Scalable network route analysis

A system for detecting network anomalies within a network comprising one or more processors executing:

• a route dumper module configured to receive routing information from a plurality of switches within a network, the routing information including forwarding tables that list forwarding rules for forwarding packets within the network;
• a forwarding rules splitting module configured to split the received routing information into N portions;
• N match modules, each of the N match modules configured to process one of the N portions by identifying forwarding rules that pertain to each of M subnets belonging to the network, wherein a forwarding rule pertains to an Mth subnet if a prefix representing the Mth subnet can be fully included within a prefix associated with the forwarding rule;
• a grouping module configured to form M groups of forwarding rules such that each group only includes forwarding rules that pertain to the same Mth subnet;
• and
• M graphing modules, each of the M graphing modules configured to generate M forwarding graphs for the M subnets, each of the M forwarding graphs being generated using the corresponding Mth group of forwarding rules, wherein M and N are integers greater than 1.