Cascade Packet Distribution System for Scalable Capture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional packet capture devices face challenges in capturing ultra-large amounts of packets due to limited rule registration capacity and lack of scalability, leading to increased costs and complexity when trying to expand capacity.
Innovation Solution
A packet capture system with multiple stages of cascade-connected packet distribution devices, each equipped with packet analysis, flow identification, and distribution units, allowing for efficient capture and filtering of packets across multiple stages without requiring a high-speed switch.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If the number of rules is increased by extending memory capacity, then the number of capturable packets increases, but the device cost and complexity increase
Solution Approach 1:
The packet capture system is divided into multiple stages of packet distribution devices connected in cascade. Each stage handles a portion of the packet filtering task, allowing the system to capture a larger total number of packets without requiring a single device to have excessive memory capacity or complexity.
2Quantity of substance
If parallel processing using multiple devices is used to increase rule registration capacity, then the number of capturable packets increases, but the system cost increases due to required high-speed switches
Solution Approach 1:
Instead of using parallel processing with multiple devices requiring high-speed switches, the patent segments the filtering function across cascade-connected stages that can use simpler connection methods, reducing system cost while maintaining the ability to handle large numbers of packets.
Solution Approach 2:
The patent transitions from a horizontal parallel architecture to a vertical cascade architecture, changing the dimensional arrangement of processing stages. This allows for increased packet capture capacity without the costly high-speed switching infrastructure required for parallel systems.
3Quantity of substance
If the number of parallel lines is increased using optical splitters, then the number of capturable packets increases, but branch loss limits the number of parallel lines
Solution Approach 1:
The packet filtering function is segmented across multiple cascade-connected stages rather than using parallel optical splitting. This segmentation approach avoids the branch loss limitations of optical splitters while still enabling the system to handle a large number of packets through distributed filtering.
Data Source
AI summary
A packet capture system for capturing packets flowing in a capture target network, and a plurality of stages of packet distribution devices for capturing packet of a specific flow are cascade-connected, packet distribution devices identify a capture target flow by analyzing inputted packets, packet distribution devices other than a last-stage packet distribution device are configured to distribute packets to capture packets of a flow to be captured and output packets of a flow not to be captured to a next-stage packet distribution device, and the last-stage packet distribution device is configured to filter the packets of the flow to be captured and to discard the packets of the flow not to be captured.