| 主权项 |
1. A method, comprising:
maintaining, by a first device in a network, raw traffic flow information for the network; providing, by the first device, a compressed summary of the raw traffic flow information to a second device in the network, wherein the second device is configured to transform the compressed summary for presentation to a user interface; detecting, by the first device, an anomalous traffic flow based on an analysis of the raw traffic flow information using a machine learning-based anomaly detector; and providing, by the first device, at least a portion of the raw traffic flow information related to the anomalous traffic flow to the second device for presentation to the user interface. |
