Systems and methods for processing packets tapped from a network

摘要

A method performed by a network device that taps to a network having a routing device, includes: determining a first information regarding an input interface of the routing device for a packet; determining a second information regarding an output interface of the routing device for the packet; determining whether the packet belongs to a user-defined category based on one or more mapping formation defined at the network device; and storing the packet, the first information regarding the input interface of the routing device, the second information regarding the output interface of the routing device, and information regarding the user-defined category in a non-transitory medium in association with each other.

主权项

1. A method performed by a network device that taps to a network having a routing device, comprising:
determining a first information regarding an input interface of the routing device for a packet using a processing unit by:
receiving a first packet tapped from the network; anddetermining the first information based on a destination address of the first packet by comparing the destination address of the first packet with a source address of a discovery protocol packet; determining a second information regarding an output interface of the routing device for the packet using the processing unit; determining whether the packet belongs to a user-defined category based on one or more mapping formation defined at the network device; and storing the packet, the first information regarding the input interface of the routing device, the second information regarding the output interface of the routing device, and information regarding the user-defined category in a non-transitory medium in association with each other.