发明名称 Portable system for monitoring network flow attributes and associated methods
摘要 A method for monitoring flow attributes at a network node comprises detecting first information indicative of transmission of a packet through the network node. The first information is discernible from information contained within the packet. The method also comprises determining that the packet is not part of an existing flow and generating, in a flow cache memory, a new flow entry corresponding to the packet. The method further comprises receiving second information associated with the transmission of the packet through the network node. The second information is contained in a forwarding information base (FIB) stored in the network node and cannot be discerned from information contained within the packet. The method also comprises writing, in the flow cache memory, at least a portion of the second information to the new flow entry corresponding to the packet.
申请公布号 US9344344(B2) 申请公布日期 2016.05.17
申请号 US201414164152 申请日期 2014.01.25
申请人 Cisco Technology, Inc. 发明人 Bucci Christopher Jon;Song Walter;Feng Chao;Sharma Samar
分类号 H04L12/26;H04L12/801;H04L12/751 主分类号 H04L12/26
代理机构 Meunier Carlin & Curfman LLC 代理人 Meunier Carlin & Curfman LLC
主权项 1. A computer-implemented method for monitoring flow attributes at a network probe coupled to a first device in a network node, wherein the network probe collects flow information for export on behalf of the first device, the method comprising: detecting, by a processor of a network probe coupled to a first device at the network node, first information indicative of transmission of a packet through the network node, the first information being discernible, at the network probe, from raw data contained within the packet, wherein the network probe comprises the processor and a memory and the first device comprises a second processor and a second memory, the processor and the memory of the network probe being different from the second processor and the second memory of the first device; determining, by the network probe, that the packet is not part of an existing flow; generating, in the memory of the network probe, a new flow entry corresponding to the packet; receiving, at the network probe, from the first device of the network node, second information associated with the transmission of the packet through the network node, the second information contained in a forwarding information base (FIB) stored in the second memory of the first device and which cannot be discerned, at the network probe, from information contained within the packet; and writing, in the memory of the network probe, the second information to the new flow entry corresponding to the packet.
地址 San Jose CA US