System for sampling network packets by only storing the network packet that its error check code matches with the reference error check code
First Claim
1. A method in a computer network for random sampling of a plurality of network packets, the method comprising the steps of:
- providing a network switch for receiving the network packets;
providing a monitoring device, the monitoring device having a memory and a data storage unit;
providing a network interface to connect the network switch to the monitoring device, the monitoring device receiving network packets from the network switch;
selecting a reference error check code in the monitoring device;
comparing, in the monitoring device, the reference error check code with an error check code of each network packet received by the monitoring device; and
selecting a sample of network packets from the network packets received by the monitoring device by storing each received network packet in the monitoring device if the error check code of that network packet matches the reference error check code.
2 Assignments
0 Petitions
Accused Products
Abstract
In a computer network, a method of random sampling of network packets is provided including the steps of providing a network switch, providing a monitoring device, the monitoring having a memory and a data storage unit, providing a network interface to connect the network switch to the monitoring switch, selecting a reference error check code value in the monitoring device, receiving a first network packet from the network switch, comparing, in the network monitoring device, the reference error check code with an error check code of a first network packet, storing the first network packet in the monitoring device if the error check code value of the first network packet matches the reference error check code of the first network packet, and repeating the steps of receiving, comparing and storing for subsequent network packets. In such a method, the reference error check value may be selected from a first network packet, or from one of any of the plurality of network packets received, whether previous to or subsequent to, any particular received network packet.
-
Citations
20 Claims
-
1. A method in a computer network for random sampling of a plurality of network packets, the method comprising the steps of:
-
providing a network switch for receiving the network packets; providing a monitoring device, the monitoring device having a memory and a data storage unit; providing a network interface to connect the network switch to the monitoring device, the monitoring device receiving network packets from the network switch; selecting a reference error check code in the monitoring device; comparing, in the monitoring device, the reference error check code with an error check code of each network packet received by the monitoring device; and selecting a sample of network packets from the network packets received by the monitoring device by storing each received network packet in the monitoring device if the error check code of that network packet matches the reference error check code. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A method in a computer network for random sampling of a plurality of network packets, the method comprising the steps of:
-
providing a network switch for receiving the network packets; providing a monitoring device, the monitoring device having a memory and a data storage unit; providing a network interface to connect the network switch to the monitoring device; selecting a reference error check code in the monitoring device; receiving a first network packet, the first network packet lacking an error check code; calculating an error check code for the first network packet; comparing, in the monitoring device, the reference error check code with the calculated error check code of the first network packet; and storing the first network packet in the monitoring device if the reference error check code matches the calculated error check code of the first network packet. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17)
-
-
18. A method for randomly sampling network packets in a computer network, comprising the steps of:
-
selecting a reference value; comparing the reference value to an error check code associated with each network packet arriving at a monitoring device; and selecting a sample of network packets from the network packets that arrive at the monitoring device, each network packet being selected for the sample if the error check code associated with that network packet satisfies a predetermined relationship when compared to the reference value. - View Dependent Claims (19, 20)
-
Specification