Techniques for user-defined tagging of traffic in a network visibility system
AssigneeExtreme Networks, Inc.
InventorsLatha Laxman, Vishal Seth, Arvindsrinivasan Lakshmi Narasimhan
Life of this patent
Estimating the term…
Abstract
In one embodiment, a data plane component of the network visibility system can receive a data packet tapped from a source network. The data plane component can further match the data packet with an entry in a rule table, where the entry includes one or more match parameters, and in response to the matching can tag the data packet with a zone identifier defined in the entry. The data plane component can then forward the tagged data packet to an analytic server for analysis.
Claims17
A method comprising:
- receiving, by a data plane component of a network visibility system, a data packet tapped from a source network;
- matching, by the data plane component, the data packet with an entry in a rule table, the entry including one or more match parameters;
- in response to the matching, tagging, by the data plane component, the data packet with a zone identifier defined in the entry, the zone identifier being a user-defined identifier that is used by an analytic server for categorizing the data packet;
- and
- forwarding, by the data plane component, the data packet with the zone identifier to the analytic server for analysis.
A non-transitory computer readable storage medium having stored thereon program code executable by a data plane component of a network visibility system, the program code causing the data plane component to:
- receive a data packet tapped from a source network;
- match the data packet with an entry in a rule table, the entry including one or more match parameters;
- in response to the matching, tagging the data packet with a zone identifier defined in the entry, the zone identifier being a user-defined identifier that is used by an analytic server for categorizing the data packet;
- and
- forwarding the data packet with the zone identifier to the analytic server for analysis.
A device operable to act as a data plane component in a network visibility system, the device comprising:
- a processor;
- and
- a non-transitory computer readable medium having stored thereon program code that, when executed by the processor, causes the processor to:
- receive a data packet tapped from a source network;
- match the data packet with an entry in a rule table, the entry including one or more match parameters;
- in response to the matching, tagging the data packet with a zone identifier defined in the entry, the zone identifier being a user-defined identifier that is used by an analytic server for categorizing the data packet;
- and
- forwarding the data packet with the zone identifier to the analytic server for analysis.
Dependencies are inferred from the claim text.