Resolving a monitor based on information in a plurality of packets

摘要

In one embodiment, accurate packet metrics are recorded despite delayed resolution of one or more traffic monitors that maintain the metrics for the packet flow. One or more metrics related to an initial plurality of packets of a packet flow are stored in a temporary metrics data structure. One or more monitors are subsequently resolved based on information included in packets of at least the initial plurality of packets. For example, an application or Wide Area Application Services (WAAS) segment that is to be monitored may not be identified until after numerous packets have passed. The monitor(s) are updated with metrics related to the packet flow based on said one or more metrics related to the initial plurality of packets from the metrics data structure and packets of the packet stream subsequent to the first one or more packets.

主权项

1. A method, comprising:
storing in a metrics data structure by a particular machine one or more metrics related to an initial plurality of packets of a packet flow; resolving a monitor based on information included in packets of at least the initial plurality of packets after performing said storing said one or more metrics in the metrics data structure; updating the monitor with metrics related to the packet flow based on said one or more metrics related to the initial plurality of packets from the metrics data structure and packets of a packet stream subsequent to the initial plurality of packets; and delaying said updating the monitor until a plurality of monitors, including the monitor, of the particular machine have been resolved as being associated with the packet flow based on additional one or more packets being in the initial plurality of packets after said resolving the monitor.