Virtual Switch Packet Capture via Unified Forwarding Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Administrators face difficulties in monitoring packet communications over virtual switches and software-defined networks, as existing technologies lack effective methods for capturing and logging packets with specific attributes in real-time.
Innovation Solution
A method is introduced that involves identifying packet attributes of interest, assigning a virtual port for forwarding these packets, and implementing a forwarding rule in the virtual switch to direct packets with matching attributes to the virtual port, where they can be logged or monitored in real-time, allowing administrators to dynamically manage packet capture rules without disrupting existing forwarding operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Difficulty of detecting and measuring
If packet capture is implemented in virtual switches, then network monitoring capability is improved, but device complexity increases
Solution Approach 1:
The patent merges packet capture functionality with the existing virtual switch forwarding mechanism by implementing capture rules as additional forwarding rules. The virtual switch captures packets by forwarding them to a virtual port based on capture rules, combining capture and forwarding operations into a single unified mechanism, thereby avoiding additional complexity from separate capture hardware or software components.
Solution Approach 2:
The virtual switch is designed to perform multiple functions: normal packet forwarding and packet capture. The same virtual switch infrastructure, including the control plane and data plane, handles both forwarding decisions and capture operations by evaluating multiple rules (forwarding rules and capture rules) and applying appropriate actions, making the system multi-functional without requiring dedicated capture hardware.
2Adaptability or versatility
If packet capture rules are dynamically managed, then operational flexibility is improved, but control complexity increases
Solution Approach 1:
The system uses a controller that receives capture rule requests in advance and pre-processes them by determining virtual ports and generating capture rules before packets need to be captured. This preliminary action allows the complex rule management to be performed offline or in advance, reducing the complexity of real-time control operations when packets arrive.
Solution Approach 2:
The controller acts as an intermediary between administrators and the virtual switch for packet capture rule management. Administrators submit high-level capture requests to the controller, which then translates these into detailed capture rules and assigns virtual ports. This intermediary layer abstracts the complexity of rule generation and virtual port allocation from the virtual switch and administrators, simplifying the control interface.
3Productivity
If existing forwarding operations are maintained while capturing packets, then productivity is preserved, but measurement precision decreases
Solution Approach 1:
The patent segments packet processing into distinct paths: normal forwarding operations continue unchanged for most packets, while capture operations are separated into a parallel path for packets matching capture rules. By segmenting these functions, the system maintains high forwarding productivity while achieving accurate packet capture without interfering with the efficiency of normal network traffic.
Solution Approach 2:
Instead of capturing all packets (excessive action that would halt forwarding), the system applies capture rules selectively to only those packets matching specific criteria (partial action). This partial capture approach maintains forwarding productivity by allowing most packets to pass through efficiently while capturing only the necessary subset for monitoring and analysis.
Data Source
AI summary
Described herein are systems, methods, and software to capture packets of interest in a virtual switch. In one implementation, a method of capturing packets of interest in a virtual switch includes identifying a request to capture packets associated with first packet attributes. The method further includes, in response to the request, assigning a virtual port for forwarding the packets associated with the first packet attributes, and implementing a forwarding rule in the virtual switch to forward the packets associated with the first packet attributes to at least the virtual port. The method further provides for directing traffic over the virtual switch using the forwarding rule.