Technologies for annotating process and user information for network flows
US-2016357587-A1 · Dec 8, 2016 · US
US11201812B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11201812-B2 |
| Application number | US-202016932907-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jul 20, 2020 |
| Priority date | Jun 12, 2015 |
| Publication date | Dec 14, 2021 |
| Grant date | Dec 14, 2021 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Concepts and technologies are disclosed herein for virtual probes. A processor can execute a probe orchestrator service. The processor can obtain traffic monitoring data that describes traffic associated with a logical node. The logical node can include two or more devices that can exchange information as internal traffic. The processor can analyze the traffic monitoring data to determine one of the two or more devices hosts external traffic that involves an external device that resides outside of the logical node. In response to a determination that the one of the two or more devices hosts the external traffic, the processor can trigger instantiation of a virtual probe at the device of the plurality of devices.
Opening claim text (preview).
The invention claimed is: 1. A system comprising: a processor; and a memory that stores computer-executable instructions that, when executed by the processor, cause the processor to perform operations comprising obtaining data that describes traffic associated with a logical node, wherein the logical node comprises a plurality of servers that are located within a data center, and wherein the plurality of servers exchange information within the data center as internal traffic, analyzing the data to determine if a server of the plurality of servers hosts external traffic, wherein the external traffic comprises communications with an external device that resides outside of the logical node and outside of the data center, and in response to a determination that the server of the plurality of servers hosts the external traffic, triggering instantiation of a virtual probe at the server of the plurality of servers, wherein the virtual probe is instantiated within a host operating system of the server of the plurality of servers, wherein the virtual probe reports to a recipient regarding the external traffic, and wherein the recipient is outside of the logical node. 2. The system of claim 1 , wherein triggering instantiation of the virtual probe comprises sending, to the server of the plurality of servers, a command to instantiate the virtual probe. 3. The system of claim 2 , wherein the command to instantiate the virtual probe comprises instructions to configure the virtual probe. 4. The system of claim 1 , wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising configuring the virtual probe, wherein configuring the virtual probe comprises: accessing a catalog of known logical interface descriptions of physical network interfaces of the server of the plurality of servers; and configuring the virtual probe to use a filter from the catalog. 5. The system of claim 1 , wherein the data comprises a virtual machine creation template. 6. The system of claim 1 , wherein the server of the plurality of servers hosts a virtual machine that provides functionality associated with a service. 7. A method comprising: obtaining, at a processor executing a probe orchestrator service, data that describes traffic associated with a logical node, wherein the logical node comprises a plurality of servers that are located within a data center, and wherein the plurality of servers exchange information within the data center as internal traffic; analyzing, by the processor, the data to determine if a server of the plurality of servers hosts external traffic, wherein the external traffic comprises communications with an external device that resides outside of the logical node and outside of the data center; and in response to a determination that the server of the plurality of servers hosts the external traffic, triggering, by the processor, instantiation of a virtual probe at the server of the plurality of servers, wherein the virtual probe is instantiated within a host operating system of the server of the plurality of servers, wherein the virtual probe reports to a recipient regarding the external traffic, and wherein the recipient is outside of the logical node. 8. The method of claim 7 , wherein the recipient comprises the probe orchestrator service. 9. The method of claim 7 , wherein the data comprises a virtual machine creation template. 10. The method of claim 7 , further comprising configuring the virtual probe, wherein configuring the virtual probe comprises: accessing a catalog of known logical interface descriptions of physical network interfaces of the server of the plurality of servers; and configuring the virtual probe to use a filter from the catalog. 11. The method of claim 7 , wherein the server of the plurality of servers hosts a virtual machine that provides functionality associated with a service. 12. The method of claim 7 , wherein triggering instantiation of the virtual probe comprises sending, to the server of the plurality of servers, a command to instantiate the virtual probe. 13. The method of claim 12 , wherein the command to instantiate the virtual probe comprises instructions to configure the virtual probe. 14. The method of claim 7 , further comprising: receiving, by the processor and from the virtual probe, external traffic data that describes the external traffic that is hosted by the server of the plurality of servers. 15. The method of claim 7 , wherein the external traffic hosted by the server of the plurality of servers comprises an exchange of data by the server of the plurality of servers with an external resource that is located outside of the logical node. 16. A computer storage medium having computer-executable instructions stored thereon that, when executed by a processor, cause the processor to perform operations comprising: obtaining data that describes traffic associated with a logical node, wherein the logical node comprises a plurality of servers that are located within a data center, and wherein the plurality of servers exchange information within the data center as internal traffic; analyzing the data to determine if a server of the plurality of servers hosts external traffic, wherein the external traffic comprises communications with an external device that resides outside of the logical node and outside of the data center; and in response to a determination that the server of the plurality of servers the external traffic, triggering instantiation of a virtual probe at the server of the plurality of servers, wherein the virtual probe is instantiated within a host operating system of the server of the plurality of servers, wherein the virtual probe reports to a recipient regarding the external traffic, and wherein the recipient is outside of the logical node. 17. The computer storage medium of claim 16 , wherein the server of the plurality of servers hosts a virtual machine that provides functionality associated with a service. 18. The computer storage medium of claim 16 , wherein the computer-executable instructions, when executed by the processor, cause the processor to perform operations further comprising configuring the virtual probe, wherein configuring the virtual probe comprises: accessing a catalog of known logical interface descriptions of physical network interfaces of the server of the plurality of servers; and configuring the virtual probe to use a filter from the catalog. 19. The computer storage medium of claim 16 , wherein the data comprises a virtual machine creation template. 20. The computer storage medium of claim 16 , wherein triggering instantiation of the virtual probe comprises sending, to the server of the plurality of servers, a command to instantiate the virtual probe, and wherein the command to instantiate the virtual probe comprises instructions to configure the virtual probe.
Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements · CPC title
for initial configuration or provisioning, e.g. plug-and-play · CPC title
Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title
Network monitoring probes · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.