SYSTEM AND METHOD FOR REAL-TIME ANALYSIS OF NETWORK TRAFFIC

摘要

A system for monitoring live-data flow through a network includes a processor implementing a first processing node including an ingestor virtual machine (ingestor VM) for monitoring a mirrored live-data flow of the live-data flow passing through a selected point within the network in a non-intrusive manner that does not affect the live-data flow of at least one live data flow passing through the selected point. The ingestor VM further decodes each packet within the mirrored data flow according to each protocol associated with a packet and manages processes occurring within and between the first processing node and a second processing node. A time dependent buffer virtual machine (TDB VM) allocates a time dependent buffer (TDB) within the memory for executing the processes performed within and between the first processing node and a second processing node, and releasing the allocated TDB after completion of the processes. A governor virtual machine (governor VM) allocates memory resources within the memory between the first processing node and the second processing node for the processes performed within and between the first processing node and a second processing node. A grid virtual machine (grid VM) controls communications within and between the first processing nodes and between the first processing node and the second processing node.

主权项

1. A system for monitoring live-data flow through a network, comprising:
a server communicating with the network; a memory associated with the server; a processor within the server the processor implementing a first processing node and a second processing node, the first processing node including:
an ingestor virtual machine (ingestor VM) for configuring the processor to monitor a mirrored live-data flow of at least one live-data flow passing through a selected point within the network in a non-intrusive manner that does not affect the live-data flow passing through the selected point, wherein the live-data flow comprises data that is in active transmission between endpoints in the network and prior to storage of the data in a database, the ingestor VM decoding each packet within the mirrored data flow according to each protocol associated with a packet, wherein packets have a plurality of protocols associated therewith are decoded in parallel with each other, the ingestor VM further managing processes occurring within and between the first processing node and the second processing node and controlling the operation of the network;a time dependent buffer virtual machine (TDB VM) for allocating a time dependent buffer (TDB) within the memory for executing the processes occurring within and between the first processing node and the second processing node and releasing the allocated TDB after completion of the processes;a governor virtual machine (governor VM) for allocating memory resources within the memory between the first processing node and the second processing node for the processes occurring within and between the first processing node and the second processing node; anda grid virtual machine (grid VM) for controlling communications within the first processing node and between the first processing node and the second processing node.