| 摘要 |
A tracking system is described herein for investigating the behavior of a network. In operation, each switch in the network (or each switch in some subset of switches) may determine whether each original packet that it processes satisfies one or more packet-detection rules. If so, the switch generates a mirrored packet and sends that packet to a load balancer multiplexer, which, in turn, forwards the mirrored packet to a processing module for further analysis. The packet-detection rules hosted by the switches can be designed to select a subset of packets that are of greatest interest, based on any environment-specific objectives. As a result of this behavior, the tracking system can effectively and quickly pinpoint undesirable (and potentially desirable) behavior of the network, without being overwhelmed with too much information. |
