METHOD AND APPARATUS FOR RATE LIMITING
First Claim
Patent Images
1. A rate limiting method for a pipelined network monitoring system having a plurality of stages, said method comprising the steps of:
- choosing a heuristic for discarding data at each of said plurality of stages, wherein choosing includes selecting the heuristic that is appropriate for each stage; and
applying a rate limiting process at said each stage, wherein each rate limiting process incorporates the appropriate heuristic.
8 Assignments
0 Petitions
Accused Products
Abstract
A method and apparatus for a network monitor internals mechanism, which serves to translate packet data into multiple concurrent streams of encoded network event data, to contribute to enterprise management, reporting, and global mechanisms for aggregating monitors at a centralized aggregation point, and to facilitate rate limiting techniques because such monitors are not in control (i.e. cannot back pressure flow) is provided.
-
Citations
20 Claims
-
1. A rate limiting method for a pipelined network monitoring system having a plurality of stages, said method comprising the steps of:
-
choosing a heuristic for discarding data at each of said plurality of stages, wherein choosing includes selecting the heuristic that is appropriate for each stage; and applying a rate limiting process at said each stage, wherein each rate limiting process incorporates the appropriate heuristic. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. An apparatus for rate limiting a pipelined network monitoring system having a plurality of stages, said apparatus comprising:
-
means for choosing a heuristic for discarding data at each of said plurality of stages, wherein the means for choosing includes means for selecting the heuristic that is appropriate for each stage; and means for applying a rate limiting process at said each stage, wherein each rate limiting process incorporates the appropriate heuristic. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. An apparatus for rate limiting to control amounts of data in a passive network monitoring pipelined system, said apparatus comprising:
-
a packet filter module having a first rate limiting mechanism for discarding particular incoming packets and passing on non-discarded packets; a monitor receiving said non-discarded packets from said packet filter module, said monitor processing said non-discarded packets and outputting corresponding events, said monitor having a second rate limiting mechanism for discarding particular incoming events and passing on non-discarded events; a logger module having a third rate limiting mechanism for discarding unwanted data and passing on said non-discard events, said logger module within a policy monitor module receiving said outputted corresponding events from said monitor; and a reporting module, having a fourth rate limiting mechanism wherein said non-discarded events are received from said logger module and combined with like events in a “
roll-up”
over a time interval or based on the hierarchy of objects to meet storage requirements;wherein said second rate limiting mechanism discards particular packets on input when input packet rate exceeds a specified limit. - View Dependent Claims (16, 17)
-
-
18. A method for rate limiting to control amounts of data in a passive network monitoring pipelined system, said method comprising:
-
providing a packet filter module having a first rate limiting mechanism for discarding particular incoming packets and passing on non-discarded packets; providing a monitor receiving said non-discarded packets from said packet filter module, said monitor processing said non-discarded packets and outputting corresponding events, said monitor having a second rate limiting mechanism for discarding particular incoming events and passing on non-discarded events; providing a logger module having a third rate limiting mechanism for discarding unwanted data and passing on said non-discard events, said logger module within a policy monitor module receiving said outputted corresponding events from said monitor; and providing a rate limiting module, having a fourth rate limiting mechanism wherein said non-discarded events are received from said logger module and abstracted over a predetermined time interval to meet storage requirements; wherein said second rate limiting mechanism discards particular packets on input when input packet rate exceeds a specified limit. - View Dependent Claims (19, 20)
-
Specification