Systems and methods for determining input and output interfaces of a network device and copies of a same packet going through the network device

Patent metadata

Field	Value
Publication number	US-10404589-B2
Application number	US-201715413209-A
Country	US
Kind code	B2
Filing date	Jan 23, 2017
Priority date	Nov 18, 2014
Publication date	Sep 3, 2019
Grant date	Sep 3, 2019

Abstract

A method performed by a network device that taps to a network having a routing device, includes: receiving a first packet tapped from the network; determining a first information regarding an input interface of the routing device based on a destination address of the first packet; receiving a second packet tapped from the network; determining a second information regarding an output interface of the routing device based on a source address of the second packet; determining a first CRC for the first packet; determining a second CRC for the second packet; and comparing the first CRC with the second CRC at the network device to determine whether the first packet and the second packet are the same.

First claim

What is claimed is:

1. A method comprising:
receiving, at a network device that taps to a network that has a routing device, a first packet tapped from the network;
determining, by the network device, a first information regarding an input interface of the routing device based on a destination address of the first packet, by comparing the destination address of the first packet with a source address of a discovery protocol packet;
receiving, by the network device, a second packet tapped from the network;
determining, by the network device, a second information regarding an output interface of the routing device based on a source address of the second packet, by comparing the source address of the second packet with a destination address of a discovery protocol packet;
determining, by the network device, a first CRC for the first packet;
determining, by the network device, a second CRC for the second packet; and
determining, by the network device, whether the first packet and the second packet are the same based on a comparison of the first CRC with the second CRC.

2. The method of claim 1 , wherein the act of determining the first information or the act of determining the second information comprises determining discovery data contained in a discovery protocol packet.

3. The method of claim 1 , wherein the destination address of the first packet comprises a destination MAC address, and the source address of the second packet comprises a source MAC address.

4. The method of claim 1 , further comprising executing a discovery protocol at the network device.

5. The method of claim 4 , wherein the discovery protocol comprises CDP or LLDP.

6. The method of claim 1 , wherein the first CRC is determined using at least a portion of the first packet.

7. The method of claim 1 , further comprising dropping the first packet or the second packet if the first CRC and the second CRC are the same.

8. The method of claim 1 , further comprising storing the first packet or the second packet in a non-transitory medium.

9. The method of claim 8 , wherein the first packet or the second packet is stored in association with the determined first information regarding the input interface of the routing device, and in association with the determined second information regarding the output interface of the routing device.

10. The method of claim 1 , wherein the network device comprises a single network appliance.

11. The method of claim 1 , wherein the network device comprises multiple network appliances.

12. A network device comprising:
one or more ports to receive a first packet tapped from a network and a second packet tapped from the network, the network including a routing device; and
a processing unit coupled to the one or more ports and configured to
determine a first information regarding an input interface of the routing device based on a destination address of the first packet by comparing the destination address of the first packet with a source address of a discovery protocol packet,
determine a second information regarding an output interface of the routing device based on a source address of the second packet bar comparing the source address of the second packet with a destination address of a discovery protocol packet,
determine a first CRC for the first packet,
determine a second CRC for the second packet, and
compare the first CRC with the second CRC at the network device to determine whether the first packet and the second packet are the same.

13. The network device of claim 12 , wherein the processing unit is configured to determine the first information or the second information by determining discovery data contained in a discovery protocol packet.

14. The network device of claim 12 , wherein the destination address of the first packet comprises a destination MAC address, and the source address of the second packet comprises a source MAC address.

15. The network device of claim 12 , wherein the processing unit is further configured to execute a discovery protocol.

16. The network device of claim 15 , wherein the discovery protocol comprises CDP or LLDP.

17. The network device of claim 12 , wherein the processing unit is further configured to determine the first CRC using at least a portion of the first packet.

18. The network device of claim 12 , wherein the processing unit is further configured to drop the first packet or the second packet if the first CRC and the second CRC are the same.

19. The network device of claim 12 , further comprising a non-transitory medium to store the first packet or the second packet.

20. The network device of claim 19 , wherein the network device stores the first packet or the second packet in the non-transitory medium in association with the determined first information regarding the input interface of the routing device, and in association with the determined second information regarding the output interface of the routing device.

21. The network device of claim 12 , wherein the network device comprises only a single network appliance.

22. The network device of claim 12 , wherein the network device comprises multiple network appliances.

Assignees

• Gigamon Inc

Inventors

• Alawani Ashutosh
• Settipalli Sreekanth
• Kishore Tanmay
• Cafarelli Dominick
• Merchant Shehzad

Classifications

• H04L45/26

  Route discovery packet · CPC title

• H04L43/10

  Active monitoring, e.g. heartbeat, ping or trace-route · CPC title

• H04L43/12

  Network monitoring probes · CPC title

• H04L45/74 Primary

  Address processing for routing · CPC title

• Y02D30/30

  Cross-Sectional Technologies · mapped topic