摘要 |
A device may be configured to receive information regarding one or more ports associated with a routing device; output, to the routing device, filter information associated with at least a particular port, of the one or more ports associated with the routing device, the filter information specifying one or more conditions associated with traffic of interest; receive, from the routing device, and based on the outputted filter information, information regarding traffic of interest received or sent by the routing device via the particular port, the traffic of interest being less than or equal to all traffic received or sent by the routing device via the particular port; and store or output a representation of at least a portion of the received information regarding the traffic of interest. |
主权项 |
1. A method, comprising:
receiving, by one or more processors of a traffic analysis device, a first request for information regarding ports that are local to a network device; generating, by the one or more processors and based on the first request, a second request for information regarding one or more ports associated with the network device; receiving, by the one or more processors, the information regarding the one or more ports associated with the network device based on the second request; outputting, by the one or more processors and to the network device, filter information associated with a particular port of the one or more ports associated with the network device,
the filter information specifying one or more conditions associated with traffic of interest; receiving, by the one or more processors, from the network device, and based on the outputted filter information, information regarding traffic received or sent by the network device via the particular port,
the traffic satisfying the one or more conditions associated with the traffic of interest; and storing or outputting, by the one or more processors, a representation of at least a portion of the received information regarding the traffic satisfying the one or more conditions associated with the traffic of interest. |