Method and system for triggering augmented data collection on a network based on traffic patterns

摘要

A method and system for increasing the collection of network traffic data in a network based on the occurrence of predetermined criteria. A network appliance manages network traffic in the network and passes data traffic on the network. Network traffic data is collected based on the data traffic passing through the network appliance at a normal level. It is determined whether the network traffic data indicates an abnormal condition. The collection of network traffic data is increased through the network traffic appliance when an abnormal condition is detected. The network traffic data from the increased collection is stored in a memory device.

主权项

1. A method of adjusting network data management in a network appliance coupled to devices in a network, the network appliance passing data traffic on the network, the method comprising:
collecting network traffic data based on the data traffic passing through the network appliance at a normal level; determining whether the network traffic data indicates an abnormal condition; increasing the collection of network traffic data through the network appliance when an abnormal condition is detected; storing the network traffic data from the increased collection in a memory device; sending the network traffic data from the increased collection to a central management device; analyzing the network traffic data via the central management device to determine the abnormal condition.