Centralized Capture Server for Network Traffic Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing network traffic data across large and complex corporate IT infrastructures is challenging due to the difficulty in identifying and coordinating capture agents, leading to inefficient troubleshooting and performance analysis, especially when dealing with numerous applications and network errors.

Innovation Solution

A centrally located capture server manages multiple capture agents, associating them with applications through profiles, automatically identifying and archiving relevant network traffic data, and providing tools for analysis, thereby streamlining troubleshooting and development processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple capture agents are deployed at various network points to monitor traffic, then network monitoring coverage is improved, but the complexity of managing and identifying which agents are associated with particular applications increases

Engineering Contradiction:
Improvenetwork monitoring coverageVSAvoidcapture agent management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a centralized capture server as an intermediary between multiple capture agents and application developers. The capture server receives captured data from numerous agents, automatically identifies which agents are associated with particular applications using heuristics, and delivers the relevant data to developers. This mediator eliminates the need for developers to manually manage or identify individual agents, resolving the contradiction between comprehensive monitoring coverage and management complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Loss of information

If capture agents continuously monitor all network traffic, then complete traffic data is captured, but the time and resources required to extract and analyze relevant data increase

Engineering Contradiction:
Improvetraffic data completenessVSAvoiddata extraction and analysis time
Core Design Contradiction:
Loss of informationVSLoss of time

Solution Approach 1:

The capture server performs preliminary action by automatically identifying and filtering relevant traffic data before it reaches the application developer. Using heuristics that analyze patterns in the captured data, the server pre-processes the information to determine which agents are associated with specific applications and what data is relevant. This preliminary filtering eliminates the need for developers to manually search through all captured traffic, significantly reducing analysis time while maintaining data completeness.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If developers manually identify and configure capture agents for each application, then precise control over data capture is achieved, but the productivity and efficiency of the development process decrease

Engineering Contradiction:
Improvecapture agent configuration controlVSAvoiddevelopment process efficiency
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The system implements self-service by enabling capture agents to automatically associate themselves with applications through heuristics-based identification. The capture server autonomously analyzes captured traffic patterns, determines which agents are monitoring which applications, and configures the data flow accordingly without requiring manual developer intervention. This automation maintains precise control over data capture while dramatically improving development productivity by eliminating time-consuming manual configuration tasks.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9054965B2Managing captured network traffic data
Publication Date: 2015.06.09 RIVERBED TECH LLC
  • US9054965B2 patent drawing
  • US9054965B2 patent drawing
  • US9054965B2 patent drawing

AI summary

A system and method for managing captured network traffic data is provided. The invention comprises a plurality of capture agents, each being configured to capture the network traffic associated with one or more applications. Each application is associated with one or more capture agents according to an application profile that is stored and maintained in a capture server. When analysis of an application's network traffic is required, the capture server contacts the corresponding capture agents according to the application profile. The capture server then effects the identification and archiving of the network traffic that corresponds to a user-defined capture condition. A database at the capture server maintains a record that associates the corresponding network traffic with the user-defined capture condition such that the corresponding network traffic can later be retrieved and analyzed using an analysis engine.