Network device having service card for intercept and monitoring of packet flows

A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network de...

Full description

Saved in:
Bibliographic Details
Main Authors JAIN SANDEEP, KO YULIANTO KOKASIH, DURAISWAMY SENTHIL KUMAR, APTE MANOJ, BUDIYANTO FRITZ, DEENADAYALAN SARAVANAN
Format Patent
LanguageEnglish
Published 11.10.2011
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the CSs. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow CSs to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.
Bibliography:Application Number: US20100822904