Distributed network troubleshooting using simultaneous multi-point packet capture
First Claim
Patent Images
1. A method for performing a multi-point capture of packets in a network, the method comprising:
- identifying a plurality of nodes for the multi-point capture in the network;
configuring each node of the plurality of nodes to capture a set of packets by identifying a staggered start time by exchanging a number of packets with each node and computing a round-trip time for each node based on the exchanged packets for each node, wherein each node waits for the staggered start time before beginning a capture;
receiving a plurality of captured packet sets from the plurality of nodes; and
analyzing the plurality of captured packet sets.
1 Assignment
0 Petitions
Accused Products
Abstract
Some embodiments provide a method for performing a multi-point capture of packets in a network. The method identifies multiple nodes for the multi-point capture in the network. The method configures each node of the multiple nodes to capture a set of packets. The method receives multiple captured packet sets from the multiple nodes. The method analyzes the multiple captured packet sets.
-
Citations
22 Claims
-
1. A method for performing a multi-point capture of packets in a network, the method comprising:
-
identifying a plurality of nodes for the multi-point capture in the network; configuring each node of the plurality of nodes to capture a set of packets by identifying a staggered start time by exchanging a number of packets with each node and computing a round-trip time for each node based on the exchanged packets for each node, wherein each node waits for the staggered start time before beginning a capture; receiving a plurality of captured packet sets from the plurality of nodes; and analyzing the plurality of captured packet sets. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. A method for performing a multi-point capture of packets in a network, the method comprising:
-
receiving a configuration for the capture from an administrator of the network, wherein the configuration for the capture comprises a session length; identifying a plurality of nodes for the multi-point capture in the network; configuring each node of the plurality of nodes to capture a set of packets by identifying a batch duration based on the session length and a set of properties of the particular node; receiving a plurality of captured packet sets from the plurality of nodes by receiving a plurality of subsets of the set of captured packets, wherein each subset comprises packets captured during the batch duration; and analyzing the plurality of captured packet sets. - View Dependent Claims (15)
-
-
16. A method for performing a multi-point capture of packets in a network, the method comprising:
-
identifying a plurality of nodes for the multi-point capture in the network; configuring each node of the plurality of nodes to capture a set of packets by identifying a staggered start time for each node, wherein each node waits for the staggered start time before beginning a capture, wherein identifying the staggered start time for a particular node comprises identifying the staggered start time based on previous communications with the particular node; receiving a plurality of captured packet sets from the plurality of nodes; and analyzing the plurality of captured packet sets.
-
-
17. A non-transitory machine readable medium storing a program which when executed by at least one processing unit performs a multi-point capture of packets in a network, the program comprising sets of instructions for:
-
receiving a configuration for the multi-point capture from an administrator of the network, wherein the configuration for the capture comprises a session length; identifying a plurality of nodes for the multi-point capture in the network; configuring each node of the plurality of nodes to capture a set of packets by identifying a batch duration based on the session length and a set of properties of the particular node; receiving, from the plurality of nodes, a plurality of captured packet sets comprising subsets of the set of captured packets, wherein each subset comprises packets captured during the batch duration; and analyzing the plurality of captured packet sets. - View Dependent Claims (18, 19, 20)
-
-
21. A non-transitory machine readable medium storing a program which when executed by at least one processing unit performs a multi-point capture of packets in a network, the program comprising sets of instructions for:
-
identifying a plurality of nodes for the multi-point capture in the network; configuring each node of the plurality of nodes to capture a set of packets by identifying a staggered start time for each node, wherein each node waits for the staggered start time before beginning a capture, the identified staggered start time for at least one particular node identified by exchanging a number of packets with each node and computing a round-trip time for each node based on the exchanged packets; receiving a plurality of captured packet sets from the plurality of nodes; and analyzing the plurality of captured packet sets.
-
-
22. A non-transitory machine readable medium storing a program which when executed by at least one processing unit performs a multi-point capture of packets in a network, the program comprising sets of instructions for:
-
identifying a plurality of nodes for the multi-point capture in the network; configuring each node of the plurality of nodes to capture a set of packets by identifying a staggered start time for each node, wherein each node waits for the staggered start time before beginning a capture, the identified staggered start time for at least one particular node identified based on previous communications with the particular node; receiving a plurality of captured packet sets from the plurality of nodes; and analyzing the plurality of captured packet sets.
-
Specification