EVENT CORRELATION BETWEEN PROTOCOL LAYERS IN A NETWORK DEVICE

摘要

A system and method for correlating events between protocol layers of a protocol stack of a network device includes detecting, at a first protocol layer, an occurrence of a first event associated with one or more data units received by the network device over physical media. A first timestamp is associated with the first event. At a second protocol layer, an occurrence of a second event associated with the one or more data units is detected. The second protocol layer is at a higher protocol layer of a protocol stack than the first protocol layer. A second timestamp is associated with the second event. A determination is made whether there is a correlation between the first and second events based on the first and second timestamps. Causation of the second event at the second protocol layer may be attributable to the first event at the first protocol layer.