Map sharing for a switch device

Patent metadata

Field	Value
Publication number	US-9455957-B2
Application number	US-201414272410-A
Country	US
Kind code	B2
Filing date	May 7, 2014
Priority date	May 7, 2014
Publication date	Sep 27, 2016
Grant date	Sep 27, 2016

Abstract

A method of implementing map sharing for a network switch appliance, the network switch appliance having a plurality of network ports and a plurality of instrument ports, the method includes: receiving a first input for creating a map for the network switch appliance, wherein the map comprises one or more packet processing rules, and wherein the act of receiving the first input is performed by a processing unit; receiving a second input for prescribing a map sharing privilege for the map; and storing the map and the map sharing privilege in association with the map in a non-transitory medium.

First claim

What is claimed:

1. A method of implementing map sharing for a network switch appliance, the network switch appliance having a plurality of network ports and a plurality of instrument ports, the method comprising:
receiving a first input for creating a map for the network switch appliance, wherein the map comprises one or more packet processing rules, and wherein the act of receiving the first input is performed by a processor;
receiving a second input for prescribing a map sharing privilege for the map, wherein at least one of the first input or the second input is from a first user;
storing the map and the map sharing privilege in association with the map in a machine-readable non-transitory storage medium;
receiving a third input from a second user representing a request to access the map;
determining a role of the second user; and
determining whether to allow the second user to access the map based on the role of the second user.

2. The method of claim 1 , wherein the first input comprises one or more parameters for defining the one or more packet processing rules.

3. The method of claim 2 , wherein the first input also comprises a network port identifier of one of the network ports, and/or an instrument port identifier of one of the instrument ports.

4. The method of claim 1 , wherein one of the one or more packet processing rules comprises data for matching against header information of a packet to be received at the network switch appliance.

5. The method of claim 1 , wherein one of the one or more packet processing rules comprises data for matching against non-header information of a packet to be received at the network switch appliance.

6. The method of claim 1 , wherein the first input for creating the map is received from the first user.

7. The method of claim 6 , wherein the first user and the second user belong to different respective roles.

8. The method of claim 1 , wherein the second input includes a parameter for setting a level of the map sharing privilege.

9. The method of claim 8 , wherein the level is selected from at least two levels that include a first level and a second level;
wherein the map is viewable by a user to which the map is shared if the map sharing privilege is set to be the first level; and
wherein the map is viewable, editable, and deletable by a user to which the map is shared if the map sharing privilege is set to be the second level.

10. The method of claim 9 , wherein the level is selected from at least three levels that include the first level, the second level, and a third level; and
wherein the map is viewable by a user to which the map is shared, and the user to which the map is shared may assign an instrument port to the map in a listening mode, if the map sharing privilege is set to be the third level.

11. The method of claim 8 , wherein the parameter is for setting the level of the map sharing privilege on a per-role basis.

12. The method of claim 1 , wherein the first input and the second input are from the first user.

13. The method of claim 12 , further comprising determining whether to allow the second user to perform a task on the map based on a level of the map sharing privilege assigned for the role of the second user.

14. The method of claim 1 , further comprising determining whether to allow a user to assign one or more of the network ports and/or one or more of the instrument ports to the map based on a privilege level of a role to which the user belongs.

15. The method of claim 1 , wherein the non-transitory medium is located in the network switch appliance.

16. The method of claim 1 , wherein the non-transitory medium is located at a location that is remote from the network switch appliance.

17. The method of claim 1 , wherein the processor is a part of the network switch appliance.

18. An apparatus for implementing map sharing for a network switch appliance, the network switch appliance having a plurality of network ports and a plurality of instrument ports, the apparatus comprising:
a processor configured for:
receiving a first input for creating a map for the network switch appliance, wherein the map comprises one or more packet processing rules;
receiving a second input for prescribing a map sharing privilege for the map, wherein at least one of the first input or the second input is from a first user;
receiving a third input from a second user representing a request to access the map;
determining a role of the second user; and
determining whether to allow the second user to access the map based on the role of the second user; and
a machine-readable non-transitory storage medium to store the map and the map sharing privilege.

19. The apparatus of claim 18 , wherein the first input comprises one or more parameters for defining the one or more packet processing rules.

20. The apparatus of claim 19 , wherein the first input also comprises a network port identifier of one of the network ports, and/or an instrument port identifier of one of the instrument ports.

21. The apparatus of claim 18 , wherein one of the one or more packet processing rules comprises data for matching against header information of a packet to be received at the network switch appliance.

22. The apparatus of claim 18 , wherein one of the one or more packet processing rules comprises data for matching against non-header information of a packet to be received at the network switch appliance.

23. The apparatus of claim 18 , wherein the first input for creating the map is received from the first user.

24. The apparatus of claim 23 , wherein the first user and the second user belong to different respective roles.

25. The apparatus of claim 18 , wherein the second input includes a parameter for setting a level of the map sharing privilege.

26. The apparatus of claim 25 , wherein the level is one of at least two levels that include a first level and a second level;
wherein the map is viewable by a user to which the map is shared if the map sharing privilege is set to be the first level; and
wherein the map is viewable, editable, and deletable by a user to which the map is shared if the map sharing privilege is set to be the second level.

27. The apparatus of claim 26 , wherein the level is one of at least three levels that include the first level, the second level, and a third level; and
wherein the map is viewable by a user to which the map is shared, and the user to which the map is shared may assign an instrument port to the map in a listening mode, if the map sharing privilege is set to be the third level.

28. The apparatus of claim 25 , wherein the parameter is for setting the level of the map sharing privilege on a per-role basis.

29. The apparatus of claim 18 , wherein the first input and the second input are from the first user.

30. The apparatus of claim 29 , wherein the processor is further configured for determining whether to allow the second user to perform a task on the map based on a level of the map sharing privilege assigned for the role of the second user.

31. The apparatus of claim 18 , wherein the processor is further configured for determining whether to allow a user to assign one or more of the network ports and/or one or more of the instrument ports to the map based on a privilege level of a role to which the user belongs.

Assignees

• Gigamon Inc

Inventors

• Merchant Shehzad
• Nguyen Hung
• Nguyen Hoang Nguyen Bao
• Riley Patrick Allen
• Yu Jay Han

Classifications

• H04L45/02

  Topology update or discovery · CPC title

• H04L63/0236 Primary

  Filtering by address, protocol, port number or service, e.g. IP-address or URL · CPC title

• H04L45/742

  Route cache; Operation thereof · CPC title

• H04L12/6418

  Hybrid transport · CPC title

• H04L69/22

  Parsing or analysis of headers · CPC title