Autospan network traffic based on monitored applications
AssigneeArista Networks, Inc.
InventorsShashank Hegde, Sandip Shah
Life of this patent
Estimating the term…
Abstract
The present disclosure is directed to capturing network traffic for analysis. The present disclosure describes techniques to automate setting up a monitoring session for an application. The technique allows a user to set up a monitoring session by specifying the application to be monitored and one or more monitoring destinations (e.g., monitoring tools, monitoring fabric, etc.). The monitoring session can then be autonomously set up by the system without further input from the user.
Claims18
A method in a network management system for monitoring network traffic in a production network, the method comprising:
- receiving a request to monitor network traffic associated with an application running on the production network, the application accessing a plurality of associated services that support functions of the application;
- in response to the request:
- identifying a plurality of servers on which the application and the plurality of associated services run;
- automatically identifying, based network entity information and network topology information maintained by the network management system, a plurality of network devices and interfaces on those network devices that can reach the plurality of servers;
- and
- configuring one or more of the plurality of network devices to capture data packets sent to and sent by the application;
- detecting a state change in at least one network device configured to capture the data packets sent to and sent by the application;
- and
- in response to detecting the state change, reconfiguring the at least one network device to continue capturing the data packets sent to and sent by the application.
A network device comprising:
- one or more computer processors;
- and
- a computer-readable storage device comprising instructions for controlling the one or more computer processors to:
- receive a request to monitor network traffic associated with an application running on the production network, the application accessing a plurality of associated services that support functions of the application;
- in response to the request:
- identify a plurality of servers on which the application and the plurality of associated services run;
- automatically identify, based network entity information and network topology information maintained by the network management system, a plurality of network devices and interfaces on those network devices that can reach the plurality of servers;
- and
- configure one or more of the plurality of network devices to capture data packets sent to and sent by the application;
- detect a state change in at least one network device configured to capture the data packets sent to and sent by the application;
- and
- in response to detecting the state change, reconfigure the at least one network device to continue capturing the data packets sent to and sent by the application.
A non-transitory computer-readable storage device in a network device, the non-transitory computer-readable storage device having stored thereon computer executable instructions, which when executed, cause the network device to:
- receive a request to monitor network traffic associated with an application running on the production network, the application accessing a plurality of associated services that support functions of the application;
- in response to the request:
- identify a plurality of servers on which the application and the plurality of associated services run;
- automatically identify, based network entity information and network topology information maintained by the network management system, a plurality of network devices and interfaces on those network devices that can reach the plurality of servers;
- and
- configure one or more of the plurality of network devices to capture data packets sent to and sent by the application;
- detect a state change in at least one network device configured to capture the data packets sent to and sent by the application;
- and
- in response to detecting the state change, reconfigure the at least one network device to continue capturing the data packets sent to and sent by the application.
Dependencies are inferred from the claim text.