# US 10,320,689 B2 · Managing data traffic according to data stream analysis > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,320,689 B2 - Document ID: US10320689B2 - Status: Granted - Kind: B2 - Application number: 15/162,751 - Filed: 2016-05-24 - Published: 2017-11-30 - Granted: 2019-06-11 - Earliest claimed: 2016-05-24 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Andrew P. Barnes; John V. Delaney; Anthony M. Hunt; Claus Schrøder-Hansen; Clea A. Zolotow - Web page: https://patentgrep.com/patent/US10320689B2 ## CPC - H04L 47/283: in response to processing delays, e.g. caused by jitter or round trip time [RTT] - H04L 47/27: Evaluation or update of window size, e.g. using information derived from acknowledged [ACK] packets - H04L 67/04: specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability - H04L 67/61: taking into account QoS or priority requirements - H04L 69/16: Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP] - H04L 69/22: Parsing or analysis of headers - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Data migrations are not able to be identified or traced through a switched network to their originating hub, because the corresponding TCP/IP data stream goes through a plurality of optimized differential switches and the originating IP in the packet header gets replaced at each switch. The present invention provides a mechanism to introduce a lag or a jitter into the IP to label the migrated data. The labeled data are able to be traced and identified through multiple managed hubs and/or switches. ## Claims ### Claim 1 A method comprising: receiving a network policy data set including information indicative of a policy to manage a switched network according to a first type of data traffic; receiving a networking traffic data stream for transmission over the switched network, including a plurality of TCP/IP data streams, with the plurality of TCP/IP data streams including at least: (i) a first TCP/IP data stream with the first type of data traffic, and (ii) a second TCP/IP data stream with a second type of data traffic; introducing a first pattern of data transmission performance variance into a first TCP/IP data stream based, at least in part, on the network policy data set; transmitting the networking traffic data stream, including the plurality of TCP/IP data streams, over the switched network; comparing patterns of data transmission performance variance of the plurality of TCP/IP data streams of the networking traffic data stream; identifying the first TCP/IP data stream from within the networking traffic data stream based, at least in part, on the compared patterns of data transmission performance variance; and filtering the networking traffic data stream, including allowing the identified first TCP/IP data stream to proceed through the switched network. ### Claim 2 (depends on 1) The method of claim 1, wherein the performance variance is a lag. ### Claim 3 (depends on 1) The method of claim 1, wherein the performance variance is a variance in TCP/IP packet latency over time implemented through operating system commands. ### Claim 4 (depends on 1) The method of claim 1, further comprising: allowing throughput of the second TCP/IP data stream. ### Claim 5 (depends on 1) The method of claim 1, further comprising: blocking the second TCP/IP data stream. ### Claim 6 (depends on 1) The method of claim 1, wherein the first pattern of data transmission performance variance is introduced into the first TCP/IP data stream by modifying a sliding window size in the first TCP/IP address header. ### Claim 7 (depends on 1) The method of claim 1, wherein the first pattern of data transmission performance variance is introduced into the first TCP/IP data stream by adding a time delay to data packets being transmitted in the first TCP/IP data stream. ### Claim 8 (depends on 1) The method of claim 1, further comprising: causing a Quality of Service (QoS) appliance to handle the second TCP/IP data stream based on the identified data traffic type of the second TCP/IP data stream. ### Claim 9 A computer program product comprising a computer readable storage medium having a set of instructions stored therein which, when executed by a processor, causes the processor to manage network traffic by: receiving a network policy data set including information indicative of a policy to manage a switched network according to a first type of data traffic; receiving a networking traffic data stream for transmission over the switched network, including a plurality of TCP/IP data streams, with the plurality of TCP/IP data streams including at least: (i) a first TCP/IP data stream with the first type of data traffic, and (ii) a second TCP/IP data stream with a second type of data traffic; introducing a first pattern of data transmission performance variance into a first TCP/IP data stream based, at least in part, on the network policy data set; transmitting the networking traffic data stream, including the plurality of TCP/IP data streams, over the switched network; comparing patterns of data transmission performance variance of the plurality of TCP/IP data streams of the networking traffic data stream; identifying the first TCP/IP data stream from within the networking traffic data stream based, at least in part, on the compared patterns of data transmission performance variance; and filtering the networking traffic data stream, including allowing the identified first TCP/IP data stream to proceed through the switched network. ### Claim 10 (depends on 9) The computer program product of claim 9, wherein the performance variance is a lag. ### Claim 11 (depends on 9) The computer program product of claim 9, wherein the performance variance is a variance in TCP/IP packet latency over time implemented through operating system commands. ### Claim 12 (depends on 9) The computer program product of claim 9, further comprising: allowing throughput of the second TCP/IP data stream. ### Claim 13 A computer system comprising: a processor(s) set; and a computer readable storage medium; wherein: the processor set is structured, located, connected, and/or programmed to run program instructions stored on the computer readable storage medium; and the program instructions which, when executed by the processor set, cause the processor set to manage network traffic by: receiving a network policy data set including information indicative of a policy to manage a switched network according to a first type of data traffic; receiving a networking traffic data stream for transmission over the switched network, including a plurality of TCP/IP data streams, with the plurality of TCP/IP data streams including at least: (i) a first TCP/IP data stream with the first type of data traffic, and (ii) a second TCP/IP data stream with a second type of data traffic; introducing a first pattern of data transmission performance variance into a first TCP/IP data stream based, at least in part, on the network policy data set; transmitting the networking traffic data stream, including the plurality of TCP/IP data streams, over the switched network; comparing patterns of data transmission performance variance of the plurality of TCP/IP data streams of the networking traffic data stream; identifying the first TCP/IP data stream from within the networking traffic data stream based, at least in part, on the compared patterns of data transmission performance variance; and filtering the networking traffic data stream, including allowing the identified first TCP/IP data stream to proceed through the switched network. ### Claim 14 (depends on 13) The computer system of claim 13, wherein the performance variance is a variance in TCP/IP packet latency over time implemented through operating system commands. ### Claim 15 (depends on 14) The computer system of claim 14, further comprising: blocking the second TCP/IP data stream. ### Claim 16 (depends on 13) The computer system of claim 13, wherein the first pattern of data transmission performance variance is introduced into the first TCP/IP data stream by modifying a sliding window size in the first TCP/IP address header. ### Claim 17 (depends on 13) The computer system of claim 13, wherein the first pattern of data transmission performance variance is introduced into the first TCP/IP data stream by adding a time delay to data packets being transmitted in the first TCP/IP data stream.