METHODS, SYSTEMS, AND COMPUTER READABLE MEDIA FOR COLLECTING DATA FROM NETWORK TRAFFIC TRAVERSING HIGH SPEED INTERNET PROTOCOL (IP) COMMUNICATION LINKS
First Claim
1. A method for collecting data from network traffic traversing a high speed Internet protocol (IP) communication link, the method comprising:
- cascading a plurality of packet classification filters to form n stages of the packet classification filters connected to series, n being an integer of at least two; and
at the nth stage, receiving network traffic copied from a high speed IP communication link and performing first packet classification processing to identify an attribute of each packet of the network traffic, and, if the attribute is identifiable at the nth stage and is of interest for a first type of data collection processing, performing the first type of data collection processing for the packet, and if the attribute is not identifiable at the nth stage, forwarding the packet to at least one additional stage of the n stages for second packet classification processing that is different from the first packet classification processing to identify the attribute.
4 Assignments
0 Petitions
Accused Products
Abstract
Methods, systems, and computer readable media for collecting data from network traffic traversing a high speed Internet protocol communication links are disclosed. According to one method, a plurality of packet classification filters is cascaded to form n stages of the packet classification filters connected to series, where n is an integer of at least two. At the nth stage, network traffic copied from a high speed IP communication link is received and first packet classification processing is performed to identify an attribute of each packet of the network traffic. If the attribute is identifiable at the nth stage and is of interest for a first type of data collection processing, the first type of data collection processing is performed for the packet. If the attribute is not identifiable at the nth stage, the packet is forwarded to at least one additional stage of the n stages for second packet classification processing that is different from the first packet classification processing to identify the attribute.
58 Citations
28 Claims
-
1. A method for collecting data from network traffic traversing a high speed Internet protocol (IP) communication link, the method comprising:
-
cascading a plurality of packet classification filters to form n stages of the packet classification filters connected to series, n being an integer of at least two; and at the nth stage, receiving network traffic copied from a high speed IP communication link and performing first packet classification processing to identify an attribute of each packet of the network traffic, and, if the attribute is identifiable at the nth stage and is of interest for a first type of data collection processing, performing the first type of data collection processing for the packet, and if the attribute is not identifiable at the nth stage, forwarding the packet to at least one additional stage of the n stages for second packet classification processing that is different from the first packet classification processing to identify the attribute. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14)
-
-
15. A system for collecting data for network traffic traversing a high speed Internet protocol (IP) communication link, the system comprising:
-
at least one signaling link tap for copying network traffic from a high speed Internet protocol communication link; a plurality of cascaded packet classification filters forming n stages of the packet classification filters connected in series, n being an integer of at least two, at least some of the stages including packet data collection modules for performing different types of packet data collection operations; and wherein the packet classification filter at the nth stage receives network traffic copied form a high speed IP communication link and performs first packet classification processing to identify an attribute of each packet of the mixed protocol traffic, and, if the attribute is identifiable at the nth stage and is of interest for a first type of data collection processing, a first packet data collection module performs the first type of data collection processing for the packet, and, if the attribute is not identifiable at the nth stage, the packet classification filter at the nth stage forwards the packet to at least one additional stage of the n stages for second packet classification processing that is different from the first packet classification processing to identify the attribute. - View Dependent Claims (16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27)
-
-
28. A computer readable medium having stored thereon computer executable instructions that when executed by the processor of a computer perform steps comprising:
-
cascading a plurality of packet classification filters to form n stages of the packet classification filters connected in series, n being an integer of at least two; and at the nth stage, receiving network traffic copied from a high speed IP communication link and performing first packet classification processing to identify an attribute of each packet of the network traffic, and, if the attribute is identifiable at the nth stage and is if interest for a first type of data collection processing, performing the first type of data collection processing for the packet, and if the attribute is not identifiable at the nth stage, forwarding the packet to at least one additional stage of the n stages for second packet classification processing that is different from the first packet classification processing to identify the attribute.
-
Specification