쫑콩아빠의 지금 이 순간...

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/packet-slicing.html

Eliminate unneeded packet data

The Packet Slicing feature of the GigaSMART® engine truncates packets while preserving the portion of the packet (the protocol headers) required for network analysis. Packet Slicing can parse variable header packets, starting slicing after a named header (IP, TCP, etc.) with or without VLAN and other tags. Thus, there's no need to rely on a fixed offset to slice packets.

Packet Slicing removes payload that may be irrelevant to network monitoring and security analysis. This reduces tool throughput and disk space while improving performance and data retention. It also removes sensitive data before it is stored, which makes regulatory and privacy compliance easier.

Benefits of the Packet Slicing feature

• Removes sensitive information from each packet, thus helping address compliance and confidentiality requirements.
• Improves tool performance by eliminating unnecessary transmission of unneeded packet payload.
• Increases storage capacity by giving tools more room to store the important portions of each packet.
• Increases data retention time on forensic or network recorders.
• Reduces needed disk space for backup traffic by up to 95%.

Packet Slicing: one of many GigaSMART features

GigaSMART® offers a number of other essential traffic intelligence services required for active visibility into infrastructure blind spots, including:

https://www.gigamon.com/products/optimize-traffic/traffic-intelligence/gigasmart/advanced-flow-slicing.html

Forward the First Set of Packets, then Slice or Drop the Rest

Inspecting long data flows hogs bandwidth and causes unnecessary processing burden on tools. (A flow is HTTP session or any general TCP/UDP session.)

GigaSMART® Advanced Flow Slicing application eliminates these issues by slicing  payloads and packets from long data flow. This allows network operation teams and service providers to forward the first set of packets in the flow, then slice or drop the rest — saving your bandwidth and increasing tool effectiveness.

Benefits of Advanced Flow Slicing:

• Reduces traffic sent to tools by more than 60% 
• Avoids costly tool upgrades to inspect unnecessary traffic
• Improves overall tool efficiency and effectiveness
• Retains complete visibility into each flow’s establishment

Advanced Flow Slicing is now part of our Gigamon NetVUE for Network Operations bundle.

How It Works

GigaSMART Advanced Flow Slicing reduces traffic sent to tools​ using a two-step intelligent slicing method:

1. You decide the first number of packets in a flow to analyze
2. Then either drop or slice subsequent packets in that flow

GigaSMART Packet Slicing

# port 1/1/x1 type network
# port 1/1/x5 type tool
# gsgroup alias GS51 port-list 1/5/e1
# gsop alias sliceUDP_7 slicing protocol ump offset 7 port-list GS51
# map alias slice_SNMP_example
    # use gsop sliceUDP_7
    # rule add pass portsrc 161 bidir
    # from 1/1/x1
    # to 1/1/x5
    # exit
# write memory