Cisco Technology, Inc.

Paul Atkins

Paul J Aitken

Andrew G Johnson

Benoit Claise

George Macrae Taylor

Katriona Lightbody

Mark Hannah

Aamer Saeed Akhter

Paul Harry Gleichauf

Xiaoxue Ma

Dimitri Bouianovski

A method is provided in one example embodiment and includes receiving a plurality of packets and generating a data record that is based on information associated with the packets. The data record includes a synchronized time window field that defines a time boundary at which data aggregation associated with the data record is stopped, where the synchronized time window field remains constant as the data aggregation associated with the data record occurs. In other embodiments, the method includes creating a new cache entry for new packets arriving at a network element, where the new cache entry is created in response to a value of the synchronized time window field changing. The synchronized time window field can include a window size attribute that defines how long the synchronized time window remains unchanged.

System and method for synchronized reporting in a network environment

A method of aggregating network traffic flows for network traffic elements is described. The traffic elements are characterized by a plurality of characteristics having respective values, where a flow profile is formed by classifying each element into one of a plurality of flows dependent on its characteristic value. The method comprises the steps of obtaining an instantaneous flow profile and aggregating flows from the flow profile having a common value for a characteristic.

Method and apparatus for aggregating network traffic flows

An apparatus and method for collecting network traffic information is arranged to receive network traffic elements including one or more key fields having respective key field values. The apparatus and method further classify received network traffic elements into one of a plurality of flows dependent on the key field value of one or more key fields defined by a flow profile. The method and apparatus are further configurable to vary the flow profile, create a flow record and export the flow record to a collecting node.

Collecting network traffic information

A method of monitoring network traffic flows of network traffic elements between locations in a data communications network is disclosed. The method comprises the step of classifying, as a first flow, traffic elements from a first to a second network location sharing a flow characteristic. The method further comprises the steps of classifying, as a second flow, traffic elements from said second to said first network location sharing said flow characteristic correlating said first and second flows.

Method and apparatus for monitoring network traffic

A policy-based approach for managing the export of network flow statistical data uses constraints and prioritization to select flow data to be exported by flow monitoring processes. According to the approach, a flow monitoring process monitors a plurality of flows at an observation point. The flow monitoring process generates flow statistical data for the plurality of flows. Policy data is made available to the flow monitoring process and includes constraint data and priority data. The constraint data indicates usage constraints for one or more resources available to the flow monitoring process. The priority data indicates a desired priority of flow attributes. The flow monitoring process uses the policy data to select one or more flows from the plurality of flows, such that the resource usage constraints are satisfied. The flow monitoring process exports a portion of the flow statistical data that corresponds to the selected one or more flows.

Growing community of inventors

Edinburgh, United Kingdom

Paul Atkins