Network traffic monitoring based on geolocation information

A network device, comprising:

• one or more memories;
• and
• one or more processors to:
• receive, from a mediation device, flow-tap geolocation information,
• wherein the flow-tap geolocation information identifies a geographical location that is to be monitored by a content destination device;
• determine, based on the flow-tap geolocation information, an Internet protocol (IP) address that is associated with the geographical location;
• generate an entry of a flow-tap geolocation filter that maps the IP address to a flow-tap content destination address of the content destination device,
• wherein the flow-tap geolocation filter is associated with a data structure of the network device;
• monitor, using the flow-tap geolocation filter, network traffic of a network to identify a traffic flow that is associated with the geographical location;
• process, based on identifying the traffic flow in the network traffic, the traffic flow for a transmission of the traffic flow to a traffic flow destination of the traffic flow;
• generate, based on processing the traffic flow, a traffic flow copy of the traffic flow;
• provide, based on the entry, the traffic flow copy to the flow-tap content destination address to permit the mediation device to access the traffic flow copy via the content destination device;
• and
• transmit the traffic flow to the traffic flow destination.

A non-transitory computer-readable medium storing instructions, the instructions comprising:

• one or more instructions that, when executed by one or more processors, cause the one or more processors to:
• receive, from a mediation device, flow-tap geolocation information,
• wherein the flow-tap geolocation information identifies a geographical location that is to be monitored by a content destination device;
• obtain, from a geographical Internet protocol (GeoIP) database and based on the flow-tap geolocation information, an Internet protocol (IP) address that is associated with a geographical location;
• map, in an entry of a flow-tap geolocation filter, the IP address to a flow-tap content destination address that is associated with the content destination device,
• wherein the flow-tap content destination address was received in association with the flow-tap geolocation information;
• detect, based on monitoring network traffic of a network, a traffic flow of the network traffic that is associated with the geographical location and a traffic flow destination,
• wherein the traffic flow is detected based on the IP address being identified in the traffic flow;
• generate, based on detecting the traffic flow in the network traffic, a traffic flow copy that is associated with the traffic flow;
• and
• provide, based on the entry mapping the IP address to the flow-tap content destination address, the traffic flow copy to the content destination device.