Apparatus for flow-based network monitoring and network monitoring system
AssigneeElectronics and Telecommunications Research Institute
InventorsSaehoon KANG, Sunhee YANG
Life of this patent
Estimating the term…
Abstract
An apparatus for extracting flow information for monitoring a network is provided. The flow extraction apparatus includes a sampling processor that samples a received packet according to a sampling rate, a flow matching processor that searches for a first flow matching rule that is matched to a first packet that is received from the sampling processor among flow matching rules that are stored at a first flow table and that updates first statistical information corresponding to the first flow matching rule according to a search result, and a controller that sets the sampling rate and a flow matching rule to be stored at the first flow table.
Claims20
A flow extraction apparatus that extracts flow information for network monitoring, comprising:
- a sampling processor that samples a received packet according to a sampling rate;
- a flow matching processor that searches for a first flow matching rule that is matched to a first packet that is received from the sampling processor among flow matching rules that are stored at a first flow table and that updates first statistical information corresponding to the first flow matching rule according to a search result;
- and
- a controller that sets the sampling rate and a flow matching rule to be stored at the first flow table.
A flow-based network monitoring system, comprising:
- a flow extraction apparatus that determines whether a receiving packet corresponds to interest flow using a flow matching rule and that updates statistical information of the interest flow according to whether a receiving packet corresponds to interest flow;
- a flow collection server that collects the statistical information from the flow extraction apparatus;
- a flow analysis server that analyzes statistical information that is collected by the flow collection server and that determines the flow matching rule;
- and
- a monitoring controller that transmits the flow matching rule to the flow extraction apparatus by a request of the flow analysis server,
- wherein the flow matching rule comprises a value of at least one field of fields constituting a packet, and
- the interest flow is defined by the flow matching rule.
A flow-based software defined network (SDN) switch of an SDN system, the SDN switch comprising:
- a flow matching processor that updates first statistical information of first flow that is defined by a first flow matching rule, when the first flow matching rule that is matched to a receiving packet exists at a flow table;
- and
- an action processor that processes the receiving packet according to an action corresponding to the first flow matching rule, when the first flow matching rule exists at the flow table,
- wherein the first flow matching rule comprises at least one field value of field values of the receiving packet.
Dependencies are inferred from the claim text.