PacketTiger Network Packet Broker

Feature-Rich, Flexible Packet Brokering & Services

Entry-Level 1-100G Packet Services & Network Packet Brokering

Affordable Network Visibility with Enterprise-Grade Packet Processing

CPU Performance | Rich Feature Set | Deep Packet Services

Simplicity

Simplify network visibility architectures by consolidating traffic from multiple TAP, SPAN, and network links into a single, unified platform. PacketTiger reduces infrastructure complexity, minimizes the number of required tools, and streamlines traffic distribution, making deployments easier to manage and operate.

Visibility

Deliver comprehensive visibility across physical, virtual, and tunneled network environments by centralizing and processing packet data. PacketTiger ensures monitoring and security tools receive consistent, high-quality traffic feeds, enabling teams to detect threats, troubleshoot performance issues, and gain actionable insights.

Services

Enhance traffic intelligence with advanced packet processing services including filtering, slicing, deduplication, and tunnel awareness. PacketTiger transforms raw network traffic into optimized, actionable data, improving tool efficiency, supporting security use cases, and enabling deeper analysis across complex environments.

PacketTiger 1XL Network Packet Broker

The PacketTiger Model 1XL is engineered for performance, flexibility, and intelligent traffic management. With a scalable design supporting up to 8 × 100Gbps and zero packet loss, it enables seamless deployment in high-speed, high-density network environments. Its modular architecture and advanced technology provide deep packet visibility and real-time optimization, capable of parsing headers, processing payloads, and performing inline packet modifications. Key capabilities include deep packet inspection, application-based metadata generation, and advanced processing features like packet slicing, deduplication, data masking, header stripping, and GTP correlation.

The PacketTiger 1XL supports flow-based observability with NetFlow, IPFIX, and Kafka export, providing invaluable telemetry for threat detection and network analytics. Designed for flexibility, it allows port allocation in 1:1, N:N, N:1, and 1:N modes, and aggregates traffic across 10M to 100G network ports. It supports up to 1,000,000 filter rules, user-defined filtering (UDF), and complex logical operations (AND/OR). Load balancing is possible across 3-tuple to 5-tuple criteria, while port labeling ensures precise traffic source identification.

Additional capabilities include L2/L3 GRE tunneling, metadata export via Kafka, hardware timestamping, VLAN editing, MAC replacement, and DPDK-based hardware acceleration. Management is streamlined via CLI, SSH, SNMP, Web UI, NetCONF, and REST API, with full centralized control through PacketDirector. The system supports high availability (HA) configurations and clustering with other brokers. With logging via Syslog and SNMP traps, AAA via Radius and TACACS+, and diagnostics through DDM, the PacketTiger 1XL ensures robust performance, operational transparency, and easy fault isolation—making it a powerful backbone for modern network operations.

Provides complete network visibility to eliminate blind spots across complex environments
Improves security posture and threat detection by delivering clean, relevant traffic to tools
Maximizes ROI of existing monitoring and security investments by optimizing tool efficiency
Reduces operational costs by filtering, deduplicating, and minimizing unnecessary data
Enables faster troubleshooting and incident response with real-time, high-quality traffic insights
Simplifies network operations through centralized visibility and control
Scales with business growth, avoiding costly infrastructure replacements
Supports modern architectures (cloud, data center, 5G) with future-ready visibility infrastructure
Enhances compliance and data governance with controlled and secure data handling
Increases reliability and uptime with high-performance, lossless traffic delivery

Flexible, cost-effective aggregation of 1G–100G TAP, SPAN, and tool ports with mix-and-match configurations on a modular 1RU platform supporting up to 4 NMC modules and high port density (100G, 40G, 10G, RJ45 with downspeed)
Up to 800 Gbps non-blocking, DPDK-accelerated throughput for line-rate aggregation, brokering, and regeneration with support for inline and out-of-band deployments and flexible traffic distribution (1:1, 1:N, N:1, N:N)
Advanced traffic processing including packet slicing, deduplication, header stripping (MPLS, VXLAN, GRE, GENEVE, etc.), MAC rewrite, port splitting, data masking, and nanosecond timestamping via PTP/NTP/PPS
Deep filtering and editing across L2–L4 (MAC, VLAN, IPv4/IPv6, TCP/UDP, MPLS, DSCP, flags) with up to 1M user-defined rules, plus tunnel awareness and filtering for GTP, GRE (L2/L3), VXLAN, L2TP, and MPLS with GTP correlation and 5-tuple load balancing
Flow and metadata export via NetFlow, IPFIX, and Kafka with application classification, alongside centralized management via Web UI, CLI, REST API, NETCONF, SNMP, and PacketDirector with RADIUS/TACACS+ authentication
High availability design with redundant, hot-swappable power supplies and fans, front-to-back airflow, and roadmap support for digital diagnostics monitoring (DDM)

CHASSIS
SKU	NMC Slots	Max. Throughput	Dimensions (WHD) / Weight	Certifications
NX-PBPT-1XL-20 PCIe Gen4	4	20 Gb/s	43.8 cm x 4.4 cm x 61.0 cm ca. 18 kg	CE, RoHS, UL, FCC Class A,
NX-PBPT-1XL-40 PCIe Gen4		40 Gb/s
NX-PBPT-1XL-100 PCIe Gen4		100 Gb/s

PACKETTIGER 1XL MODULES
SKU	Ports	Modules
NX-PBPT-1L-4PC	4 x 10G RJ45	View
NX-PBPT-1L-8PS+	8 x 1G/10G SFP+	View
NX-PBPT-1L-2PQ+	2 x 40G QSFP+	View
NX-PBPT-1L-2PQ28	2 x 100G QSFP28	View

PacketTiger 2XL and 2XXL Network Packet Broker

The PacketTiger Model 2XL/XXL is a next-generation Versatile Network Packet Broker designed to handle demanding traffic loads with precision, performance, and flexibility. With a scalable architecture supporting up to 4× 100Gbps QSFP28 modules and zero packet loss, it ensures high-speed data processing for mission-critical applications. This high-performance solution integrates advanced technologies for hardware-accelerated packet processing, header parsing, and inline traffic modification, enabling organizations to perform inline modifications, enrich metadata, and maintain full traffic visibility.

The PacketTiger 2XL/XXL excels in advanced processing, including filtering, packet slicing, deduplication, data masking, header stripping (MPLS, PPPoE, VN-Tag, VxLAN, GRE, L2TP, CTP-U, GENEVE), GTP tunneling, and GTP correlation. It delivers flow-based observability with NetFlow, IPFIX, and Kafka export, empowering security and performance monitoring systems with accurate and timely insights. The system supports flexible port allocation (1:1, N:N, N:1, 1:N) and aggregation for speeds of 40G and 100G. Its powerful filtering engine allows up to 1,000,000 user-defined rules, including AND/OR logic and RegEx support, with UDF capabilities for custom traffic segmentation.

Load balancing is available on 3-tuple, 4-tuple, and 5-tuple criteria, while port labeling ensures accurate correlation at analysis tools. It supports a wide range of tunneling protocols including GRE, VxLAN, GTP, and L2TP. Timestamping, MAC replacement, VLAN editing, and DPDK-based hardware acceleration enhance performance further.The PacketTiger 2XL supports HA configurations, clustering, and offers centralized management through NEOX PacketDirector, along with CLI, SNMP, Web UI, REST API, and more. With AAA (Radius/TACACS+/LDAP), Syslog/SNMP logging, and upcoming DDM diagnostics, the 2XL/XXL ensures robust performance, visibility, and ease of use in any network environment. Shop

Delivers scalable, high-performance network visibility tailored for enterprise and mid-size data center environments with growing traffic demands
Enhances security and observability by providing clean, filtered, and context-rich traffic to monitoring and security tools
Maximizes the effectiveness and lifespan of existing tools by eliminating redundant data and optimizing traffic distribution
Reduces operational complexity and cost by consolidating traffic aggregation, filtering, and delivery into a single platform
Enables faster troubleshooting and incident response with real-time access to accurate and relevant network traffic
Supports seamless scaling from 40G to 100G environments, allowing infrastructure to evolve without disruptive upgrades
Improves data efficiency and lowers storage and processing requirements through intelligent traffic reduction techniques
Provides flexibility for diverse deployment scenarios, including inline security service chaining and out-of-band monitoring
Strengthens compliance and data governance with built-in traffic control, filtering, and data masking capabilities
Ensures reliable, lossless traffic handling for mission-critical monitoring and security operations

Cost-effective, flexible mix-and-match aggregation of 40G and 100G TAP, SPAN, and tool ports on a modular 2RU platform with capacity for 2 network modules and up to 2 or 4 x 100G QSFP28 native ports, with downspeed support to 2 or 4 x 40G
Up to 400 Gbps non-blocking, DPDK-accelerated line-rate aggregation, brokering, and regeneration with support for inline and out-of-band deployments, flexible port mapping (1:1, 1:N, N:1, N:N), port splitting, and port labeling
Advanced traffic processing including static and dynamic packet slicing, MAC replacement, data masking, nanosecond timestamping via PTP/NTP/PPS, header stripping for MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, GTP-U, and GENEVE, plus 5-tuple load balancing
Deep filtering and editing across MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, and MPLS, with tunnel-aware filtering for GTP, L2TP, MPLS, GRE, L2GRE, L3GRE, and VXLAN, GTP correlation, and up to 1 million user-defined rules with AND/OR logic and regular expression matching
Extensive management and integration options including CLI, SSH, Web UI, SNMP v2/v3, NETCONF, REST API, Syslog, SNMP traps, NetFlow, IPFIX, Kafka metadata export, centralized multi-device management through NEOX PacketDirector, and RADIUS/TACACS+ authentication
High-availability hardware design with N+1 redundant hot-swappable fans, hot-swappable load-sharing redundant AC/DC power supplies, front-to-back airflow for hot/cold aisle data centers, and roadmap support for Digital Diagnostics Monitoring (DDM)

SKU	Ports	Dimensions (WxHxD)/Weight	Rack Mounting	Certifications
NX-PBPT-2XL PCIe Gen4	2 x 40G/100G QSFP28*	48.3 cm x 8.7 cm x 77.2 cm / ca. 25 kg	Yes	CE, RoHS, FCC Class A
NX-PBPT-2XXL PCIe Gen4	4 x 40G/100G QSFP28*	48.3 cm x 8.7 cm x 77.2 cm / ca. 25 kg	Yes	CE, RoHS, FCC Class A

* Backward compatible with QSFP+

PacketTiger 1SCR Network Packet Broker

The PacketTiger 1SCR is a high-performance Versatile Network Packet Broker built for scalable, secure, and efficient packet processing in modest-speed networks. Supporting up to 4 × 10Gbps and 7 x 1Gbps with no packet loss, it delivers consistent and reliable traffic handling across complex environments. Designed to meet modern enterprise and service provider demands, its modular architecture offers unmatched flexibility, supporting deep packet inspection, metadata generation, and advanced payload parsing to enhance visibility and control.

This compact yet powerful solution integrates a rich feature set for filtering, deduplication, data masking, header stripping, GTP tunneling, and GTP correlation, empowering security, monitoring, and forensic systems with actionable traffic intelligence. With NetFlow, IPFIX, and Kafka export, PacketTiger 1SCR provides robust flow-based observability. It supports aggregation of multiple port speeds from 10M to 10G and flexible port configurations including 1:1, N:1, N:N, and 1:N. Advanced filtering capabilities include support for up to 1,000,000 user-defined rules using logical operators and regular expressions, as well as user-defined filtering (UDF) for granular control. Traffic load can be balanced using 5-tuple criteria, while port labeling aids traceability. Features like static and dynamic packet slicing, nanosecond-level timestamping, MAC replacement, VLAN editing, and DPDK-based hardware acceleration ensure optimal performance.

The 1SCR supports Layer 2 and 3 GRE tunneling, full traffic regeneration, and clustering with HA support via NEOXPacketDirector, which enables centralized management. It offers broad management protocol compatibility (CLI, SNMP, REST API, and more) and integrates seamlessly into diverse network architectures. With AAA integration, syslog/SNMP logging, and upcoming digital diagnostics monitoring (DDM), PacketTiger 1SCR delivers efficient, scalable, andfuture-ready

Provides cost-effective network visibility for branch, edge, and small enterprise environments with mixed 1G/10G infrastructure
Simplifies access to network traffic by aggregating TAP and SPAN data into a single, compact platform
Improves security and monitoring effectiveness by delivering filtered, relevant traffic to tools
Reduces tool overload and lowers operational costs through intelligent traffic filtering and optimization
Enables faster troubleshooting and incident response with real-time visibility into network activity
Supports flexible deployment scenarios, including inline security enforcement and out-of-band monitoring
Maximizes efficiency of existing monitoring and security tools without requiring large infrastructure investments
Delivers advanced traffic intelligence typically found in higher-end systems within a compact and affordable form factor
Enhances compliance and data protection with built-in traffic filtering and data masking capabilities
Provides reliable, near line-rate performance for consistent and accurate traffic delivery

Cost-effective, flexible aggregation of 1G and 10G TAP, SPAN, and tool ports on a compact 1RU platform with native port density of 4 x 10G SFP+ (downspeed to 1G), 2 x 1G SFP/RJ45 combo, and 5 x 10/100/1000M RJ45 ports
Up to 45 Gbps near line-rate, DPDK-accelerated aggregation, brokering, and regeneration with support for inline and out-of-band deployments, flexible port mapping (1:1, 1:N, N:1, N:N), port splitting, and port labeling
Advanced traffic processing including static and dynamic packet slicing, MAC replacement, data masking, nanosecond timestamping via PTP/NTP/PPS, header stripping for MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, GTP-U, and GENEVE, plus 5-tuple load balancing
Deep filtering and editing across MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, and MPLS, with tunnel-aware filtering for GTP, L2TP, MPLS, GRE, L2GRE, L3GRE, and VXLAN, GTP correlation, and up to 1 million user-defined rules with AND/OR logic and regular expression matching
Extensive management and integration options including CLI, SSH, Web UI, SNMP v2/v3, NETCONF, REST API, Syslog, SNMP traps, NetFlow, IPFIX, Kafka metadata export, centralized multi-device management through NEOX PacketDirector, and RADIUS/TACACS+ authentication
High-availability hardware design with N+1 redundant hot-swappable fans, hot-swappable load-sharing redundant AC/DC power supplies, front-to-back airflow, and roadmap support for Digital Diagnostics Monitoring (DDM)

SKU	Ports	Dimensions (WxHxD)/Weight	Rack Mounting	Certifications
NX-PBPT-1SCR	5 x 10M/100M/1000M RJ45 2 x 1G SFP/RJ45* 4 x 1G/10G SFP+	35.0 cm x 4.4 cm x 26.0 cm / 5.0 kg	Yes	CE, RoHS, FCC Class A, EC Class A

* Combo ports: Either 2x 1G SFP or 2 x 1G RJ45

PacketTiger 1SC Network Packet Broker

The PacketTiger Model 1SC is a compact yet powerful Network Packet Broker that delivers scalable performance up to 4 x 10M/100M/1000/2500M RJ45 ports, 2 x 10G SFP+ ports, and 1 x 1G RJ45 or SFP ports (Combo port) with guaranteed zero packet loss, designed to meet the demands of security, performance monitoring, and visibility in both enterprise and service provider environments. Built with a high-performance, modular architecture, it provides intelligent traffic management, packet-level analytics, and optimization capabilities tailored for evolving network infrastructures.

This model excels at deep packet inspection (DPI) and application-level metadata extraction, offering unmatched clarity into traffic flows. Equipped with a robust set of advanced processing functions, it supports packet slicing, data masking, deduplication, regular expression matching, GTP tunneling and correlation, and header stripping. Its flow-based observability tools, including NetFlow, IPFIX, and Kafka export, allow seamless integration into existing analytics and security ecosystems.

The 1SC features flexible port allocation modes (1:1, N:N, N:1, 1:N) and supports aggregation across all standard port speeds from 10M to 10G. It can handle up to 1,000,000 filter rules with AND/OR logic, supporting granular traffic control using MAC, VLAN, IP, protocol fields, tunneling headers, and UDFs. It also enables traffic regeneration, load balancing across multiple tuple schemes, and GRE tunneling at Layers 2 and 3. With centralized orchestration via NEOXPacketDirector, full HA support, and a range of management options (CLI, REST API, SNMP, Web UI, and more), the 1SC simplifies control across multi-broker clusters. It also includes nanosecond-level timestamping, DPDK-powered acceleration, AAA support, syslog/SNMP logging, and fault diagnostics via DDM. Designed for efficiency, agility, and precision, the PacketTiger 1SC is an ideal solution for real-time traffic visibility, secure data handling, and operational resilience.

Delivers affordable, entry-level network visibility for branch, edge, and small enterprise environments
Simplifies traffic access by consolidating TAP and SPAN data into a compact, easy-to-deploy platform
Improves monitoring and security effectiveness by delivering filtered, high-quality traffic to tools
Reduces operational overhead and tool load through intelligent traffic filtering and optimization
Enables faster troubleshooting and incident response with real-time network visibility
Supports flexible deployment models, including inline security enforcement and out-of-band monitoring
Provides advanced traffic processing capabilities typically found in higher-end systems
Maximizes value of existing monitoring and security tools without requiring additional infrastructure
Enhances compliance and data protection with built-in filtering and data masking capabilities
Offers reliable, near line-rate performance in a compact, energy-efficient, fanless design

Cost-effective, flexible aggregation of 1G and 10G TAP, SPAN, and tool ports on a compact 1RU platform with native port density of 2 x 10G SFP+ (downspeed to 1G), 1 x 1G SFP/RJ45 combo, and 4 x 10/100/1000/2500M RJ45 ports
Up to 23 Gbps near line-rate, DPDK-accelerated aggregation, brokering, and regeneration with support for inline and out-of-band deployments, flexible port mapping (1:1, 1:N, N:1, N:N), port splitting, and port labeling
Advanced traffic processing including static and dynamic packet slicing, MAC replacement, data masking, nanosecond timestamping via PTP/NTP/PPS, header stripping for MPLS, PPPoE, VN-Tag, VXLAN, GRE, L2TP, GTP-U, and GENEVE, plus 5-tuple load balancing
Deep filtering and editing across MAC, VLAN, IPv4/IPv6, TCP/UDP, DSCP, TCP flags, and MPLS, with tunnel-aware filtering for GTP, L2TP, MPLS, GRE, L2GRE, L3GRE, and VXLAN, GTP correlation, and up to 1 million user-defined rules with AND/OR logic and regular expression matching
Extensive management and integration options including CLI, SSH, Web UI, SNMP v2/v3, NETCONF, REST API, Syslog, SNMP traps, NetFlow, IPFIX, Kafka metadata export, centralized multi-device management through NEOX PacketDirector, and RADIUS/TACACS+ authentication
Energy-efficient, fanless hardware design with AC/DC power support and roadmap support for Digital Diagnostics Monitoring (DDM)

SKU	Ports	Dimensions (WxHxD)/Weight	Rack Mounting	Certifications
NX-PBPT-1SC	4 x 10M/100M/1000/2500M RJ45 ports, 2 x 10G SFP+ ports, and 1 x 1G RJ45 or SFP ports (Combo port)	25.4 cm x 4.4 cm x 20.2 cm / 1.2 kg	No	CE, RoHS, FCC Class A, EC Class A

* Combo ports: Either 1 x 1G SFP or 1 x 1G RJ45

FEATURED RESOURCES

Network Visibility for Our Customers

Deployment

SERVICE & SUPPORT

Unparalleled Multi-Level Service & Support for Peace of Mind

All NEOXPacketTiger NBPs come with NEOX SILVER Support and can be upgraded to GOLD Support for advanced replacement in case of a hardware failure.