In-Fabric Traffic Analysis via Automatic Filter Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network traffic monitoring systems rely on tools for analysis, with the visibility fabric playing a supportive role in delivering packets, limiting the ability to achieve network visibility within the fabric itself.
Innovation Solution
Implementing an automatic filter generation method within the visibility fabric to create derivative filters, allowing for in-fabric traffic analysis by dynamically generating finer-grained filters based on user-defined filters, and deploying them across service nodes for real-time statistics extraction and analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network traffic analysis is performed using end tools after packet delivery, then network visibility is achieved, but the system complexity increases and resource consumption rises
Solution Approach 1:
The patent merges the traffic analysis function directly into the visibility fabric by implementing an automatic filter generation module within the fabric itself. This integration eliminates the need for separate end tools, as the fabric now performs both packet delivery and analysis functions unified, thereby reducing system complexity while maintaining network visibility capability
Solution Approach 2:
The visibility fabric is enhanced to perform multiple functions: it not only delivers packets to tools but also independently performs traffic analysis through the automatic filter generation module. This multi-functionality allows the fabric to serve as both a delivery mechanism and an analysis engine, reducing dependency on external tools and lowering overall system complexity
2Measurement precision
If traditional filter matching is used, then packets are delivered to tools for analysis, but the filtering granularity is insufficient for detailed traffic analysis
Solution Approach 1:
The automatic filter generation module segments a single user-defined filter into multiple derivative filters with finer granularity. Each derivative filter targets specific traffic patterns or protocols, enabling detailed analysis of particular traffic types while maintaining high processing efficiency through specialized filtering rules
Solution Approach 2:
The filter generation module creates derivative filters that add dimensional depth to the filtering process. Instead of a single flat filter level, the system now operates across multiple filter granularities, allowing precise matching of complex traffic patterns while maintaining efficient processing through hierarchical filter structures
3Adaptability or versatility
If multiple tools are deployed for comprehensive traffic analysis, then analysis coverage increases, but network resource consumption increases
Solution Approach 1:
The patent consolidates multiple analysis functions into a single automatic filter generation module within the visibility fabric. This module generates and manages multiple derivative filters for comprehensive traffic analysis, eliminating the need for multiple separate tools and thereby reducing network resource consumption while maintaining broad analysis coverage
Solution Approach 2:
The visibility fabric performs self-service traffic analysis through the automatic filter generation module, which independently generates, manages, and applies derivative filters without requiring external tools. This self-sufficiency reduces network resource consumption by eliminating the overhead of multiple separate analysis tools
Data Source
AI summary
An apparatus for a network includes: a processing unit having a filter generation module configured for: receiving an indication that a packet matches a user-defined filter; and creating one or more derivative filters based at least in part on the received indication, wherein a first derivative filter of the one or more derivative filters provides a finer grade of filtration compared to the user-defined filter; and a non-transitory medium configured for storing the one or more derivative filters.