Flow Data Record Emitters for Network Traffic Classification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network management systems lack the ability to perform flow-based, traffic-classification-aware data collection and reporting, which limits their capability to analyze and diagnose network issues, especially for traffic that does not use registered IP port numbers, and they cannot provide historical data or insights into specific network usage patterns.
Innovation Solution
A system that combines flow-based data collection with enhanced traffic classification functionality, allowing for the creation and storage of flow data records that include classification information and attributes, enabling deeper network monitoring and analysis through a database that can be queried for detailed reports.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If traditional network management systems are used, then system simplicity is maintained, but the ability to perform flow-based traffic classification and historical data analysis is lost
Solution Approach 1:
The patent introduces flow data record emitters as intermediary components that bridge the gap between network traffic flows and the data collection system. These emitters intercept flow data, add traffic type information, and forward records to collectors, enabling enhanced analysis without requiring complete system redesign
Solution Approach 2:
The system is divided into distinct functional modules: flow data record emitters that generate records, data collectors that gather records, and databases that store and serve historical data. This segmentation allows each component to specialize in specific tasks while maintaining overall system functionality
2Measurement precision
If flow data records with traffic type data are implemented, then network traffic analysis capability is improved, but data record size and processing complexity increase
Solution Approach 1:
The patent extracts only the essential traffic type information from complete flow data, creating condensed flow data records that contain specifically the classification data needed for analysis. This extraction approach provides enhanced analysis capability while avoiding the overhead of storing or processing complete raw flow data
Solution Approach 2:
The system changes the parameter representation by using standardized traffic type identifiers and classification codes instead of storing complete flow descriptions. This parameter transformation enables efficient storage and processing while maintaining the ability to perform detailed traffic analysis
3Reliability
If historical flow data is stored and queried, then network diagnostic capability is enhanced, but data storage and retrieval overhead increases
Solution Approach 1:
The patent implements preliminary organization of flow data records as they are collected, with data being structured and indexed in the database before retrieval is needed. This preliminary action enables efficient querying and reduces retrieval time when diagnostic information is required
Solution Approach 2:
The system replaces manual or simple logging mechanisms with an automated database-driven approach that uses structured queries and indexed storage. This substitution enables reliable historical analysis while minimizing the time overhead for data retrieval through efficient database operations
Data Source
AI summary
Methods, apparatuses and systems directed to a flow-based, traffic-classification-aware data collection and reporting system that combine flow-based data collection technologies with enhanced traffic classification functionality to allow for analysis and reporting into aspects of network operations that prior art systems cannot provide. Embodiments provide enhanced views into the operation of computer network infrastructures to facilitate monitoring, administration, compliance and other tasks associated with networks. When a traffic flow terminates, a traffic monitoring device emits a flow data record (FDR) containing measurements variables and other attributes for an individual flow. A data collector gathers the flow data records and enters them into a database. A network management application can then query the database with selected commands to derive reports characterizing operation of the network suitable to diagnose problems or view conditions associated with the network.