SYSTEM AND METHOD FOR IDENTIFICATION OF LARGE-DATA FLOWS

摘要

Apparatus, systems and methods may be used to monitor data flows and to select and track particularly large data flows. A method of tracking data flows and identifying large-data (“elephant”) flows comprises extracting fields from a packet of data to construct a flow key, computing a hash value on the flow key to provide a hashed flow signature, entering and/or comparing the hashed flow signature with entries in a flow hash table. Each hash table entry includes a byte count for a respective flow. When the byte count for a flow exceeds a threshold value, the flow is added to a large-data flow (“elephant”) table and the flow is then tracked in the large-data flow table.

主权项

1. A method of tracking data flows comprising:
computing a hashed flow signature on values extracted from the data packet received on the network device, the hashed flow signature being used to locate a position for the hashed flow signature in the flow hash table; and adding a flow key of the respective entry in the flow hash table to a large-data flow table when a byte count for an entry in the flow hash table exceeds a predetermined byte count threshold.