Method and system for simplified network wide traffic and/or flow monitoring in a data network

• US 7,804,832 B2
• Filed: 02/13/2006
• Issued: 09/28/2010
• Est. Priority Date: 02/13/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Yadav, Navindra, Murthy, Shree, Andrews, Robert, Pandian, Gnanaprakasam
• Primary Examiner(s): Sheikh; Ayaz R
• Assistant Examiner(s): Ghafoerkhan; Faiyazkhan
• Application Number:
  US11/353,319
• Publication Number:
  US 20070189189A1
• Time in Patent Office: 1,688 Days
• Field of Search: 370241-258
• US Class Current: 370/390
• CPC Class Codes: H04L 12/4675 Dynamic sharing of VLAN information amongst network nodes configuration of the network or of network elements H04L41/08
• CPC Class Codes: H04L 12/4695 VTP [VLAN trunking protocol]
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events

Abstract

Method and system for providing dynamic network data traffic monitoring including monitoring a data network, detecting a change in the data network, initiating a span session based on the detected change in the data network, and dynamically modifying network configuration based on the detected change in the data network is disclosed.

Claims

1. A method of providing dynamic network data traffic monitoring, comprising:

initiating, by a controller unit, a Switched Port Analyzer (SPAN) session in a data network, the SPAN session coupling a source to be monitored to a destination that performs monitoring and enabling the source to send a copy of traffic to the destination;

monitoring the data network at the controller unit, where the monitoring of the data network is separate and apart from the SPAN session;

detecting a change in the data network that affects the SPAN session; and

dynamically modifying network configuration including the SPAN session automatically by the controller unit, based on the detected change in the data network, to ensure that the copy of traffic is routed within the data network to the destination.

2. The method of claim 1 wherein step of initiating a SPAN session includes the steps of:

allocating a virtual LAN (VLAN) for the SPAN session; and

retrieving a SPAN source information and a SPAN destination information.

3. The method of claim 2 further including the step of storing the SPAN source information and the SPAN destination information.

4. The method of claim 2 wherein the step of retrieving the SPAN source information and the SPAN destination information includes the step of receiving the SPAN source information and the SPAN destination information associated with the change in the data network from an administrator.

5. The method of claim 1 wherein the step of dynamically modifying the network configuration includes the step of performing a VLAN trunking protocol (VTP) configuration associated with the SPAN session.

6. The method of claim 1 wherein the step of dynamically modifying the network configuration includes the steps of:

determining a connection of the source and the destination; and

enabling one of a local SPAN session, a remote SPAN session, or a SPAN tunneling for the source and destination.

7. The method of claim 6 wherein the step of enabling the local SPAN session includes the steps of:

determining a network device connected to both the source and the destination in the network; and

enabling a local SPAN session on the network device.

8. The method of claim 6 wherein the step of enabling the remote SPAN session includes the step determining a network device connected to the source and the destination by a layer 2 Ethernet switched network.

9. The method of claim 6 wherein the step of enabling the SPAN tunneling includes the steps of:

determining a first router connected to the source and a second router connected to the destination in the data network; and

determining the first router and the second router are directly connected to two layer 2 Ethernet switched networks in the data network.

10. A method of providing dynamic network data traffic monitoring, comprising:

monitoring a data network at a controller unit, where the monitoring is separate and apart from a Switched Port Analyzer (SPAN) session;

detecting a change in a port of the data network;

initiating a SPAN session associated with the change in the port, the SPAN session coupling a source to be monitored and a destination that performs monitoring and enabling the source to send a copy of traffic to the destination in the SPAN session;

retrieving a SPAN source information and a SPAN destination information;

allocating a virtual LAN (VLAN) for the SPAN session such that the allocated VLAN carries the copy of the traffic from the SPAN session; and

dynamically modifying network configuration automatically by the controller unit to support the SPAN session based on the detected change in the port of the data network.

11. The method of claim 10 further including the step of storing the SPAN source information and the SPAN destination information.

12. The method of claim 10 wherein the step of dynamically modifying the network configuration includes the step of performing a VLAN trunking protocol (VTP) configuration associated with the SPAN session.

13. The method of claim 10 wherein the step of dynamically modifying the network configuration includes the steps of:

determining a connection of the source and the destination; and

enabling one of a local SPAN session, a remote SPAN session, or a SPAN tunneling for the SPAN source and destination.

14. The method of claim 13 wherein the step of enabling the local SPAN session includes the steps of:

determining a network device connected to both the source and the destination in the network; and

enabling a local SPAN session on the network device.

15. The method of claim 13 wherein the step of enabling the remote SPAN session includes the step determining a network device connected to the source and the destination by a layer 2 Ethernet switched network.

16. The method of claim 13 wherein the step of enabling the SPAN tunneling includes the steps of:

determining a first router connected to the source and a second router connected to the destination in the data network; and

determining the first router and the second router are directly connected to two layer 2 Ethernet switched networks in the data network.

17. A system for monitoring and dynamically configuring a data network, comprising:

a data network;

a client terminal coupled to the data network;

a network device coupled to the data network; and

a controller unit coupled to the data network, the controller unit configured to;

initiate a Switched Port Analyzer (SPAN) session, the SPAN session coupling the client terminal to the network device to enable the client terminal to send a copy of client terminal data traffic to the network device,

monitor the client terminal data traffic separate and apart from the SPAN session,

detect a change in the client terminal data traffic, and

dynamically modify network configuration including the SPAN session automatically based on the detected change, to ensure that the copy of client terminal data traffic is routed within the data network to the network device.

18. The system of claim 17 wherein, the controller unit configured to initiate the SPAN session is further configured to allocate a virtual LAN (VLAN) for the SPAN session, and to retrieve a SPAN source information and a SPAN destination information associated with the detected change of the client terminal data traffic.

19. The system of claim 18 wherein the controller unit is further configured to store the SPAN source information and the SPAN destination information.

20. The system of claim 17 wherein the controller unit is configured to perform a VLAN trunking protocol (VTP) configuration associated with the SPAN session to dynamically modify the network configuration based on the detected change.

21. A system for providing dynamic network data traffic monitoring, comprising:

means for monitoring a data network that is separate and apart from a Switched Port Analyzer (SPAN) session;

means for detecting a change in the data network;

means for initiating a SPAN session, the SPAN session coupling a source to be monitored to a destination that performs monitoring and enabling the source to send a copy of traffic to the destination; and

means for dynamically modifying network configuration including the SPAN session automatically, based on the detected change in the data network, to ensure that the copy of traffic is routed within the data network to the destination.

22. A method comprising:

retrieving, by a controller unit of a data network, a handle associated with a source to be monitored and a handle associated with a destination that performs monitoring;

initiating, by the controller unit, a Switched Port Analyzer (SPAN) session, the SPAN session coupling the source to the destination and enabling the source to send a copy of traffic to the destination;

monitoring the data network at the controller unit, where the monitoring is separate and apart from the SPAN session;

detecting a change in the data network that affects the SPAN session;

dynamically modifying network configuration including the SPAN session automatically by the controller unit, based on the detected change in the data network, to ensure that the copy of traffic is routed within the data network to the destination.

23. The method of claim 22 wherein the handle associated with the source and the handle associated with the destination each include a port, a Media Access Control (MAC) address or a user name.

24. A method comprising:

initiating, by a controller unit, a Switched Port Analyzer (SPAN) session in a data network having a topology, the SPAN session coupling a source to be monitored to a destination that performs monitoring and enabling the source to send a copy of traffic to the destination;

monitoring the topology of the data network at the controller unit where the monitoring is separate and apart from the SPAN session;

in response to the monitoring, detecting a change in the topology of the data network that affects the SPAN session; and

dynamically modifying network configuration including the SPAN session automatically by the controller unit, based on the detected change in the data network, to account for the detected change in the topology of the data network.

25. A method comprising:

monitoring a topology of a data network at a controller unit, where the monitoring is separate and apart from a Switched Port Analyzer (SPAN) session;

detecting, by the controller unit, a change in the topology of the data network;

initiating a new SPAN session in the data network, the new SPAN session coupling a source to be monitored to a destination that performs monitoring and enabling the source to send a copy of traffic to the destination; and

dynamically modifying network configuration to support the new SPAN session automatically by the controller unit, based on the detected change in the data network.