Mechanism for identifying differences between network snapshots

A non-transitory computer-readable medium having computer readable instructions that, upon being executed by a processor, cause the processor to:

• receive a set of network snapshot segments from an output stream of a stream processing service;
• determine, from the set of messages, a message of the set of messages includes an end tag;
• based on the end tag, determine that the set of messages includes the network snapshot segments for a first network snapshot and a second network snapshot;
• in response to the determination that the set of messages includes the network snapshot segments for a first network snapshot and a second network snapshot, compile the set of network snapshot segments from the output stream into the first network snapshot and the second network snapshot;
• and
• compare the first network snapshot and the second network snapshot to identify a difference between the first network snapshot and the second network snapshot.

A system comprising:

• a processor;
• and
• memory including instructions that, upon being executed by the processor, cause the system to:
• receive, from a consumer system, filtering criteria for network information generated by a network traffic monitoring system;
• receive a set of messages associated with an output stream of a stream processing service, wherein each message in the set of messages includes a network snapshot segment;
• determine, from the set of messages, a message of the set of messages includes an end tag;
• based on the end tag, determine that the set of messages includes the network snapshot segments for a first network snapshot and a second network snapshot;
• in response to the determination that the set of messages includes the network snapshot segments for a first network snapshot and a second network snapshot, compile the network snapshot segments from the set of messages into the first network snapshot and the second network snapshot;
• identify a difference between the first network snapshot and the second network snapshot, wherein the difference complies with the filtering criteria;
• and
• provide the difference to an end usera consumer system.