Collecting network-level packets into a data structure in response to an abnormal condition
AssigneeHewlett-Packard Development Company, L.P.
InventorsEyal Kenigsberg, Michael Gopshtein, Nick Ioffe
Life of this patent
Estimating the term…
Abstract
A sniffer device determines whether an abnormal condition is present in a network communication. In response to determining that the abnormal condition is present, the sniffer device collects network-level packets into a data structure. The data structure containing the collected network-level packets can be analyzed for determining whether the abnormal condition caused an issue with a communicating entity.
Claims17
A method comprising:
- determining, by a sniffer device including a processor, whether an abnormal condition is present in a network communication between network devices, wherein the network communication is associated with a particular communicating entity running in a first of the network devices;
- in response to determining that the abnormal condition is present, collecting, by the sniffer device into a data structure, network-level packets relating specifically to the communicating entity, wherein the collected network-level packets are identified by a unique identifier;
- associating, by the sniffer device, the data structure with the communicating entity to allow the collected network-level packets in the data structure to be analyzed for determining whether the abnormal condition in the network communication caused an issue with the communicating entity;
- and
- associating the data structure with the unique identifier to allow the data structure to be retrieved in response to a search request containing the unique identifier.
A sniffer device comprising:
- an interface to a network over which network communication between network devices occur, wherein the network communication includes a request from an application in a first of the network devices, and a response from a second of the network devices in response to the request;
- and
- at least one processor to:
- detect an abnormal condition of the network communication;
- in response to the detecting of the abnormal condition, capture network-level packets associated with a request-response pair including the request and the response into a capture data structure, wherein the captured network-level packets are identified by a unique identifier;
- associate the capture data structure with the unique identifier to allow the capture data structure to be retrieved in response to a search request containing the unique identifier;
- and
- output the capture data structure to an analysis device to analyze the capture data structure to determine whether the abnormal condition caused an issue encountered by the application.
An article comprising at least one machine-readable storage medium storing instructions that upon execution cause a sniffer device having a processor to:
- determine whether an abnormal condition is present in a network communication between network devices, wherein the network communication is associated with a particular communicating entity running in a first of the network devices;
- in response to determining that the abnormal condition is present, collect, into a data structure, network-level packets relating specifically to the particular communicating entity, wherein the collected network-level packets are identified by a unique identifier;
- associate the data structure with the particular communicating entity to allow the collected network-level packets in the data structure to be analyzed for determining whether the abnormal condition in the network communication caused an issue with the particular communicating entity;
- associate the data structure with the unique identifier;
- receive a search request containing the unique identifier;
- and
- output the data structure in response to the request.
Dependencies are inferred from the claim text.