AUTO-CONFIGURATION OF NETWORK CAPTURED TRAFFIC DEVICE

• US 20110082921A1
• Filed: 10/05/2010
• Published: 04/07/2011
• Est. Priority Date: 10/05/2009
• Status: Active Grant

• Current Assignee: NetScout Systems Incorporated
• Original Assignee: VSS Monitoring Incorporated (NetScout Systems Incorporated)
• Inventors: Hinshaw, Jan Allen, Kucharczyk, David, Breslin, Terence M.
• Granted Patent: US 8,903,964 B2
• Time in Patent Office: Days
• US Class Current: 709/221
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/122 of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV]
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00

Abstract

Methods, systems, computer-readable media, and devices for automatically configuring a network captured traffic distribution device communicatively coupled to a stacked topology of network captured traffic distribution devices are described. The automatic configuration may include an exchange of configuration information between a first and second network captured traffic distribution device included in a stacked topology. The configuration information of a network captured traffic distribution device may also be automatically updated when, for example, a change is detected in the stacked topology or on a periodic or as needed basis.

Claims

1. A method comprising:

communicatively coupling, via a communication link, a first network captured traffic distribution device to a stacked topology of network captured traffic distribution devices, wherein the stacked topology includes a plurality of network captured traffic distribution devices communicatively coupled to one another via communication links and each network captured traffic distribution device is associated with configuration information;

recognizing, by the first network captured traffic distribution device, a second network captured traffic distribution device included in the stacked topology;

automatically exchanging, between the first network captured traffic distribution device and the second network captured traffic distribution device, a portion of the configuration information associated with the respective first and second network captured traffic distribution devices;

automatically updating, by the first network captured traffic distribution device, the configuration information associated with the first network captured traffic distribution device responsively to the exchanged configuration information; and

executing, by the first network captured traffic distribution device, one or more operations according to the exchanged configuration information.

2. The method of claim 1, wherein the communicative coupling of the first network captured traffic distribution device to the stacked topology includes at least one of physically coupling the first network captured traffic distribution device to the second network captured traffic distribution device via a physical communication link and wirelessly coupling the first network captured traffic distribution device to the second network captured traffic distribution device via a wireless communication link.

3. The method of claim 1, wherein the recognizing comprises:

transmitting, by the first network captured traffic distribution device, a message to the second network captured traffic distribution device; and

receiving, by the first network captured traffic distribution device, an acknowledgment message from the second network captured traffic distribution device.

4. The method of claim 1, wherein the automatic exchange of configuration information comprises:

transmitting, by the first network captured traffic distribution device, a request to the second network captured traffic distribution device for a portion of the configuration information associated with the second network captured traffic distribution device;

receiving, by the first network captured traffic distribution device, the requested configuration information from the second network captured traffic distribution device responsively to the transmitted request;

transmitting, by the first network captured traffic distribution device, a portion of the configuration information associated with the first network captured traffic distribution device to the second network captured traffic distribution device; and

receiving, by the second network captured traffic distribution device, the configuration information transmitted by the first network captured traffic distribution device.

5. The method of claim 1, wherein the executed operations include at least one of determining a target destination for received captured network traffic, pre-calculating at least one route for the transmission of received captured network traffic from the network captured traffic distribution device through the stacked topology to a target destination, determining an optimum route for the transmission of captured network traffic from the network captured traffic distribution device through the stacked topology to a target destination, evaluating a current operating condition of the stacked topology, grooming received captured network traffic, load balancing a distribution of received captured network traffic through the stacked topology, removing unwanted information from one or more data packets included in received captured network traffic, truncating one or more data packets included in received captured network traffic, load spreading a distribution of received captured network traffic through the stacked topology, filtering received captured network traffic transmitted through the stacked topology according to a criterion, aggregating received captured network traffic transmitted through the stacked topology, altering the content of received captured network traffic, truncating one or more data packets included in received captured network traffic, adding information to one or more data packets included in received captured network traffic, and subtracting information from one or more data packets included in received captured network traffic.

6. The method of claim 1, wherein the exchange of configuration information between the first network captured traffic distribution device and the second network captured traffic distribution device is initiated by a user.

7. The method of claim 1, further comprising:

detecting, by the first network captured traffic distribution device, a change in the status of at least one of the stacked topology, a network captured traffic distribution devices included in the stacked topology, a network communicatively coupled to the stacked topology, and a network device communicatively coupled to the stacked topology; and

automatically updating, by the first network captured traffic distribution device, a portion of the configuration information exchanged with the second network captured traffic distribution device responsively to the detected change.

8. The method of claim 1, further comprising:

updating, by at least one of the first network captured traffic distribution device and the second network captured traffic distribution device, the exchanged configuration information on at least one of a periodic basis, an as needed basis, a random basis, and a pseudo-random basis.

9. A system comprising:

a stacked topology of a plurality of network captured traffic distribution devices, the stacked topology comprising;

a first network captured traffic distribution device communicatively coupled to a second network captured traffic distribution device via a communication link and configured to recognize a second network captured traffic distribution device included in the stacked topology, automatically exchange configuration information with the second network captured traffic distribution device, automatically update configuration information responsively to the exchanged configuration information, and execute one or more operations according to the exchanged configuration information;

the second network captured traffic distribution device communicatively coupled to the first network captured traffic distribution device via the communication link, wherein the second network captured traffic distribution device is configured to exchange configuration information with the first network captured traffic distribution device; and

the communication link, wherein the communication link is configured to facilitate communication between the first and second network captured traffic distribution device.

10. The system of claim 9, wherein the stacked topology further comprises a plurality of additional network captured traffic distribution devices, wherein the first and second network captured traffic distribution devices are enabled to exchange configuration information with the additional network captured traffic distribution devices included in the stacked topology.

11. The system of claim 9, wherein the stacked topology is arranged as at least one of a ring topology, a mesh topology, a star topology, a topology of single links, a topology of multiple links, a topology including one or more redundant links, and some combination thereof.

12. The system of claim 9, wherein the first and second network captured traffic distribution device include an ingress port for receiving captured network traffic and an egress port for transmitting the captured traffic externally from the first and second network captured traffic distribution devices, respectively.

13. The system of claim 9, wherein the exchange of configuration information between the first network captured traffic distribution device and the second network captured traffic distribution device occurs during at least one of an initial set up of the stacked topology, an initial communicative coupling of the first network captured traffic distribution device and the second network captured traffic distribution device, periodically, randomly, pseudo-randomly, as needed, and upon receiving an instruction to exchange configuration information.

14. A network captured traffic distribution device, comprising:

a plurality of bi-directional ports configured to perform at least one of receiving captured network traffic and echoing received captured network traffic to one or more of the plurality of bi-directional ports;

an egress port configured to transmit received captured network traffic to an external device;

a stacking port configured to enable, via a communication link, the stacking of the network captured traffic distribution device with at least one additional network captured traffic distribution device in a stacked topology wherein the stacking includes recognizing an additional network captured traffic distribution device included in the stacked topology and automatically exchanging, between the network captured traffic distribution device and the additional network captured traffic distribution device, a portion of the configuration information associated with the respective network captured traffic distribution device and the additional network captured traffic distribution device; and

a processor configured to manage distribution of received captured network traffic through the network captured traffic distribution device, automatically update configuration information responsively to the exchanged configuration information, and execute one or more operations according to the exchanged configuration information.

15. The network captured traffic distribution device of claim 14, further comprising:

a data storage configured to store at least one of an Internet protocol (IP) address associated with the network captured traffic distribution device, configuration information for the network captured traffic distribution device, and data regarding at least one of received captured network traffic and the management of received captured network traffic.

16. The network captured traffic distribution device of claim 14, wherein the stacking port is further configured to enable the network captured traffic distribution device to be stacked in at least one of a ring topology, a mesh topology, a star topology, a topology of single links, a topology of multiple links, a topology including one or more redundant links, and some combination thereof.

17. The network captured traffic distribution device of claim 14, wherein at least one of the bi-directional ports, the egress port, and the stacking port is compatible with at least one of a 10/100 Ethernet cable, a 1 gigabit Ethernet cable, a 10 gigabit Ethernet cable, a copper cable, and a fiber cable.

18. The network captured traffic distribution device of claim 14, wherein the processor is further configured to enable peer-to-peer management between the network captured traffic distribution device and the additional stacked network captured traffic distribution device.

19. The network captured traffic distribution device of claim 14, wherein the configuration information includes instructions regarding at least one of determining a target destination for received captured network traffic, pre-calculating at least one route for the transmission of received captured network traffic from the network captured traffic distribution device through the stacked topology to a target destination, determining an optimum route for the transmission of received captured network traffic from the network captured traffic distribution device through the stacked topology to a target destination, evaluating a current operating condition of the stacked topology, grooming received captured network traffic, load balancing a distribution of received captured network traffic through the stacked topology, removing unwanted information from one or more data packets included in received captured network traffic, truncating one or more data packets included in received captured network traffic, load spreading a distribution of received captured network traffic through the stacked topology, filtering received captured network traffic transmitted through the stacked topology according to a criterion, aggregating received captured network traffic transmitted through the stacked topology, altering the content of received captured network traffic, truncating one or more data packets included in received captured network traffic, adding information to one or more data packets included in received captured network traffic, and subtracting information from one or more data packets included in received captured network traffic.

20. The network captured traffic distribution device of claim 14, wherein the stacking port is a monitor port.