Back to results
US 10,764,162 B2Granted
In-fabric traffic analysis
AssigneeGigamon Inc.
InventorAnil Rao
Life of this patent
Estimating the term…
Abstract
An apparatus for a network includes: a processing unit having a filter generation module configured for: receiving an indication that a packet matches a user-defined filter; and creating one or more derivative filters based at least in part on the received indication, wherein a first derivative filter of the one or more derivative filters provides a finer grade of filtration compared to the user-defined filter; and a non-transitory medium configured for storing the one or more derivative filters.
Claims38
A filter generation method for a network, comprising:
- receiving an indication that a first packet matches a user-defined filter, the user-defined over the network filter being implemented as executable logic that sorts packets according to a criterion identified by a user and using a first granularity of filtration, wherein the network comprises an auxiliary network configured to obtain the packets from a traffic production network;
- creating one or more derivative filters in response to receipt of the indication that the first packet matches the user-defined filter, by using an automatic filter generation module, wherein the one or more derivative filters are dynamically created by the automatic filter generation module based at least in part on the received indication, wherein the one or more derivative filters are topologically positioned at nodes, wherein packets from the user-defined filter are directed to lower layers of derivative filters based on how the packets match filtration at higher layers at a prior filter;
- forwarding or dropping, by a first derivative filter implemented as executable logic, packets including the first packet to the network according to the criterion identified by the user and using a second granularity of filtration, wherein the second granularity of filtration is finer than the first granularity of filtration, and wherein the first derivative filter is one of said one or more derivative filters;
- and
- storing the one or more derivative filters in a non-transitory medium to provide network traffic analysis.
2 more elements
A system for a network, comprising:
- a processing unit that has a filter generation module configured for:
- receiving an indication over the network a first time that a first packet matches a user-defined filter implemented as executable logic configured to sort packets according to a criterion identified by a user and using a first granularity of filtration, wherein the network comprises an auxiliary network configured to obtain the packets from a traffic production network;
- and
- creating one or more derivative filters in response to the received indication that the first packet matches the user-defined filter, wherein the one or more derivative filters are topologically positioned at nodes, wherein packets from the user-defined filter are directed to lower layers of derivative filters based on how the packets match filtration at higher layers at a prior filter, wherein a first derivative filter implemented as executable logic and causes the processing unit to forward or drop packets including the first packet according to the criterion identified by the user and using a second granularity of filtration that is finer than the first granularity of filtration, wherein the first derivative filter is one of the one or more derivative filters;
- and
- a non-transitory medium configured to store the one or more derivative filters to provide network traffic analysis.
3 more elements
A method comprising:
- receiving an indication that a packet transiting a network matches a first rule, wherein implementation of the first rule forwards or drops packets in the network according to a first level of restriction, wherein the network comprises an auxiliary network configured to obtain the packets from a traffic production network;
- and
- responsive to said receiving said indication, automatically creating a second rule, the second rule being based on the first rule and configured to cause a processor to further forward or drop packets based on the first rule, the second rule configured to cause packets to be forwarded or dropped in the network according to a second level of restriction that is finer than the first level of restriction, wherein the second rule is topologically positioned as a node, wherein packets matching the first rule are directed to a lower rule layer, including the second rule based on how the packets match filtration at higher layers at a prior rule, including the first rule.
Dependencies are inferred from the claim text.