Auto-configuration of network captured traffic device

• US 8,903,964 B2
• Filed: 10/05/2010
• Issued: 12/02/2014
• Est. Priority Date: 10/05/2009
• Status: Active Grant

• Current Assignee: NetScout Systems Incorporated
• Original Assignee: VSS Monitoring Incorporated (NetScout Systems Incorporated)
• Inventors: Breslin, Terence M., Kucharczyk, David, Hinshaw, Jan Allen
• Primary Examiner(s): Le, Chau
• Assistant Examiner(s): ZHAO, DON GORDON
• Application Number:
  US12/898,578
• Publication Number:
  US 20110082921A1
• Time in Patent Office: 1,519 Days
• Field of Search: 370/241, 370351-389, 709221-351
• US Class Current: 709/221
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/122 of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV]
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00

Abstract

Methods, systems, computer-readable media, and devices for automatically configuring a network captured traffic distribution device communicatively coupled to a stacked topology of network captured traffic distribution devices are described. The automatic configuration may include an exchange of configuration information between a first and second network captured traffic distribution device included in a stacked topology. The configuration information of a network captured traffic distribution device may also be automatically updated when, for example, a change is detected in the stacked topology or on a periodic or as needed basis.

Claims

1. A method comprising:

communicatively coupling, via a communication link, a first network captured traffic distribution device to a stacked topology of network captured traffic distribution devices, wherein the stacked topology includes a plurality of network captured traffic distribution devices communicatively coupled to one another via communication links and each network captured traffic distribution device is associated with configuration information;

recognizing, by the first network captured traffic distribution device, a second network captured traffic distribution device included in the stacked topology;

automatically exchanging, between the first network captured traffic distribution device and the second network captured traffic distribution device, a portion of the configuration information associated with the respective first and second network captured traffic distribution devices, the portion of configuration data includes operational statistics that indicate a number of respective available ingress and egress ports, a link speed for each available ingress and egress port, and a respective congestion level for each of the first and second network captured traffic distribution devices;

determining, by the first network captured traffic distribution device, an optimum route to transmit captured data packets from the first network captured traffic distribution device through the stacked topology to a target destination based on the operational statistics for each of the first and second network captured traffic distribution devices;

automatically updating, by the first network captured traffic distribution device, the configuration information associated with the first network captured traffic distribution device responsively to the exchanged configuration information; and

executing, by a hardware processor of the first network captured traffic distribution device, one or more operations according to the exchanged configuration information that includes evaluating current operating conditions of the stacked topology and the plurality of network captured traffic distribution devices communicatively coupled to the stacked topology and transmitting the captured data packets toward the target destination via the optimum route.

2. The method of claim 1, wherein the communicative coupling of the first network captured traffic distribution device to the stacked topology includes at least one of physically coupling the first network captured traffic distribution device to the second network captured traffic distribution device via a physical communication link and wirelessly coupling the first network captured traffic distribution device to the second network captured traffic distribution device via a wireless communication link.

3. The method of claim 1, wherein the recognizing comprises:

transmitting, by the first network captured traffic distribution device, a message to the second network captured traffic distribution device; and

receiving, by the first network captured traffic distribution device, an acknowledgment message from the second network captured traffic distribution device.

4. The method of claim 1, wherein the automatic exchange of configuration information comprises:

transmitting, by the first network captured traffic distribution device, a request to the second network captured traffic distribution device for a portion of the configuration information associated with the second network captured traffic distribution device;

receiving, by the first network captured traffic distribution device, the requested configuration information from the second network captured traffic distribution device responsively to the transmitted request;

transmitting, by the first network captured traffic distribution device, a portion of the configuration information associated with the first network captured traffic distribution device to the second network captured traffic distribution device; and

receiving, by the second network captured traffic distribution device, the configuration information transmitted by the first network captured traffic distribution device.

5. The method of claim 1, wherein the executed operations include at least one of determining a target destination for received captured network traffic, pre-calculating at least one route for the transmission of received captured network traffic from the network captured traffic distribution device through the stacked topology to a target destination, grooming received captured network traffic, load balancing a distribution of received captured network traffic through the stacked topology, removing unwanted information from one or more data packets included in received captured network traffic, truncating one or more data packets included in received captured network traffic, load spreading a distribution of received captured network traffic through the stacked topology, filtering received captured network traffic transmitted through the stacked topology according to a criterion, aggregating received captured network traffic transmitted through the stacked topology, altering the content of received captured network traffic, truncating one or more data packets included in received captured network traffic, adding information to one or more data packets included in received captured network traffic, and subtracting information from one or more data packets included in received captured network traffic.

6. The method of claim 1, wherein the exchange of configuration information between the first network captured traffic distribution device and the second network captured traffic distribution device is initiated by a user.

7. The method of claim 1, further comprising:

detecting, by the first network captured traffic distribution device, a change in the status of at least one of the stacked topology, a network captured traffic distribution devices included in the stacked topology, a network communicatively coupled to the stacked topology, and a network device communicatively coupled to the stacked topology; and

automatically updating, by the first network captured traffic distribution device, a portion of the configuration information exchanged with the second network captured traffic distribution device responsively to the detected change.

8. The method of claim 1, further comprising:

updating, by at least one of the first network captured traffic distribution device and the second network captured traffic distribution device, the exchanged configuration information on at least one of a periodic basis, an as needed basis, a random basis, and a pseudo-random basis.

9. A system comprising:

a stacked topology of a plurality of network captured traffic distribution devices, the stacked topology comprising;

a first network captured traffic distribution device communicatively coupled to a second network captured traffic distribution device via a communication link, the first network captured traffic distribution device includes one or more hardware processors configured to;

recognize a second network captured traffic distribution device included in the stacked topology;

automatically exchange configuration information with the second network captured traffic distribution device, the configuration information includes, for each of the first network captured traffic distribution device and second network captured traffic distribution device, operational statistics that indicate a number of respective available ingress and egress ports, a link speed for each respective available ingress and egress port, and a respective congestion level;

determine an optimum route to transmit captured data packets from the first network captured traffic distribution device through the stacked topology to a target destination based on the operational statistics for each of the first network captured traffic distribution device and the second network captured traffic distribution device;

automatically update configuration information responsively to the exchanged configuration information; and

execute one or more operations according to the exchanged configuration information to cause the first network captured traffic distribution device to evaluate current operating conditions of the stacked topology and the plurality of network captured traffic distribution devices communicatively coupled to the stacked topology, and

transmit the captured data packets toward the target destination via the optimum route; and

wherein, the second network captured traffic distribution device is communicatively coupled to the first network captured traffic distribution device via the communication link, wherein the second network captured traffic distribution device includes one or more hardware processors configured to exchange the configuration information with the first network captured traffic distribution device.

10. The system of claim 9, wherein the stacked topology further comprises a plurality of additional network captured traffic distribution devices, wherein the first and second network captured traffic distribution devices are enabled to exchange configuration information with the additional network captured traffic distribution devices included in the stacked topology.

11. The system of claim 9, wherein the stacked topology is arranged as at least one of a ring topology, a mesh topology, a star topology, a topology of single links, a topology of multiple links, a topology including one or more redundant links, and some combination thereof.

12. The system of claim 9, wherein the first and second network captured traffic distribution device include an ingress port for receiving captured network traffic and an egress port for transmitting the captured traffic externally from the first and second network captured traffic distribution devices, respectively.

13. The system of claim 9, wherein the exchange of configuration information between the first network captured traffic distribution device and the second network captured traffic distribution device occurs during at least one of an initial set up of the stacked topology, an initial communicative coupling of the first network captured traffic distribution device and the second network captured traffic distribution device, periodically, randomly, pseudo-randomly, as needed, and upon receiving an instruction to exchange configuration information.

14. A network captured traffic distribution device, comprising:

a plurality of bi-directional ports configured to perform at least one of receiving captured network traffic and echoing received captured network traffic to one or more of the plurality of bi-directional ports;

an egress port configured to transmit received captured network traffic to an external device;

a stacking port configured to enable, via a communication link, the stacking of the network captured traffic distribution device with at least one additional network captured traffic distribution device in a stacked topology wherein the stacking includes recognizing an additional network captured traffic distribution device included in the stacked topology and automatically exchanging, between the network captured traffic distribution device and the additional network captured traffic distribution device, a portion of the configuration information associated with the respective network captured traffic distribution device and the additional network captured traffic distribution device, the configuration information includes operational statistics that indicate a number of available ingress and egress ports, a link speed for each available ingress and egress port, and a congestion level corresponding to each of the network captured traffic distribution device and the additional network captured traffic distribution device; and

a hardware processor configured to;

manage distribution of received captured network traffic through the network captured traffic distribution device,

determine an optimum route to transmit captured traffic from the network captured traffic distribution device through the stacked topology toward a target destination based on the operational statistics for each of the network captured traffic distribution device and the additional network captured traffic distribution device;

automatically update configuration information responsively to the exchanged configuration information; and

execute one or more operations according to the exchanged configuration information, the operations, when executed, further cause the hardware processor to;

evaluate current operating conditions of the stacked topology and the plurality of network captured traffic distribution devices communicatively coupled to the stacked topology; and

transmit the captured packets from the network captured traffic distribution device toward the target destination via the optimum route.

15. The network captured traffic distribution device of claim 14, further comprising:

a data storage configured to store at least one of an Internet protocol (IP) address associated with the network captured traffic distribution device, configuration information for the network captured traffic distribution device, and data regarding at least one of received captured network traffic and the management of received captured network traffic.

16. The network captured traffic distribution device of claim 14, wherein the stacking port is further configured to enable the network captured traffic distribution device to be stacked in at least one of a ring topology, a mesh topology, a star topology, a topology of single links, a topology of multiple links, a topology including one or more redundant links, and some combination thereof.

17. The network captured traffic distribution device of claim 14, wherein at least one of the bi-directional ports, the egress port, and the stacking port is compatible with at least one of a 10/100 Ethernet cable, a 1 gigabit Ethernet cable, a 10 gigabit Ethernet cable, a copper cable, and a fiber cable.

18. The network captured traffic distribution device of claim 14, wherein the hardware processor is further configured to enable peer-to-peer management between the network captured traffic distribution device and the additional stacked network captured traffic distribution device.

19. The network captured traffic distribution device of claim 14, wherein the configuration information includes instructions regarding at least one of determining a target destination for received captured network traffic, pre-calculating at least one route for the transmission of received captured network traffic from the network captured traffic distribution device through the stacked topology to a target destination, grooming received captured network traffic, load balancing a distribution of received captured network traffic through the stacked topology, removing unwanted information from one or more data packets included in received captured network traffic, truncating one or more data packets included in received captured network traffic, load spreading a distribution of received captured network traffic through the stacked topology, filtering received captured network traffic transmitted through the stacked topology according to a criterion, aggregating received captured network traffic transmitted through the stacked topology, altering the content of received captured network traffic, truncating one or more data packets included in received captured network traffic, adding information to one or more data packets included in received captured network traffic, and subtracting information from one or more data packets included in received captured network traffic.

20. The network captured traffic distribution device of claim 14, wherein the stacking port is a monitor port.