Automatic Capture of Network Data for a Detected Anomaly
AssigneeA10 Networks, Inc.
InventorsRajkumar Jalan, Ronald Wai Lun Szeto, Rishi Sampat, Julia Lin
Life of this patent
Estimating the term…
Abstract
Methods and systems are provided for automatically capturing network data for a detected anomaly. In some examples, a network node establishes a baseline usage by applying at least one baselining rule to network traffic to generate baseline statistics, detects an anomaly usage by applying at least one anomaly rule to network traffic and generating an anomaly event, and captures network data according to an anomaly event by triggering at least one capturing rule to be applied to network traffic when an associated anomaly event is generated.
Claims25
A computer-implemented method for capturing network data during a network usage anomaly based on a network usage model, comprising:
- establishing a baseline usage by applying at least one baselining rule to network traffic to generate baseline statistics;
- detecting an anomaly usage by applying at least one anomaly rule to network traffic and generating an anomaly event;
- and
- capturing network data according to an anomaly event by triggering at least one capturing rule to be applied to network traffic when an associated anomaly event is generated.
A network node for detecting and storing network usage anomalies, the network node storing instructions that when executed by at least one processor:
- establish a baseline usage by applying at least one baselining rule to network traffic to generate baseline statistics;
- detect an anomaly usage by applying at least one anomaly rule to network traffic and generating an anomaly event;
- and
- capture network data according to an anomaly event by triggering at least one capturing rule to be applied to network traffic when an associated anomaly event is generated.
A non-transitory computer-readable medium comprising computer readable code, which when executed by one or more processors, implements a method for capturing network data during a network usage anomaly based on a network usage model, comprising:
- establishing a baseline usage by applying at least one baselining rule to network traffic to generate baseline statistics;
- detecting an anomaly usage by applying at least one anomaly rule to network traffic and generating an anomaly event;
- and
- capturing network data according to an anomaly event by triggering at least one capturing rule to be applied to network traffic when an associated anomaly event is generated.
Dependencies are inferred from the claim text.