TIME MACHINE DEVICE AND METHODS THEREOF

• US 20110211473A1
• Filed: 03/23/2011
• Published: 09/01/2011
• Est. Priority Date: 02/28/2010
• Status: Active Grant

• Current Assignee: Keysight Technologies Singapore Sales Pte Ltd (Keysight Technologies, Inc.)
• Original Assignee: Net Optics Incorporated (Keysight Technologies, Inc.)
• Inventors: Matityahu, Eldad, Shaw, Robert, Fung, Randy, Carpio, Dennis
• Granted Patent: US 8,755,293 B2
• Time in Patent Office: Days
• US Class Current: 370/252
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A time machine arrangement for performing health check on a network environment is provided. The arrangement includes a set of network ports that that is configured for receiving and outputting network data traffic. The arrangement also includes a monitoring port for receiving at least a portion of the data traffic flowing through the network. The arrangement further includes a set of processors configured at least for managing and analyzing the data traffic. The set of processors includes a scheduler component for directing the data traffic, a filtering component for applying a set of filters on the set data traffic, an encryption component for encrypting the data traffic, and a trigger component for defining a set of conditions for storing the data traffic. The arrangement yet also includes a storage memory component for storing a copy of at least the portion of the data traffic flowing through the network environment.

Claims

1. A time machine arrangement for performing health check on a network environment, comprising:

a set of network ports, said set of network ports including a set of input network ports for receiving data traffic and a set of output network ports for outputting said data traffic from said time machine arrangement;

a monitoring port, said monitoring port being configured to receive at least a portion of said data traffic flowing through said network environment;

a set of processors configured at least for managing and analyzing said data traffic, wherein said set of processors including

a scheduler component configured for directing said data traffic,

a filtering component configured for applying a set of filters on said set data traffic,

an encryption component configured for encrypting said data traffic, and

a trigger component configured for defining a set of conditions for storing said data traffic; and

a storage memory component configured for storing a copy of at least said portion of said data traffic flowing through said network environment.

2. The time machine arrangement of claim 1 wherein said scheduler component is configured to direct said data traffic based on a percentage rule, wherein each processor of said set of processors is configured to handle a percentage of said data traffic.

3. The time machine arrangement of claim 2 wherein said scheduler component is configured for redirecting a first set of data packets flowing to a first processor of said set of processors if said first processor is not available to perform processing.

4. The time machine arrangement of claim 1 wherein said trigger component is configurable, thereby enabling said set of conditions to be configured to a user'"'"'s specification.

5. The time machine arrangement of claim 1 wherein said filtering component being configured for performing one of ingress filtering, egress filtering, and deep packet inspection.

6. The time machine arrangement of claim 1 wherein said storage memory component includes

a set of memory devices configured for storing said data traffic, and

a memory controller configured at least for managing the flow of said data traffic to said set of memory devices.

7. The time machine arrangement of claim 6 wherein said memory controller is configured for redirecting said flow of said data traffic when a first memory device of said set of memory devices is inaccessible.

8. The time machine arrangement of claim 6 wherein a time stamp is added to each data packet of said data traffic before storing said each data packet in one of said set of memory devices.

9. The time machine arrangement of claim 1 further including a pre-processing module configured for performing preliminary analysis on said data traffic flowing through said network environment.

10. The time machine arrangement of claim 9 wherein said pre-processing module includes an aggregating component configured for combining plurality of data packets flowing through said set of network ports into a single data stream.

11. The time machine arrangement of claim 9 wherein said pre-processing module includes a filtering component configured for performing simple filtering functionalities on said data traffic flowing through said network environment.

12. The time machine arrangement of claim 9 wherein said pre-processing module is a field-programmable gate array.

13. The time machine arrangement of claim 9 wherein said pre-processing module is configured for performing packet ordering and time stamp.

14. The time machine arrangement of claim 1 further including a playback feature, said playback feature enabling at least part of said data traffic to be accessed at a later time period.

15. The time machine arrangement of claim 1 wherein said time machine arrangement is a high-speed network device configured for monitoring said data traffic flowing through said network, wherein said time machine arrangement includes

a primary power source for providing a first power to circuitry of said time machine arrangement, and

a sensor controller configured for at least one of

monitoring power flowing into said time machine arrangement,

determining when said power is below a predefined threshold,

activating a set of capacitor modules to provide temporary power to said time machine arrangement when said power is below said predefined threshold, and

switching a set of relays from an opened position to a closed position to establish an alternative communication link between said network ports.

16. A method for performing health check on a network environment, comprising:

receiving a set of data packets;

copying said set of data packets to generate a monitored set of data packets;

distributing said monitored set of data packets between a set of processors;

processing said monitored set of data packets, wherein said processing include at least one of

filtering said monitored set of data packets based on a set of filtered conditions,

encrypting said monitored set of data packets, and

applying a set of storage criteria to said monitored set of data packets, wherein

said set of storage criteria defined conditions for storing said monitored set of data packets; and

saving at least a portion of said monitored set of data packets.

17. The method of claim 16 further including performing preliminary assessment on said monitored set of data packets wherein said preliminary assessment including at least one of aggregation and preliminary filtering.

18. The method of claim 16 further including exporting at least a portion of said monitored set of data packets to an external location, wherein said external locations include at least one of a monitoring device and an external memory device.

19. The method of claim 16 wherein said saving of at least said portion of said monitored set of data packets is based on a set of trigger conditions.

20. The method of claim 16 further including playing back at least said portion of said monitored set of data packets for analysis.