Integrated network data collection arrangement and methods thereof
AssigneeIxia
InventorsEldad Matityahu, Robert Shaw, Dennis Carpio, Sharon Besser
Life of this patent
Estimating the term…
Abstract
An arrangement for storing data pertaining to network data traffic flowing through a network is provided. The arrangement includes a set of network cluster arrangements. Each network cluster arrangement of the set of network cluster arrangements includes a plurality of network devices configured for receiving and sending the network data traffic, and a set of monitoring network appliances configured for monitoring at least a portion of the network data traffic flowing between the plurality of network devices. The arrangement also includes a set of network data collection arrangements configured for at least storing the data pertaining to the network data traffic.
Claims16
A system for monitoring data pertaining to network data traffic flowing through a network and for pushing updates in the data, the system comprising:
- a set of network cluster arrangements, wherein each network cluster arrangement of said set of network cluster arrangements includes:
- a set of monitoring network appliances, each including a programmable circuit and a memory and configured for monitoring at least a portion of said network data traffic flowing between a plurality of network devices, the network devices including switches or routers and the monitoring network appliances being separate from the switches or routers, each monitoring network appliance including at least one data port for forwarding traffic between the switches or routers and an emit port separate from the at least one data port;
- and
- at least one data collection server configured for at least storing said data pertaining to said network data traffic, said at least one data collection server including:
- a processor and a memory executing:
- a data management component configured at least for receiving said set of data packets from each one of said set of monitoring network appliances,
- a storage module for storing at least a portion of said set of data packets, and a data request component, wherein the at least one data collection server is coupled to the emit port, and wherein the emit port is dedicated to transmit the monitored portion of the data traffic to the at least one data collection server using a data push model by periodically pushing an update of the monitored portion of the data traffic at a scheduled frequency to the at least one data collection server, wherein the at least one data collection server sends a single query for a type of data to the set of monitoring network appliances without specifying a device being monitored and wherein the set of monitoring network appliances automatically pushes the updates to said at least one data collection server via the emit port, wherein the updates include monitored data from devices that join a network after transmission of the single query to the set of monitoring network appliances;
- wherein said at least one data collection server is configured for, after receiving said set of data packets from said set of monitoring network appliances:
- unpacking said set of data packets;
- comparing payload data within said set of data packets with payload data stored by said network at least one data collection server, wherein said comparing includes comparing one or more timestamp values in said payload data within said set of data packets with one or more timestamp values in said stored payload data;
- and
- if a portion of said payload data is missing from said stored payload data, retrieving said portion of said payload data from said set of data packets and storing said portion of said payload data within said network data cluster arrangement.
A method for monitoring data pertaining to network data traffic flowing through a network and for pushing updates in the data, the method comprising:
- at a monitoring network appliance including a programmable circuit and a memory:
- receiving said network data traffic flowing between at least two network devices, the at least two network devices each comprising a switch or a router and the monitoring network appliance being separate from the switch or router;
- copying at least a portion of said network data traffic by the monitoring network appliance;
- collecting at least one of traffic data and statistical data pertaining to said network data traffic;
- encapsulating at least one of said traffic data and said statistical data into a set of data packets;
- and
- transmitting said set of data packets to a data collection server, at said data collection server:
- receiving, by a data management component of said data collection server, said set of data packets from said monitoring network appliance, and
- storing, by a storage module of said data collection server, at least a portion of said set of data packets,
- wherein transmitting said copied portion of said network data traffic to said data collection server includes using a data push model by periodically pushing an update of the copied portion of said data traffic at a scheduled frequency to said data collection server, wherein said data collection server sends a single query for a type of data to said monitoring network appliance without specifying a device being monitored and wherein said monitoring network appliance automatically pushes the updates to said data collection server via an emit port, wherein the updates include monitored data from devices that join a network after transmission of the single query to the monitoring network appliance;
- at said data collection server, after receiving said set of data packets from said monitoring network appliance;
- unpacking said set of data packets;
- comparing payload data within said set of data packets with stored payload data stored within said data collection server, wherein said comparing includes comparing one or more timestamp values in said payload data within said set of data packets with one or more timestamp values in said stored payload data;
- and
- if a portion of said payload data is missing from said stored payload data, retrieving said portion of said payload data from said set of data packets and storing said portion of said payload data within said network data collection arrangement.
Dependencies are inferred from the claim text.