Real-time adaptive processing of network data packets for analysis
First Claim
1. A method for processing network data for analysis, comprising:
- determining, by a network monitoring device coupled to a computer network, a session associated with data packets received by a network monitoring device at a location in a network;
generating a common header summarizing information in headers of a plurality of data packets in the session by the network monitoring device;
generating a unit of payload metadata summarizing information in payloads of the plurality of the data packets in the session by the network monitoring device; and
generating, for each session, a session record for storing the session record, the session record including the common header and the payload metadata by the network monitoring device.
2 Assignments
0 Petitions
Accused Products
Abstract
A network monitoring system that summarizes a plurality of data packets of a session into a compact session record for storage and processing. Each session record may be produced in real-time and made available during the session and/or after the termination of the session. Depending on protocols, a network monitoring system extracts different sets of information, removes redundant information from the plurality of data packets, and adds performance information to produce the session record. The network monitoring system may retrieve and process a single session record or multiple session records for the same or different protocols to determine cause of events, resolve issues in a network or evaluate network performance or conditions. The session record enables analysis in the units of session instead of individual packets. Hence, the network monitoring system can analyze events, issues or performance of the network more efficiently and effectively.
8 Citations
19 Claims
-
1. A method for processing network data for analysis, comprising:
-
determining, by a network monitoring device coupled to a computer network, a session associated with data packets received by a network monitoring device at a location in a network; generating a common header summarizing information in headers of a plurality of data packets in the session by the network monitoring device; generating a unit of payload metadata summarizing information in payloads of the plurality of the data packets in the session by the network monitoring device; and generating, for each session, a session record for storing the session record, the session record including the common header and the payload metadata by the network monitoring device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A network monitoring device coupled to a computer network for processing network data for analysis, comprising:
-
a network interface configured to receive data packets at a location in a network; and a session tracing engine configured to; determine a session associated with the received data packets;
generate a common header summarizing information in headers of a plurality of data packets in a session;generate a unit of payload metadata summarizing information in payloads of the plurality of the data packets in the session; and generate, for each session, a session record including the common header and the payload metadata. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19)
-
Specification