Indirect measurement methodology to infer routing changes using statistics of flow arrival processes
First Claim
Patent Images
1. A method for detecting routing changes in a packet-switched network, the method comprising the steps of:
- in a packet flow analyzer connected to a router, monitoring packet flows traversing the router, wherein all packets of a packet flow are destined for the same destination;
in a computer connected for receiving data generated by the monitoring of the packet flows, statistically determining that a frequency of packet flows traversing a particular interface of the router has changed; and
based on a determination that the frequency of packet flows traversing the particular interface of the router has changed, reporting a routing change in the packet-switched network.
1 Assignment
0 Petitions
Accused Products
Abstract
Statistical methods are used to observe packet flow arrival processes and to infer routing changes from those observations. Packet flow arrivals are monitored using NetFlow or another packet flow monitoring arrangement. Packet flow arrivals are quantified by counting arrivals per unit time, or by measuring an inter-arrival time between flows. When a change in packet flow arrivals is determined to be statistically significant, a change in network routing protocol is reported.
-
Citations
20 Claims
-
1. A method for detecting routing changes in a packet-switched network, the method comprising the steps of:
-
in a packet flow analyzer connected to a router, monitoring packet flows traversing the router, wherein all packets of a packet flow are destined for the same destination; in a computer connected for receiving data generated by the monitoring of the packet flows, statistically determining that a frequency of packet flows traversing a particular interface of the router has changed; and based on a determination that the frequency of packet flows traversing the particular interface of the router has changed, reporting a routing change in the packet-switched network. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A computer-usable medium having computer readable instructions stored thereon for execution by a processor to perform a method for detecting routing changes in a packet-switched network, the method comprising the steps of:
-
in a packet flow analyzer connected to a router, monitoring packet flows traversing the router, wherein all packets of a packet flow are destined for the same destination; in a computer connected for receiving data generated by the monitoring of the packet flows, statistically determining that a frequency of packet flows traversing a particular interface of the router has changed; and based on a determination that the frequency of packet flows traversing the particular interface of the router has changed, reporting a routing change in the packet-switched network. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
Specification