公开(公告)号：US09356876B1

公开(公告)日：2016-05-31

申请号：US14088436

申请日：2013-11-24

Applicant: Cisco Technology, Inc.

Inventor： Nir Ben-Dvora ,  Michael Zayats ,  Chanoh Haim ,  Ranjana Rao

IPC: H04L12/851

CPC classification number: H04L43/0876 ,  H04L41/12 ,  H04L47/2441 ,  H04L63/0428 ,  H04L67/10 ,  H04L69/04 ,  H04L69/22

Abstract: System and methods for identifying and managing applications over compressed or encrypted traffic in a network are described. The first and second embodiments, which provides a method for managing applications over compressed or encrypted traffic respectively, comprise identifying applications on the traffic, saving the application classification per connection, and propagating the application classification to the network. A method for providing application identification over compressed or encrypted traffic is also disclosed, which includes an application recognition module configured to, among other functions, determine an application classifier for compressed or encrypted traffic without applying an application classification process, and utilize the application classification for previous packets originating from the connection for the current packets from the same connection.

Abstract translation: 描述了通过网络中压缩或加密流量识别和管理应用程序的系统和方法。 提供分别通过压缩或加密流量管理应用的方法的第一和第二实施例包括识别流量上的应用，保存每个连接的应用分类，以及将应用分类传播到网络。 还公开了一种用于在压缩或加密业务上提供应用识别的方法，其包括应用识别模块，该应用识别模块被配置为除了应用分类过程之外还确定用于压缩或加密业务的应用分类器，并且将应用分类用于 来自同一连接的来自当前分组的连接的先前分组。

公开(公告)号：US09577906B2

公开(公告)日：2017-02-21

申请号：US14020539

申请日：2013-09-06

Applicant: Cisco Technology, Inc.

Inventor： Joao Carlos Leite Ferreira ,  Harinadh Nagulapalli ,  Kangwarn Chinthammit ,  Nir Ben-Dvora

IPC: H04L12/26

CPC classification number: H04L43/0876 ,  H04L43/024 ,  H04L43/106

Abstract: Techniques for scalable performance monitoring using dynamic flow sampling are described. According to one approach, a method comprises intercepting, at an intermediary network device, one or more packets traveling between a source device and a destination device; identifying, at the intermediary network device, a traffic flow based on the one or more packets; determining, at the intermediary network device, whether to collect one or more metrics from the traffic flow based on one or more performance factors of the intermediary network device; in response to a determination to collect the one or more metrics from the traffic flow, the intermediary network collecting the one or more metrics from subsequently intercepted packets belonging to the traffic flow; wherein the method is performed by one or more computing devices.

Abstract translation: 描述了使用动态流采样可扩展性能监控的技术。 根据一种方法，一种方法包括在中间网络设备处拦截在源设备和目的地设备之间传播的一个或多个分组; 在所述中间网络设备处识别基于所述一个或多个分组的业务流; 在所述中间网络设备处，基于所述中间网络设备的一个或多个性能因素来确定是否从所述业务流中收集一个或多个度量; 响应于从所述业务流收集所述一个或多个度量的确定，所述中间网络从属于所述业务流的后续拦截的分组收集所述一个或多个度量; 其中所述方法由一个或多个计算设备执行。

公开(公告)号：US20150109942A1

公开(公告)日：2015-04-23

申请号：US14060569

申请日：2013-10-22

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Khanh Vinh Nguyen ,  Nir Ben-Dvora ,  Harinadh Nagulapalli

IPC: H04L12/26

CPC classification number: H04L43/12 ,  H04L43/0835

Abstract: One example method is provided for detecting end-to-end packet loss and retransmission occurring in a connection of a network environment. The method can include monitoring packets transmitted from a sender to a receiver and acknowledgement packets from the receiver to the sender using a probe located in a path between the sender and the receiver in the network environment; identifying, by the probe, a first packet as a possibly-retransmitted packet if the first packet has a fall back sequence number; classifying, by the probe, the first packet as a retransmitted packet using one or more conditions based, at least in part, on one or more of the following: characteristic(s) of the possibly-retransmitted packet, characteristic(s) of sequence numbers observed by the probe, and characteristic(s) of acknowledgements observed by the probe.

Abstract translation: 提供了一种用于检测在网络环境的连接中发生的端到端分组丢失和重传的示例性方法。 该方法可以包括使用位于网络环境中的发送器和接收器之间的路径中的探测器监视从发送器发送到接收器的包以及从接收器到发送器的确认包; 如果第一分组具有回退序列号，则通过探测将第一分组识别为可能重传的分组; 至少部分地基于以下的一个或多个来使用一个或多个条件将所述第一分组作为重传分组进行分类：可能重传的分组的特征，序列的特征 由探针观察到的数字，以及由探针观察到的确认的特征。

公开(公告)号：US20180234316A1

公开(公告)日：2018-08-16

申请号：US15430255

申请日：2017-02-10

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Nir Ben-Dvora ,  Lior Katzri

IPC: H04L12/26

CPC classification number: H04L43/0864 ,  H04L43/062 ,  H04L43/087

Abstract: A method is described and in one embodiment includes receiving at a first network element of a communications network a first packet corresponding to a first traffic flow from a first end user device to a second end user device at a time T1; receiving at the first network element a second packet corresponding to a second traffic flow from the second end user device to the first end user device at a time T2; calculating by the first network element a difference α1 between the time T1 and the time T2; creating at the first network element a first record including the calculated difference Δ1; and providing the first record to a network collector device, wherein the network collector device compares the first record with a second record received from a second network element to determine a Round Trip Time (“RTT”) delay for the communications network.

公开(公告)号：US10218596B2

公开(公告)日：2019-02-26

申请号：US15430255

申请日：2017-02-10

Applicant: CISCO TECHNOLOGY, INC.

Inventor： Nir Ben-Dvora ,  Lior Katzri

IPC: H04L12/26

Abstract: A method is described and in one embodiment includes receiving at a first network element of a communications network a first packet corresponding to a first traffic flow from a first end user device to a second end user device at a time T1; receiving at the first network element a second packet corresponding to a second traffic flow from the second end user device to the first end user device at a time T2; calculating by the first network element a difference α1 between the time T1 and the time T2; creating at the first network element a first record including the calculated difference Δ1; and providing the first record to a network collector device, wherein the network collector device compares the first record with a second record received from a second network element to determine a Round Trip Time (“RTT”) delay for the communications network.

公开(公告)号：US20160248652A1

公开(公告)日：2016-08-25

申请号：US15142302

申请日：2016-04-29

Applicant: Cisco Technology, Inc.

Inventor： Nir Ben-Dvora ,  Michael Zayats ,  Chanoh Haim ,  Ranjana Rao

IPC: H04L12/26 ,  H04L12/24 ,  H04L29/08 ,  H04L29/06

CPC classification number: H04L43/0876 ,  H04L41/12 ,  H04L47/2441 ,  H04L63/0428 ,  H04L67/10 ,  H04L69/04 ,  H04L69/22

Abstract: System and methods for identifying and managing applications over compressed or encrypted traffic in a network are described. The first and second embodiments, which provides a method for managing applications over compressed or encrypted traffic respectively, comprise identifying applications on the traffic, saving the application classification per connection, and propagating the application classification to the network. A method for providing application identification over compressed or encrypted traffic is also disclosed, which includes an application recognition module configured to, among other functions, determine an application classifier for compressed or encrypted traffic without applying an application classification process, and utilize the application classification for previous packets originating from the connection for the current packets from the same connection.

Abstract translation: 描述了通过网络中压缩或加密流量识别和管理应用程序的系统和方法。 提供分别通过压缩或加密流量管理应用的方法的第一和第二实施例包括识别流量上的应用，保存每个连接的应用分类，以及将应用分类传播到网络。 还公开了一种用于在压缩或加密业务上提供应用识别的方法，其包括应用识别模块，该应用识别模块被配置为除了应用分类过程之外还确定用于压缩或加密业务的应用分类器，并且将应用分类用于 来自同一连接的来自当前分组的连接的先前分组。

公开(公告)号：US09240939B2

公开(公告)日：2016-01-19

申请号：US14060569

申请日：2013-10-22

Applicant: Cisco Technology, Inc.

Inventor： Khanh Vinh Nguyen ,  Nir Ben-Dvora ,  Harinadh Nagulapalli

IPC: H04L12/26

CPC classification number: H04L43/12 ,  H04L43/0835

Abstract: One example method is provided for detecting end-to-end packet loss and retransmission occurring in a connection of a network environment. The method can include monitoring packets transmitted from a sender to a receiver and acknowledgement packets from the receiver to the sender using a probe located in a path between the sender and the receiver in the network environment; identifying, by the probe, a first packet as a possibly-retransmitted packet if the first packet has a fall back sequence number; classifying, by the probe, the first packet as a retransmitted packet using one or more conditions based, at least in part, on one or more of the following: characteristic(s) of the possibly-retransmitted packet, characteristic(s) of sequence numbers observed by the probe, and characteristic(s) of acknowledgements observed by the probe.

Abstract translation: 提供了一种用于检测在网络环境的连接中发生的端到端分组丢失和重传的示例性方法。 该方法可以包括使用位于网络环境中的发送器和接收器之间的路径中的探测器监视从发送器发送到接收器的包以及从接收器到发送器的确认包; 如果第一分组具有回退序列号，则通过探测将第一分组识别为可能重传的分组; 至少部分地基于以下的一个或多个来使用一个或多个条件将所述第一分组作为重传分组进行分类：可能重传的分组的特征，序列的特征 由探针观察到的数字，以及由探针观察到的确认的特征。