Traffic monitoring method and apparatus for open stack tenant network

    公开(公告)号:US12088487B2

    公开(公告)日:2024-09-10

    申请号:US18270417

    申请日:2021-09-29

    发明人: Xifa Sun Yashuai Lei

    摘要: A traffic monitoring method for an Open Stack tenant network, including: detecting a traffic in/out state of a first virtual machine by using a callback function; when it is detected that the virtual machine transmits first traffic to a second virtual machine in the same host, matching a first data flow corresponding to the first traffic by using target flow table entries in an integrated bridge, and transmitting a copied first data flow to a traffic monitoring platform; when it is detected that the first virtual machine transmits second traffic to a third virtual machine in a remote host, matching a second data flow corresponding to the second traffic by using the target flow table entries, and transmitting a copied second data flow to a physical bridge; and when the integrated bridge receives the third data flow, transmitting the third data flow to the traffic monitoring platform.

    Application-specific high frequency passive probing

    公开(公告)号:US12069505B2

    公开(公告)日:2024-08-20

    申请号:US17853558

    申请日:2022-06-29

    摘要: In one embodiment, a first networking device in a network coordinates, with a second networking device in the network, capture of packet maps for a traffic flow in the network associated with a particular application. The packet maps comprise multi-dimensional histograms indexed by identified properties of packets of the traffic flow and time. The first networking device inspects packets of the traffic flow, to identify properties of packets of the traffic flow. The first networking device generates a first packet map for the traffic flow based on the properties of the packets of the traffic flow identified by the first networking device. The first networking device causes a comparison between the first packet map and a second packet map generated by the second networking device to be used as a measure of application experience for the particular application.

    Abstracting Network Traffic as Video for Representation Learning

    公开(公告)号:US20240267307A1

    公开(公告)日:2024-08-08

    申请号:US18165860

    申请日:2023-02-07

    申请人: MICRO FOCUS LLC

    摘要: A plurality of captured packets are received. The plurality of captured packets are from a plurality of packet flows. A packet flow is a communication session between two devices. For example, a packet flow may be a communication session between a client and a server. The plurality of captured packets are sorted into individual packet flows. The individual packet flows are converted into individual videos. For example, each packet from each packet flow is stored as a separate video frame in an individual video. A machine learning algorithm is applied to the individual videos to perform analytic tasks on the individual videos. For example, the machine learning algorithm may be used to identify anomalies within a packet flow and/or between packet flows.