SYSTEM AND RELATED METHOD FOR NETWORK MONITORING AND CONTROL BASED ON APPLICATIONS

摘要

A network architecture system that expands the control network administrators have on existing networks. The system provides application identification and usage data by user, by device and network location. Dynamic traffic mirroring of the system allows for the efficient use of a tool to identify computer applications running on the network. The system includes the ability to embed the tool where needed rather than pervasively based on the use of the dynamic mirroring to bring the packets to the tool. The architecture implemented functions allow the ability to start small with a single application identification tool added to a network management server, examine flows from throughout the network (via mirroring) and upgrade policy control based on real application identification data and usage, then grow to pervasive deployment where virtually all new flows could be identified and controlled via policy. This architecture enables substantially complete application visibility and control.

主权项

1. A network system comprising:
a. a plurality of packet forwarding devices including one or more packet forwarding devices that are arranged in the network system as network entry devices for receiving packets from one or more attached functions, wherein the one or more network entry devices are configured to detect packet flows and forward packets of the network system; b. one or more flow monitoring devices configured to examine and/or log information associated with flows of the network system, wherein at least one of the one or more packet forwarding devices is configured to mirror frames of received packets to at least one of the one or more flow monitoring devices; and c. a manager function of the network system configured to adjust mirroring actions of the at least one of the one or more network entry devices based on information received from the one or more flow monitoring devices or other information.