Multicast flow monitoring

摘要

Provided is a method of monitoring a multicast flow. An initial multicast flow is characterized as a baseline flow entity. A subsequent multicast flow is compared against the baseline flow entity to identify anomalies between the baseline flow entity and the subsequent multicast flow.

主权项

1. A computer-implemented method of monitoring a multicast flow comprising:
receiving, at a device in a network, first multicast packets of a multicast flow in a distribution tree; determining attributes for the first multicast packets of the multicast flow; characterizing the first multicast packets of the multicast flow as a baseline flow entity based on the determined attributes for the first multicast packets of the multicast flow; receiving, at the device, second multicast packets of the multicast flow in the distribution tree; determining attributes for the second multicast packets of the multicast flow; characterizing the second multicast packets of the multicast flow as a current flow entity; and comparing the attributes determined for the second multicast packets in the current flow entity against the attributes for the first multicast packets in the baseline flow entity to identify anomalies between the baseline flow entity and the current flow entity.