The Cubro EXA48800 is a high-performance network packet broker built to deliver advanced visibility for today’s complex, high-speed networks. It aggregates, filters, replicates, and load balances traffic, ensuring that monitoring, security, and management tools receive exactly the data they need.
Powered by a multi-core programmable switch chip combined with two high-performance ARM CPUs in a single chassis, the EXA48800 offers exceptional flexibility and functionality. This unique architecture makes it ideally suited for advanced visibility and security use cases.
With comprehensive multi-layer filtering and tunnel removal capabilities, the EXA48800 is the ideal solution for achieving full visibility into overlay networks, while simplifying operations and enhancing monitoring efficiency.

Applications/Solutions
Deduplication
The EXA48800 can detect and delete duplicate packets. Duplicates can cause numerous issues. The obvious issue is that twice as much data requires twice as much processing power, memory, etc. However, the main issue is false positives: errors that are not really errors or threats that are not actually threats. One common way that duplicate effect analysis is by an increase in TCP out-of-order or retransmission warnings. Debugging these issues takes a lot of time, usually the time an overworked, understaffed network operations or security team does not have. In addition, any analysis performed based on this information is probably not reliable, so this only exacerbates the issue. The Cubro EXA48800 offers a deduplication function to eliminate duplicated packets and protect monitoring equipment from getting overloaded.
Aggregation
The EXA48800 is able to receive traffic from a single or multiple 1/10/25/40 or 100 Gbps link(s) via the
monitoring ports of an inline tapping device. The incoming traffic can be further aggregated to a single
or multiple outputs to connect analysers and monitoring tools as required. The example below shows
how the EXA48800 aggregates upstream and downstream traffic of a 100 Gbit link to a single output
port for more economical usage of connected traffic probes/ analytics systems.
State-of-the-art tunnel functionality
The EXA48800 supports the termination of various tunnels such as:
- ERSPAN II and III
- MPLS over UDP
- GRE
- VXLAN
- GTP
Check out the product datasheet for technical specifications.

