NETWORK FLOW DE-DUPLICATION
First Claim
1. A method comprising:
- receiving, from a plurality of sensors in a network, data packets of a particular network flow of the network;
analyzing the data packets to determine a specific sensor of the plurality of sensors;
preserving data packets sensed and reported from the specific sensor;
determining duplicative data packets sensed and reported from other sensor(s) of the plurality of sensors based upon the data packets reported from the specific sensor;
discarding the duplicative data packets sensed and reported from the other sensor(s); and
analyzing the particular network flow based upon the data packets reported from the specific sensor and non-duplicative data packets reported from the other sensor(s).
1 Assignment
0 Petitions
Accused Products
Abstract
Systems, methods, and computer-readable media are provided for de-duplicating sensed data packets in a network. As data packets of a particular network flow move through the network, the data packets can be sensed and reported by various sensors across the network. An optimal sensor of the network can be determined based upon data packets reported by the various sensors. Data packets sensed and reported by the optimal sensor can be preserved for network analysis. Duplicative data packets of the particular network flow sensed and reported by other sensors of the network can be discarded to save storage capacity and processing power of network-flow analysis tools. Analysis of the particular network flow can be performed based upon the data packets sensed by the optimal sensor and non-duplicative data packets of the particular network-flow sensed by other sensors of the network.
131 Citations
20 Claims
-
1. A method comprising:
-
receiving, from a plurality of sensors in a network, data packets of a particular network flow of the network; analyzing the data packets to determine a specific sensor of the plurality of sensors; preserving data packets sensed and reported from the specific sensor; determining duplicative data packets sensed and reported from other sensor(s) of the plurality of sensors based upon the data packets reported from the specific sensor; discarding the duplicative data packets sensed and reported from the other sensor(s); and analyzing the particular network flow based upon the data packets reported from the specific sensor and non-duplicative data packets reported from the other sensor(s). - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A system comprising:
-
a processor; and a computer-readable storage medium storing instructions which, when executed by the processor, cause the system to perform operations comprising; receiving, from a plurality of sensors in a network, data packets of a particular network flow of the network; analyzing the data packets to determine a specific sensor of the plurality of sensors; preserving data packets sensed and reported from the specific sensor; determining duplicative data packets sensed and reported from other sensor(s) of the plurality of sensors based upon the data packets reported from the specific sensor; discarding the duplicative data packets sensed and reported from the other sensor(s); and analyzing the particular network flow based upon the data packets reported from the specific sensor and non-duplicative data packets reported from the other sensor(s). - View Dependent Claims (12, 13, 14, 15, 16, 17)
-
-
18. A non-transitory computer-readable storage medium storing instructions for de-duplicating sensed data packets in a network, that, when executed by at least one processor of a computing system, cause the computing system to perform operations comprising:
-
receiving, from a plurality of sensors in the network, data packets of a particular network flow of the network; analyzing the data packets to determine a specific sensor of the plurality of sensors; preserving data packets sensed and reported from the specific sensor; determining duplicative data packets sensed and reported from other sensor(s) of the plurality of sensors based upon the data packets reported from the specific sensor; discarding the duplicative data packets sensed and reported from the other sensor(s); and analyzing the particular network flow based upon the data packets reported from the specific sensor and non-duplicative data packets reported from the other sensor(s). - View Dependent Claims (19, 20)
-
Specification