Method and system for network monitoring using signature packets
First Claim
Patent Images
1. A device comprising:
- a memory configured to store instructions; and
a processor configured to execute the instructions to;
receive a packet that includes one or more Quality of Service (QoS) fields;
compare a value associated with the packet to stored values to identify signature information;
determine, using a rule and based on comparing the value associated with the packet to the stored values, whether the signature information satisfies a particular condition,the rule corresponding to a signature associated with the signature information, andthe particular condition including one of;
a period of time, associated with receiving the packet and another packet, satisfying a threshold time value, ora quantity of the one or more QoS fields, associated with the packet, having a respective value that matches; and
selectively transmit, based on determining whether the signature information satisfies the particular condition, a notification that indicates a potential problem affecting one or more real time network services.
4 Assignments
0 Petitions
Accused Products
Abstract
A method of monitoring a network with a test device connected to the network includes monitoring a plurality of packets which pass through the test device, comparing a predefined field of each of the plurality of packets to a predefined pattern so as to identify signature packets, evaluating whether the signature packets satisfy a predefined condition, and, if the predefined condition is satisfied, sending a notification to a user. A system implementing the method is provided.
32 Citations
20 Claims
-
1. A device comprising:
-
a memory configured to store instructions; and a processor configured to execute the instructions to; receive a packet that includes one or more Quality of Service (QoS) fields; compare a value associated with the packet to stored values to identify signature information; determine, using a rule and based on comparing the value associated with the packet to the stored values, whether the signature information satisfies a particular condition, the rule corresponding to a signature associated with the signature information, and the particular condition including one of; a period of time, associated with receiving the packet and another packet, satisfying a threshold time value, or a quantity of the one or more QoS fields, associated with the packet, having a respective value that matches; and selectively transmit, based on determining whether the signature information satisfies the particular condition, a notification that indicates a potential problem affecting one or more real time network services. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A method comprising:
-
receiving, by a device and from a sensor device, a packet that includes one or more Quality of Service (QoS) fields; comparing, by the device, a value associated with the packet to stored values to identify signature information; determining, by the device, using a rule, and based on comparing the value associated with the packet to the stored values, whether the signature information satisfies a particular condition, the rule corresponding to a signature associated with the signature information, and the particular condition including at least one of; a period of time, associated with receiving the packet and another packet, satisfying a threshold time value, a quantity of the one or more QoS fields, associated with the packet, having a respective value that matches, or a difference between a first quantity of packets, identified by the sensor device, and a second quantity of packets, identified by another sensor device, satisfying a threshold value; and selectively transmitting, by the device and based on determining whether the signature information satisfies the particular condition, a notification that includes a potential problem affecting one or more real time networks. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A device comprising:
-
a memory configured to store instructions; and a processor configured to execute the instructions to; receive, from a sensor device, a packet that includes one or more Quality of Service (QoS) fields; compare a value associated with the packet to stored values to identify signature information; determine, using a rule and based on comparing the value associated with the packet to the stored values, whether the signature information satisfies a particular condition, the rule corresponding to a signature associated with the signature information, and the particular condition including at least one of; a period of time, associated with receiving the packet and another packet, satisfying a threshold time value, a quantity of the one or more QoS fields, associated with the packet, having a respective value that matches, or a difference between a first quantity of packets, identified by the sensor device, and a second quantity of packets, identified by another sensor device, satisfying a threshold value; and selectively transmit, based on determining whether the signature information satisfies the particular condition, a notification that indicates a potential problem affecting one or more real time network services. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification