device data from the attached device that is transmitted on the network cable, and wherein the first tap port and second tap port are configured to operate in a plurality of modes, each mode being defined by enabling or disabling the ability of the first tap port and second tap port to receive network data and device data

a routing node that is in communication with the first tap port and second tap port, the routing node being configured to pass network data from the network cable to at least one of the first tap port and the second tap port and to pass device data from at least one of the first tap port and second tap port to the network cable without disrupting a flow of the network data in the network cable, wherein the routing node coordinates transmission of the device data with the network data to avoid data collisions between the network data and the device data; and

an integrated circuit configured to select the mode in which the first tap port and second tap port operate.

16. The network tap as recited in claim 15 , wherein the integrated circuit enables both the first tap port and the second tap port to receive network data.

17. The network tap as recited in claim 16 , wherein the integrated circuit enables at least one of the first tap port and second tap port to receive device data.

18. The network tap as recited in claim 17 , wherein:

the attached device is an intrusion detection system; and

the device data comprises a kill packet from the intrusion detection system, the routing node being configured for transmitting the kill packet via the network cable to a firewall.

19. The network tap as recited in claim 16 , further comprising:

a first multiplexer in communication with the first tap port; and

a second multiplexer in communication with the second tap port, wherein the integrated circuit controls the first multiplexer and second multiplexer to select the mode in which the first tap port and second tap port operate.

20. The network tap as recited in claim 16 , wherein the integrated circuit disables both the first tap port and second tap port from receiving device data.

21. The network tap as recited in claim 15 , wherein the integrated circuit enables one of the first tap port and second tap port to receive network data, forming a combined network data port, and disables the other of the first tap port and second tap port from receiving network data, forming a disabled network data port.

22. The network tap as recited in claim 21 , wherein the integrated circuit enables the combined network data port to also receive device data.

23. The network tap as recited in claim 21 , wherein the integrated circuit disables the combined network data port from receiving device data.

24. The network tap as recited in claim 21 , wherein the integrated circuit enables the disabled network data port to receive device data.

25. The network tap as recited in claim 21 , wherein the integrated circuit disables the disabled network data port from receiving device data.

26. A network tap that permits an attached device to communicate with a node of a network, the node of the network communicating with

a network cable transmitting network data thereon, the network tap comprising:

a first network port configured to transmit or receive network data;

a second network port configured to transmit or receive network data;

a first tap port configured to receive a copy of at least some of the network data;

a second tap port configured to receive a copy of at least some of the network data, wherein an attached device can be selectively connected to at least one of the first tap port and second tap port, wherein at least one of the first tap port and second tap port is configured to receive device data from the attached device, and wherein the first tap port and second tap port are configured to operate in a plurality of modes, each mode being defined by enabling or disabling the ability of the first tap port and second tap port to receive network data and device data; and

a first switch that is in communication with the first network port and the second network port and with the first tap port and second tap port, the switch being configured to pass network data between the first network port and the second network port and transmit device data from one of the first tap port and second tap port to one of the first network port and second network port on the network cable without disrupting a flow of the network data in the network cable, wherein the first switch coordinates transmission of the device data with the network data to avoid data collisions on the network cable.

27. The network tap of claim 26 , further comprising a second switch that is in communication with the first network port and the second network port and with the first tap port and the second tap port, the switch being configured to combined network data from the first network port and second network port and transmit the combined network data to one of the first tap port and second tap port.

28. The network tap of claim 27 , further comprising:

a third tap port configured to receive a copy of at least some of the network data; and

a fourth tap port configured to receive a copy of at least some of the network data, wherein the second switch is configured to duplicate the combined network data and transmit the combined network data to one of the third tap port and fourth tap port.

29. The network tap of claim 26 , further comprising an integrated circuit configured to select the mode in which the first tap port and the second tap port operate.

30. The network tap of claim 29 , wherein the integrated circuit comprises a Field Programmable Gate Array.

31. The network tap of claim 26 , further comprising a management port configured to transmit management data to the integrated circuit, the management port being configured to be selectively connected to a remote computer.

32. The network tap of claim 26 , further comprising a first communication line from the first network port to the first switch and a second communication line from the second network port to the first switch, each of the first communication line and the second communication line including:

a relay for circumventing the first switch in the event of loss of power at the network tap;

a transformer; and

a fan out buffer that propagates the network data to the switch and propagates a copy of the network data to the first tap port and second tap port.

33. The network tap of claim 32 , further comprising a third communication line for transmitting device data from one of the first tap port and second tap port to the first switch, the third communication line including:

a transformer;

a physical layer device; and

a multiplexer.

Assignments (5)
TERMINATIONS OF SECURITY INTEREST AT REEL 052729, FRAME 0321 Recorded Jan 5, 2022
From: WELLS FARGO BANK, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
To: VIAVI SOLUTIONS INC.; RPC PHOTONICS, INC.
Reel/Frame 058666/0639 →
SECURITY INTEREST Recorded May 21, 2020
From: VIAVI SOLUTIONS INC.; 3Z TELECOM, INC.; ACTERNA LLC; ACTERNA WG INTERNATIONAL HOLDINGS LLC; VIAVI SOLUTIONS LLC; JDSU ACTERNA HOLDINGS LLC; OPTICAL COATING LABORATORY, LLC; RPC PHOTONICS, INC.; TTC INTERNATIONAL HOLDINGS, LLC
To: WELLS FARGO BANK, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
Reel/Frame 052729/0321 →
CHANGE OF NAME Recorded Nov 6, 2015
From: JDS UNIPHASE CORPORATION
To: VIAVI SOLUTIONS INC.
Reel/Frame 037057/0627 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 2, 2011
From: FINISAR CORPORATION
To: JDS UNIPHASE CORPORATION
Reel/Frame 025730/0518 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 12, 2003
From: GORDY, STEPHEN C.; POELSTRA, HENRY D.; OTIS, ROBERT W.; GALLATIN, THOMAS L.
To: FINISAR CORPORATION
Reel/Frame 014809/0114 →
Continuity (3)
Provisional Application 6045916600 · Mar 31, 2003
Provisional Application 6047786600 · Jun 12, 2003
Related Publication 20040215832A1 · Oct 28, 2004