Dynamic remote packet capture
AssigneeJuniper Networks, Inc.
InventorBruno Rijsman
Life of this patent
Estimating the term…
Abstract
A device may be configured to receive information regarding one or more ports associated with a routing device; output, to the routing device, filter information associated with at least a particular port, of the one or more ports associated with the routing device, the filter information specifying one or more conditions associated with traffic of interest; receive, from the routing device, and based on the outputted filter information, information regarding traffic of interest received or sent by the routing device via the particular port, the traffic of interest being less than or equal to all traffic received or sent by the routing device via the particular port; and store or output a representation of at least a portion of the received information regarding the traffic of interest.
Claims20
A method comprising:
- generating, by one or more processors of a traffic analysis device, a request for information regarding a port associated with a network device,
- the request being generated using a network analysis software tool, running on the traffic analysis device, capable of analyzing traffic at only ports included in the traffic analysis device;
- transmitting, by the one or more processors, the request for information regarding the port to the network device;
- receiving, by the one or more processors of the traffic analysis device, information regarding the port associated with the network device based on the request generated using the network analysis software tool;
- providing, by the one or more processors, filter information to the network device,
- the filter information including information associated with the port, and
- the filter information specifying one or more conditions associated with traffic of interest;
- receiving, by the one or more processors, from the network device, and based on the filter information, information regarding traffic received or sent by the network device via the port,
- the traffic satisfying the one or more conditions associated with the traffic of interest;
- and
- storing or outputting, by the one or more processors, a representation of at least a portion of the received information regarding the traffic.
A device comprising:
- a memory to store instructions;
- and
- a processor connected to the memory to execute the instructions to:
- generate a request for information regarding a port associated with a network device,
- the request being generated using a network analysis software tool, running on the device, capable of analyzing traffic at only ports included in the device;
- transmit the request for information regarding the port to the network device;
- receive information regarding the port associated with the network device based on the request generated using the network analysis software tool;
- provide filter information to the network device,
- the filter information including information associated with the port, and
- the filter information specifying one or more conditions associated with traffic of interest;
- receive, from the network device and based on the filter information, information regarding traffic received or sent by the network device via the port,
- the traffic satisfying the one or more conditions associated with the traffic of interest;
- and
- provide a representation of at least a portion of the received information regarding the traffic.
A device comprising:
- a memory to store instructions;
- and
- a processor connected to the memory to execute the instructions to:
- receive, from another device, a request for information regarding ports included in the device,
- the request being generated using a tool, running on the other device, used to analyze traffic at only ports included in the other device;
- receive, from the other device, filter information,
- the filter information including information associated with a port of the ports, and
- the filter information specifying one or more conditions associated with traffic of interest;
- identify, based on receiving the filter information, information regarding traffic received or sent by the device via the port,
- the traffic satisfying the one or more conditions associated with the traffic of interest;
- and
- transmit, based on identifying the information regarding the traffic, the information regarding traffic to permit a representation of at least a portion of the transmitted information regarding the traffic to be provided for presentation.
Dependencies are inferred from the claim text.