Apparatus and system for aggregating captured network traffic

摘要

Methods, systems, computer-readable media, and devices for aggregating sets of received captured network traffic by a network captured traffic distribution device communicatively coupled to a plurality of network captured network traffic distribution devices arranged in a stacked topology are described. Systems for aggregating captured network traffic may include a source of captured network traffic, a plurality of stacked network captured traffic distribution devices arranged in a stacked topology such that each network captured traffic distribution device is communicatively coupled via a communication link with at least one additional stacked network captured traffic distribution device, and an external device. In some embodiments, one or more of the stacked network captured traffic distribution devices, source, and/or external device may operate at locations that are geographically disperse from one another.

主权项

1. A method comprising:
receiving a first set of captured network traffic at a network captured traffic distribution device communicatively coupled to a plurality of network captured traffic distribution devices arranged in a stacked topology; determining, by the network captured traffic distribution device, a target destination of the first set of captured network traffic; receiving a second set of captured network traffic at the network captured traffic distribution device; determining, by the network captured traffic distribution device, a target destination of the second set of captured network traffic; determining, by the network captured traffic distribution device, whether the first and second sets of captured network traffic have the same target destination; aggregating, by the network captured traffic distribution device, the first and second sets of captured network traffic based on the determination that the first and second sets of captured network traffic have the same target destination; exchanging configuration information between the network captured traffic distribution device and at least some of the plurality of network captured traffic distribution devices, the configuration information including instructions related to load balancing a distribution of the aggregated first and second sets of captured network traffic through the stacked topology; determining, by the network captured traffic distribution device, an optimum load spread route for the transmission of the aggregated first and second sets of captured network traffic from the network captured traffic distribution device, through the stacked topology, to the determined target destination based on the exchanged configuration information; transmitting, by the network captured traffic distribution device, the aggregated first and second sets of captured network traffic toward the target destination via the determined optimum load spread route; and wherein the first set of captured network traffic is received from a first source and the second set of captured network traffic is received from a second source geographically dispersed from the first source.