Method and apparatus for analyzing packet captures to troubleshoot network issues

An apparatus comprising:

• one or more network processor units to communicate with devices in a network;
• and
• a processor coupled to the one or more network processor units and configured to perform:
• obtaining packet captures (PCAPs), wherein the PCAPs are obtained from a network;
• obtaining a first prompt, the first prompt being arranged to identify a first symptom observed in the network;
• obtaining at least one packet signature in response to the first prompt, wherein the at least one packet signature is related to the first symptom;
• filtering the PCAPs based on the at least one packet signature, wherein filtering the PCAPs includes identifying a set of packet chunks contained in the PCAPs;
• and
• processing the set of packet chunks using at least one large language model (LLM), wherein processing the set of packet chunks includes identifying at least one issue, the at least one issue is characterized by the first symptom, and wherein processing the set of packet chunks further includes creating a summary that summarizes the at least one issue.

One or more non-transitory computer readable storage media encoded with instructions that, when executed by a processor, cause the processor to perform:

• obtaining packet captures (PCAPs), wherein the PCAPs are obtained from a network;
• obtaining a first prompt, the first prompt being arranged to identify a first symptom observed in the network;
• obtaining at least one packet signature in response to the first prompt, wherein the at least one packet signature is related to the first symptom;
• filtering the PCAPs based on the at least one packet signature, wherein filtering the PCAPs includes identifying a set of packet chunks contained in the PCAPs;
• and
• processing the set of packet chunks using at least one large language model (LLM), wherein processing the set of packet chunks includes identifying at least one issue, the at least one issue is characterized by the first symptom, and wherein processing the set of packet chunks further includes creating a summary that summarizes the at least one issue.