FLOW DE-DUPLICATION FOR NETWORK MONITORING
First Claim
1. A method, comprising:
- receiving flow data associated with a traffic flow, the flow data tagged with a data source identifier identifying a data source exporting the flow data, a source site identifier identifying a site associated with a source device of the traffic flow, and a destination site identifier identifying a destination site associated with a destination device of the traffic flow;
determining at least one authoritative data source for each site and metric type using at least one selection rule;
receiving a query for de-duplicated flow data; and
generating de-duplicated flow data based on the data source identifier, source site identifier, and destination site identifier and particular flow data associated with the determined at least one authoritative data source.
1 Assignment
0 Petitions
Accused Products
Abstract
A method is provided in one example and includes receiving flow data associated with a traffic flow. The flow data can be tagged with a data source identifier identifying a data source exporting the flow data, a source site identifier identifying a site associated with a source device of the traffic flow, and a destination site identifier identifying a destination site associated with a destination device of the traffic flow. The method further includes determining at least one authoritative data source for each site and metric type using at least one selection rule. The method further includes receiving a query for de-duplicated flow data, and generating de-duplicated flow data based on the data source identifier, source site identifier, and destination site identifier and particular flow data associated with the determined at least one authoritative data source.
180 Citations
30 Claims
-
1. A method, comprising:
-
receiving flow data associated with a traffic flow, the flow data tagged with a data source identifier identifying a data source exporting the flow data, a source site identifier identifying a site associated with a source device of the traffic flow, and a destination site identifier identifying a destination site associated with a destination device of the traffic flow; determining at least one authoritative data source for each site and metric type using at least one selection rule; receiving a query for de-duplicated flow data; and generating de-duplicated flow data based on the data source identifier, source site identifier, and destination site identifier and particular flow data associated with the determined at least one authoritative data source. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. Logic encoded in one or more non-transitory tangible media that includes code for execution and when executed by a processor operable to perform operations, comprising:
-
receiving flow data associated with a traffic flow, the flow data tagged with a data source identifier identifying a data source exporting the flow data, a source site identifier identifying a site associated with a source device of the traffic flow, and a destination site identifier identifying a destination site associated with a destination device of the traffic flow; determining at least one authoritative data source for each site and metric type using at least one selection rule; receiving a query for de-duplicated flow data; and generating de-duplicated flow data based on the data source identifier, source site identifier, and destination site identifier and particular flow data associated with the determined at least one authoritative data source. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. An apparatus, comprising:
a memory element configured to store data, a processor operable to execute instructions associated with the data, and an authoritative data source detection module, the apparatus being configured to; receive flow data associated with a traffic flow, the flow data tagged with a data source identifier identifying a data source exporting the flow data, a source site identifier identifying a site associated with a source device of the traffic flow, and a destination site identifier identifying a destination site associated with a destination device of the traffic flow; determine at least one authoritative data source for each site and metric type using at least one selection rule; receive a query for de-duplicated flow data; and generate de-duplicated flow data based on the data source identifier, source site identifier, and destination site identifier and particular flow data associated with the determined at least one authoritative data source. - View Dependent Claims (22, 23, 24, 25, 26, 27, 28, 29, 30)
Specification