| 摘要 |
An inspection node receives an event to begin monitoring a traffic flow where the event comprises a flow identifier associated with the traffic flow. The inspection node receives the traffic flow where the traffic flow comprises a plurality of packets and begins inspecting the plurality of the packets to obtain an application identifier. Based upon the flow identifier and the application identifier, the inspection node performs a sampling process on the traffic flow. After determining the end of the traffic flow, the inspection node terminates the sampling process.
|
