cPacket cStor Series Integrated Packet Capture and Advanced Real-Time Analytics

cStor Solution The cStor series is a flexible, powerful set of appliances that enable network performance monitoring and security, data visibility, and real time monitoring. It achieves this through its high performance, lossless packet and flow capture and storage platform, supporting data rates from 1 to 40 GbE. With its open and disaggregated architecture, available in a variety of appliance-based and virtual machine-based models, users have complete flexibility and control over the solution deployment. This includes real-time data analysis to feeding third party analytics and security applications. Optimized for fast data retrieval and rapid querying, cStor provides a future-proof option for a range of data-intensive applications, with a unique cost model that combines maximum flexibility with minimal return on investment time. Trading floors, banks and financial services institutions, government and defense organizations, Internet Service Providers, telecommunications/mobile operators, manufacturing organizations, and retail chains are just some of the industries that need network data monitoring, capture, and retention to fuel their business. cStor is used for a range of applications with highly demanding needs for data visibility, including network troubleshooting, regulatory compliance, monitoring service level agreements (SLA), security requirements, incident response forensics, record keeping, capacity planning, and performance monitoring and tuning.

Key Benefits

cPacket cStor series combines a number of key technical features, building upon cPacket’s industry-leading software and hardware pedigree to maximize performance and analysis-based metrics. cStor helps organizations deliver on a wide range of network performance, application and user visibility, monitoring and compliance requirements via a powerful combination of benefits, including but not limited to: High Performance

Lossless packet capture and persistence can be achieved at line rates up to 40 GbE supporting both today and tomorrow’s network requirements with a future-proof approach that is cloud-ready as virtual environments continue to expand. A comprehensive range of product options means that cStor can be cost-effectively deployed anywhere needed in the network, whether as an appliance-based, turnkey hardware solutions or stand-alone capture on existing industry-standard servers (see cStor-V data sheet), for a truly distributed capture architecture.

cStor enables you to: • Capture, retain and analyze

network traffic as the source of truth for performance and security related investigations and audit-trails

• Capture raw frames from the wire to disk without loss, with deep burst buffering supporting data rates from 1 to 40GbE

• Provide detailed flow/conversation

statistics, with flow indices created and maintained through parsing Layer 2-4 headers

• Run forensics analysis for security

incidents and data breaches as an extended arm of security tools

• Reduce mean-time-to-resolution

for application, user, and network performance issues

• Optimize for simultaneous packet

capture and query and select outputs from charts, tables or raw PCAP records, with error and event overlays

• Optimize network capture path

from multiple ports with hardware time-stamping for precision and accuracy

• Manage capability with start/stop

capture per port, rotation of capture files and application of filters

• Configure Syslog and SNMP alerts

on frame errors, frame drops, microbursts, transceiver light levels and link statistics, with alert conditions and reporting

Data Sheet

Flexible Deployment

cStor series appliance installations, in a combination of storage capacities and connectivity options (1, 10 and 40 GbE), can be easily and quickly deployed according to business and IT requirements. The end result is an easy to manage, cost-optimized solution that makes the best use of rack space and provides both breadth and depth of capture to drive analytics and improve application, user and network performance. Complete visibility across north-south and east-west traffic paths across branch, data center, and cloud enables hybrid enterprises for business-ready network operations

Optimized Search Capability

With hardware time-stamped Ethernet packet capture, persisted storage and powerful indexing for fast data retrieval, the cStor series enables rapid and accurate troubleshooting and network monitoring through its easy to use web-based GUI, essential for business intelligence and performance improvement as well as for SLA compliance. Open Architecture

With its open architecture, the cStor series can interface with third party analytics and security applications, either locally or remotely, with streams being delivered from buffers in memory or as an uninterrupted packet stream from disk if the application cannot keep up with the capture rate. Additionally, other applications can be run alongside cStor, leveraging existing infrastructure and maximizing flexibility. This is particularly useful to augment security tools such as IPS/IDS/DDoS/SIEM tools to capture and retain packet data associated with important security events for further investigation.

Deployment and Use Case

The cStor series comprises of a complete rack-installable solution in the data center, campus, remote site, or telco environment, with a range of options available according to throughput and storage requirements. The cStor appliances also provide a range of capture and storage capacity options. The cStor series is fully integrated with cPacket cVu series 10/40/100GbE Network Packet Brokers and cClear for centralized single-pane-of-glass analytics through customizable dashboards. cPacket’s visibility tools provide proactive metrics such as application visibility, TCP response-time, round-trip time, retransmits, one-way latency, and micro-burst analysis at high resolution. With cPacket, network operators can deploy the functionality they need at the locations they need, to monitor and analyze issues remotely.

Reference design for complete north-south and east-west visibility

The typical deployment in the physical network such as in a data center starts with accessing the wire-data at high-speeds by deploying cPacket cTap series network TAP (Test Access Point). The cTap feeds the raw wire-data to a cPacket cVu series 100G-enabled Network Packet Broker (NPB) where the data is customized based on different destinations requirements such as performance and security monitoring tools managed by the NetOps and SecOps teams. For aggregation purposes, another low-cost cVu can be used as the number of tools grow, in a two-tier design. Should any data (raw or customized) be stored for later usages or analysis, a cStor appliance can be simply hooked to the cVu NPB to gain access to the network data for capture-to-disk (CTD). In smaller networks, data can be directly fed from the cTap to a cStor.

Models and Options

For scale-as-you-grow, cPacket cStor appliances are available in a range of models to suite branch, data center, and service provider environments across small to large scale environments. Different I/O connectivity options enable cStor to be plugged to existing physical TAP or NPB and start capturing the network data at the prescribed capture-to-disk (CTD) rate. cStor’s built-in storage capacity options provide appropriate storage duration for the data as suited for the customer need such as troubleshooting application/user/network issues, regulatory compliance, monitoring service level agreements (SLA), security threat investigation, incident response forensics, record keeping, capacity planning, and network performance monitoring. To learn more, visit www.cpacket.com

cPacket cStor series packet capture appliances

cStor 5 cStor 10 cStor 15 cStor 25 cStor 40 Branch/Remote Site WAN Edge WAN Edge

Cell Site/Central Office RAN Backhaul

Data Center/Colocation East-West/Leaf East-West/Leaf East-West/Leaf North-South/Spine

Financial/Trading East-West/Leaf East-West/Leaf East-West/Leaf North-South/Spine

Service Provider Access East-West/Leaf East-West/Leaf East-West/Leaf

cPacket cStor series positioning guidance

Key Features: cStor 5 cStor 10 cStor 15 cStor 25 cStor 40 Precision Time (PPS) Yes* Yes* Yes* Yes* Yes*

Packet Indexing Yes Yes Yes Yes Yes

Fast/Expedited Querying Yes Yes Yes Yes Yes

Flow Information Yes Yes Yes Yes Yes

Latency/Jitter Analysis Yes Yes Yes Yes Yes

Real-Time Analysis Yes Yes Yes Yes Yes

Multicast Video Analysis Yes Yes Yes Yes Yes

Financial Protocol Analysis Yes Yes Yes Yes Yes

Multiple Capture Merge Yes Yes Yes Yes Yes

cVu Integration Yes Yes Yes Yes Yes

cClear Integration Yes Yes Yes Yes Yes

* With cPacket cVu integration Interface and Storage Capacity:

cStor 5 cStor 10 cStor 15 cStor 25 cStor 40 1 GbE Ports (SFP) 4 0 0 0 0

10 GbE Ports (SFP+) 2 2 or 4 2 or 4 4 4

25 GbE Ports (SFP28) 0 0 0 0 0

40 GbE Ports (QSFP+) 0 0 0 2 2

Capture-to-Disk Rate 5 Gbps 10 Gbps 15 Gbps 25 Gbps 40 Gbps

Default Storage 16 TB 16 TB 72 TB 28.8 TB 216 TB

Maximum Storage 16 TB 64 TB 216 TB N/A 360 TB

External Storage (JBOD) N/A N/A N/A N/A N/A

Dimensions and Weight:

cStor 5 cStor 10 cStor 15 cStor 25 cStor 40 Height/Rack Unit 1.7” (4.4 cm) 1U 3.5” (8.9 cm) 2U 3.4” (8.7 cm) 2U 3.4” (8.7 cm) 2U 7” (17.8 cm) 4U

Width 16.9” (43 cm) 17.2” (43.7 cm) 16.9” (43 cm) 16.9” (43 cm) 17.2” (43.7 cm)

Depth 28” (71.1 cm) 23.6” (59.9 cm) 28” (71.1 cm) 28” (71.1 cm) 28” (71.1 cm)

Weight 53 lb (24 kg) 52 lb (23.6 kg) 66 lb (30 kg) 66 lb (30 kg) 132 lb (60 kg)

Operating Conditions:

cStor 5 cStor 10 cStor 15 cStor 25 cStor 40 Operating Temperature 60° F – 95° F 41° F – 95° F 60° F – 95° F 60° F - 95° F 50° F - 95° F

Operating Humidity 50% – 90% 50% – 90% 50% – 90% 50% – 90% 8%- 90%

Power and Cooling:

cStor 5 cStor 10 cStor 15 cStor 25 cStor 40 Airflow Front-to-Back Front-to-Back Front-to-Back Front-to-Back Front-to-Back

Power Redundancy 1+1 AC 100-240 VAC 50-60 Hz

1+1 AC 100-240 VAC 50-60 Hz

1+1 AC 100-240 VAC 50-60 Hz

1+1 AC 100-240 VAC 50-60 Hz

1+1 AC 100-240 VAC 50-60 Hz

Max. Power Consumption 798.7 W 650 W 1169.6 W 1183.2 W 1373 W

Heat Dissipation 1820 BTU/hour 2216.5 BTU/hour 2195.3 BTU/hour 2860 BTU/hour 4597.4 BTU/hour

Technical Specifications

SKU Description

CP_CSTOR_1U_5_0401_7TB cStor Packet Capture 5G Write Rate 4x1G Interfaces and 7TB HDD in 1RU

CP_CSTOR_1U_5_0210_7TB cStor Packet Capture 5G Write Rate 2x10G Interfaces and 7TB HDD in 1RU

CP_CSTOR_08TB_2U cStor Packet Capture 10G Write Rate 2x10G Interfaces and 8TB HDD in 2RU

CP_CSTOR_16TB_2U cStor Packet Capture 10G Write Rate 2x10G Interfaces and 16TB HDD in 2RU

CP_CSTOR_24TB_2U cStor Packet Capture 10G Write Rate 2x10G Interfaces and 24TB HDD in 2RU

CP_CSTOR_32TB_2U cStor Packet Capture 10G Write Rate 2x10G Interfaces and 32TB HDD in 2RU

CP_CSTOR_64TB_2U cStor Packet Capture 10G Write Rate 2x10G Interfaces and 64TB HDD in 2RU

CP_CSTOR_2U_15_0410_72TB cStor Packet Capture 15G Write Rate 4x10G Interfaces and 72TB HDD in 2RU

CP_CSTOR_2U_15_0210_72TB cStor Packet Capture 15G Write Rate 2x10G Interfaces and 72TB HDD in 2RU

CP_CSTOR_2U_25_0410_28TB cStor Packet Capture 25G Write Rate 4x10G Interfaces and 28TB HDD in 2RU

CP_CSTOR_2U_25_0240_28TB cStor Packet Capture 25G Write Rate 2x40G Interfaces and 28TB HDD in 2RU

CP_CSTOR_4U_40_0410_216TB cStor Packet Capture 40G Write Rate 4x10G Interfaces and 216TB HDD in 4RU

CP_CSTOR_4U_40_0240_216TB cStor Packet Capture 40G Write Rate 2x40G Interfaces and 216TB HDD in 4RU

About cPacket Networks cPacket Networks delivers visibility you can trust through network monitoring and packet brokering solutions to solve today’s biggest network challenges. Our cutting-edge technology enables network and security teams to proactively identify issues in real-time before negatively impacting end-users. Only cPacket inspects all the packets delivering the right data to the right tools at the right time, and provides detailed network analytics dashboards. Whether you need greater network visibility for security tools or performance monitoring tools, our solutions are designed to overcome scalability issues and reduce troubleshooting time. The result: increased security, reduced complexity, with lower costs, and a faster ROI. Based in Silicon Valley, CA, cPacket enables organizations around the world to keep their business running. Leading enterprises, service providers, healthcare organizations, and governments rely on cPacket solutions for improved agility, higher performance, and greater efficiency. Learn more at www.cpacket.com, the cPacket blog, or follow us on Twitter, LinkedIn, and Facebook. cPacket, cPacket Networks, cClear, cClear-V, cVu, cVu-V, cStor, cStor-V, cTap, SPIFEE, Distributed Monitoring Architecture, and Integrated Monitoring Fabric are trademarks or registered trademarks of cPacket Networks

Ordering Information