Back to results
US 6,633,835 B1Granted
Prioritized data capture, classification and filtering in a network monitoring environment
AssigneeNetworks Associates Technology, Inc.
InventorsMike Moran, Tauras Liubinskas, Jack Goral
Life of this patent
Estimating the term…
Abstract
A system, method and computer program product are provided for adaptive priority data filtering. Data is collected from a network segment and classified into multiple flows. The flows are prioritized into high and low priority flows. High priority flows are stored in a high priority queue prior to processing, while low priority flows are stored in a low priority queue prior to processing. An amount of data in the high priority flows is monitored. Buffers from the low priority queue are reallocated to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold.
Claims18
A method for priority data filtering, comprising:
- collecting data from a network segment;
- classifying the data into multiple flows;
- prioritizing the flows into high and low priority flows;
- storing high priority flows in a high priority queue prior to processing;
- storing low priority flows in a low priority queue prior to processing;
- monitoring an amount of data in the high priority flows;
- reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold;
- and
- randomly removing flows from the high priority queue.
6 more elements
A method for priority data filtering, comprising:
- collecting data from a network segment;
- classifying the data into multiple flows;
- prioritizing the flows into high and low priority flows;
- storing high priority flows in a high priority queue prior to processing;
- storing low priority flows in a low priority queue prior to processing;
- monitoring an amount of data in the high priority flows;
- reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold;
- and
- declassifying inactive flows.
6 more elements
A computer program product for priority data filtering, comprising:
- computer code for collecting data from a network segment;
- computer code for classifying the data into multiple flows;
- computer code for prioritizing the flows into high and low priority flows;
- computer code for storing high priority flows in a high priority queue prior to processing;
- computer code for storing low priority flows in a low priority queue prior to processing;
- computer code for monitoring an amount of data in the high priority flows;
- computer code for reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold;
- and
- computer code for randomly removing flows from the high priority queue based on predetermined criteria.
6 more elements
A computer program product for priority data filtering, comprising:
- computer code for collecting data from a network segment;
- computer code for classifying the data into multiple flows;
- computer code for prioritizing the flows into high and low priority flows;
- computer code for storing high priority flows in a high priority queue prior to processing;
- computer code for storing low priority flows in a low priority queue prior to processing;
- computer code for monitoring an amount of data in the high priority flows;
- computer code for reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold;
- and
- computer code for declassifying inactive flows.
6 more elements
A system for adaptive priority data filtering, comprising:
- (a) logic for collecting data from a network segment;
- (b) logic for classifying the data into multiple flows;
- (c) logic for prioritizing the flows into high and low priority flows;
- (d) logic for storing high priority flows in a high priority queue prior to processing;
- (e) logic for storing low priority flows in a low priority queue prior to processing;
- (f) logic for monitoring an amount of data in the high priority flows;
- and
- (g) logic for reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold
- (h) logic for randomly removing flows from the high priority queue.
6 more elements
A method for priority data filtering, comprising:
- allocating all buffers to a low priority queue;
- collecting data from a network segment;
- storing the collected data in the low priority queue;
- classifying the data into multiple flows;
- prioritizing the flows into high and low priority flows;
- storing high priority flows in a high priority queue prior to processing;
- storing low priority flows in the low priority queue prior to processing;
- monitoring an amount of data in the high priority flows;
- reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold;
- and
- processing data in both the high and low priority queues.
8 more elements
A method for adaptive priority data filtering, comprising:
- (a) allocating all buffers to a low priority queue;
- (b) collecting data from a network segment;
- (c) storing the collected data in the low priority queue;
- (d) classifying the data into multiple flows;
- (e) prioritizing the flows into high and low priority flows;
- (f) storing high priority flows in a high priority queue prior to processing;
- (g) storing low priority flows in the low priority queue prior to processing;
- (h) monitoring an amount of data in the high priority flows;
- (i) reallocating buffers from the low priority queue to the high priority queue if the
- amount of data in the high priority flows surpasses a predetermined threshold;
- (j) processing data in both the high and low priority queues;
- (k) randomly relegating high priority flows from the high priority queue to the low priority queue if the amount of data in the high priority queue surpasses a predetermined threshold;
- (l) removing inactive high priority flows from the high priority queue;
- (m) reallocating buffers from the high priority queue to the low priority queue if the amount of data in the high priority flows is below a predetermined threshold;
- and
- (n) identifying a flow of data as being important, and using the identification as criteria for forwarding additional data from the identified flow for processing.
13 more elements
A method for adaptive priority data filtering, comprising:
- collecting data from a network segment;
- classifying the data into multiple flows;
- prioritizing the flows into high and low priority flows;
- storing high priority flows in a high priority queue prior to processing;
- storing low priority flows in a low priority queue prior to processing;
- monitoring an amount of data in the high priority flows;
- reallocating buffers from the low priority queue to the high priority queue if the amount of data in the high priority flows surpasses a predetermined threshold;
- and
- randomly relegating high priority flows from the high priority queue to the low priority queue if the amount of data in the high priority queue surpasses a predetermined threshold.
6 more elements
Dependencies are inferred from the claim text.