Agentless Network Traffic Mapping for Layer2 Visibility
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network traffic mapping solutions rely on software agents that consume endpoint resources and are not compatible with diverse hardware and software configurations, particularly in IoT devices, and lack visibility into Layer2 traffic.
Innovation Solution
Network traffic mapping is performed agentlessly by accessing operating system interfaces of endpoints to gather Layer2 and Layer3 traffic information, enabling visibility into in-segment traffic without agent installation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If software agents are deployed on endpoint devices to monitor network traffic, then network traffic mapping capability is improved, but endpoint resource consumption increases and compatibility with diverse devices deteriorates
Solution Approach 1:
The patent introduces a network device as an intermediary that collects network traffic information from multiple endpoint devices. Instead of deploying agents on each endpoint, the network device acts as a central collector that receives traffic data from endpoints and performs the mapping function, thereby eliminating the need for resource-consuming agents on endpoint devices while maintaining comprehensive network traffic visibility.
Solution Approach 2:
The patent creates a virtual copy of the network traffic monitoring function by having the network device replicate the capability to collect and analyze traffic information from all endpoints. This allows the monitoring function to be performed centrally without requiring physical agent installations on each endpoint, reducing resource consumption while preserving measurement precision.
2Measurement precision
If software agents are deployed on endpoint devices to monitor network traffic, then network traffic mapping capability is improved, but compatibility with diverse hardware and software configurations deteriorates
Solution Approach 1:
The network device serves as a universal intermediary that interfaces with multiple endpoint devices having diverse hardware and software configurations. By centralizing the collection function at the network device level, the system avoids the compatibility issues that would arise from deploying specialized agents on each type of endpoint device, thereby improving adaptability while maintaining measurement precision.
Solution Approach 2:
The network device is designed to perform multiple functions including collecting network traffic information from various types of endpoint devices, performing mappings, and generating reports. This universal approach allows a single device to handle diverse endpoint configurations without requiring device-specific agents, thereby improving compatibility across heterogeneous networks.
3Measurement precision
If network device architecture is modified to provide sufficient coverage for gathering network traffic, then network traffic collection capability is improved, but device complexity increases
Solution Approach 1:
The patent combines the network traffic collection, analysis, and mapping functions into a single network device rather than distributing these functions across multiple specialized components or requiring complex multi-device architectures. This consolidation improves traffic collection capability while reducing overall system complexity by eliminating the need for intricate network architecture modifications.
4Measurement precision
If agents are installed on endpoint devices to monitor Layer2 traffic, then visibility into in-segment traffic is improved, but ease of deployment deteriorates
Solution Approach 1:
The network device acts as an intermediary that can monitor Layer2 traffic without requiring agent installation on endpoint devices. By leveraging the network device's position in the network infrastructure, the system achieves Layer2 visibility through configuration changes at the network device level rather than through complex agent deployment processes on diverse endpoints.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems, methods, and related technologies for generating a network traffic map based on network traffic information and additional data are described. Network traffic information may be obtained from endpoints using an operating system (OS) interface, without an agent being installed on the endpoints. A network traffic map may be generated for the network based on the network traffic information.