Hierarchichal sharding of flows from sensors to collectors
First Claim
1. A method for managing a plurality of collectors including at least first, second and third collectors to recombine a network flow having first and second portions that have become separated, the method comprising:
- receiving, by the first collector, the first portion of a network flow;
first determining, by the first collector, that the second portion of the network flow was not received;
based on the first determining, sending, by the first collector, the first portion of the network flow to the second collector;
receiving, by the third collector, the second portion of the network flow;
second determining, by the third collector, that the first portion of the network flow was not received;
based on the second determining, sending, by the third collector, the second portion of the network flow to the second collector; and
combining, by the second collector, the first portion of the network flow and the second portion of the network flow.
1 Assignment
0 Petitions
Accused Products
Abstract
Systems, methods, and computer-readable media for hierarchichal sharding of flows from sensors to collectors. A first collector can receive a first portion of a network flow from a first capturing agent and determine that a second portion of the network flow was not received from the first capturing agent. The first collector can then send the first portion of the network flow to a second collector. A third collector can receive the second portion of the network flow from a second capturing agent and determine that the third collector did not receive the first portion of the network flow. The third collector can then send the second portion of the network flow to the second collector. The second collector can then aggregate the first portion and second portion of the network flow to yield the entire portion of the network flow.
661 Citations
20 Claims
-
1. A method for managing a plurality of collectors including at least first, second and third collectors to recombine a network flow having first and second portions that have become separated, the method comprising:
-
receiving, by the first collector, the first portion of a network flow; first determining, by the first collector, that the second portion of the network flow was not received; based on the first determining, sending, by the first collector, the first portion of the network flow to the second collector; receiving, by the third collector, the second portion of the network flow; second determining, by the third collector, that the first portion of the network flow was not received; based on the second determining, sending, by the third collector, the second portion of the network flow to the second collector; and combining, by the second collector, the first portion of the network flow and the second portion of the network flow. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A non-transitory computer-readable storage media storing instructions for managing a plurality of collectors including at least first, second and third collectors to recombine a network flow having first and second portions that have become separated, which when executed by a processor cause the processor to perform operations comprising:
-
receiving, by the first collector, the first portion of a network flow; first determining, by the first collector, that the second portion of the network flow was not received; based on the first determining, sending, by the first collector, the first portion of the network flow to the second collector; receiving, by the third collector, the second portion of the network flow; second determining, by the third collector, that the first portion of the network flow was not received; based on the second determining, sending, by the third collector, the second portion of the network flow to the second collector; and combining, by the second collector, the first portion of the network flow and the second portion of the network flow. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A system for managing a plurality of collectors including at least first, second and third collectors to recombine a network flow having first and second portions that have become separated, the system comprising:
-
a processor; and a computer-readable storage device having stored therein instructions which, when executed by the processor, cause the system to perform operations comprising; receiving, by the first collector, the first portion of a network flow; first determining, by the first collector, that the second portion of the network flow was not received; based on the first determining, sending, by the first collector, the first portion of the network flow to the second collector; receiving, by the third collector, the second portion of the network flow; second determining, by the third collector, that the first portion of the network flow was not received; based on the second determining, sending, by the third collector, the second portion of the network flow to the second collector; and combining, by the second collector, the first portion of the network flow and the second portion of the network flow. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification