Anomaly detection and correction in wireless networks

A packet switch that is communicatively coupled to one or more wireless networking access points and comprising:

• one or more processors;
• one or more networking interfaces coupled to the one or more processors;
• one or more non-transitory computer-readable storage media coupled to the one or more processors and storing one or more sequences of instructions which, when executed using the one or more processors, cause performing:
• receiving a plurality of digital data packets that have been received via a wireless data interface, wired data interface or data path;
• filtering the plurality of digital data packets to produce filtered digital data packets;
• executing code for a data communications protocol in which one or more of the filtered digital data packets causes the code to transition to different states of the protocol;
• in parallel with executing the code, executing a protocol state machine comprising a plurality of states and a plurality of transitions between the states to simulate correct execution of a particular data communication protocol;
• detecting an anomaly between a first particular state of the protocol during the execution of the code and a second particular state of the protocol state machine, and in response, generating an anomaly event comprising digital data indicating that an anomaly event has occurred;
• in response to detecting the anomaly event, transmitting an anomaly event log based on the anomaly event and the filtered digital data packets to a different computing device.