Systems and methods for processing packets tapped from a network using discovery protocol

Patent metadata

Field	Value
Publication number	US-9680710-B2
Application number	US-201414547031-A
Country	US
Kind code	B2
Filing date	Nov 18, 2014
Priority date	Nov 18, 2014
Publication date	Jun 13, 2017
Grant date	Jun 13, 2017

Abstract

A network device includes: one or more ports for tapping to a network; and a processing unit configured for receiving a first packet tapped from the network, wherein the first packet is received at a first network port of the network device; determining a first identity of a first network equipment associated with the first packet based on a discovery protocol; and associating the first identity of the first network equipment with a first identity of the first network port of the network device at which the first packet is received; and a non-transitory medium for storing the first identity of the first network equipment and the first identity of the first network port in association with each other.

First claim

What is claimed:

1. A method performed by a network device that taps to a network having one or more network equipment, comprising:
receiving a first packet tapped from the network, wherein the first packet is received at a first network port of the network device;
determining a first identity of a first network equipment associated with the first packet by a processing unit based on a destination address of the first packet by comparing the destination address of the first packet with a source address of a discovery protocol packet, wherein the first identity of the first network equipment comprises a first information regarding an input interface of the first network equipment and a second information regarding an output interface of the first network equipment, and wherein said determining comprises determining the second information regarding the output interface of the first network equipment by:
receiving a second packet tapped from the network; and
determining the second information based on a source address of the second packet;
associating the first identity of the first network equipment with a first identity of the first network port of the network device at which the first packet is received, wherein the act of associating is performed by the processing unit; and
storing the first identity of the first network equipment and the first identity of the first network port in a non-transitory medium in association with each other.

2. The method of claim 1 , further comprising determining a second identity of a second network equipment by the processing unit based on the discovery protocol.

3. The method of claim 2 , wherein the first network equipment is associated with the first network port, and the second network equipment is associated with a second network port at the network device, and the method further comprises:
storing the second identity of the second network equipment and the second identity of the second network port in the non-transitory medium in association with each other.

4. The method of claim 2 , wherein the second network equipment is associated with the first network port, and the method further comprises:
storing the second identity of the second network equipment and the first identity of the first network port in the non-transitory medium in association with each other.

5. The method of claim 1 , further comprising:
maintaining a list of network equipment that includes the first network equipment; and presenting a network topology to a user that includes the list of network equipment.

6. The method of claim 1 , further comprising:
determining by the processing unit whether there has been a change in a list of network equipment that includes the first network equipment; and
generating a message to inform a user if there has been a change in the list of the network equipment.

7. The method of claim 6 , wherein the message is generated automatically in response to the change in the list of the network equipment.

8. The method of claim 1 , wherein the network device comprises one or more additional network ports configured to communicate with the network, and a plurality of instrument ports configured to communicate with one or more network monitoring instruments, one or more databases, or a combination of both.

9. The method of claim 1 , wherein the non-transitory medium comprises one or more data center.

10. The method of claim 1 , wherein the first identity of the first network equipment comprises a first information regarding an input interface of the first network equipment, and a second information regarding an output interface of the first network equipment.

11. The method of claim 1 , wherein the act of determining the second information based on the source address of the second packet comprises comparing the source address of the second packet with a destination address of a discovery protocol packet.

12. The method of claim 1 , further comprising:
determining a first CRC for the first packet;
determining a second CRC for the second packet; and
comparing the first CRC with the second CRC at the network device to determine whether the first packet and the second packet are the same.

13. The method of claim 1 , wherein the discovery protocol comprises a CDP or a LLDP.

14. The method of claim 1 , wherein the network device comprises a single network appliance or multiple network appliances.

15. A network device comprising:
one or more ports for tapping to a network; and
a processing unit configured for
receiving a first packet tapped from the network, wherein the first packet is received at a first network port of the network device;
determining a first identity of a first network equipment associated with the first packet based on a destination address of the first packet by comparing the destination address of the first packet with a source address of a discovery protocol packet, wherein the first identity of the first network equipment comprises a first information regarding an input interface of the first network equipment and a second information regarding an output interface of the first network equipment, and wherein said determining comprises determining the second information regarding the output interface of the first network equipment by:

receiving a second packet tapped from the network; and
determining the second information based on a source address of the second packet; and
associating the first identity of the first network equipment with a first identity of the first network port of the network device at which the first packet is received; and
non-transitory medium for storing the first identity of the first network equipment and the first identity of the first network port in association with each other.

16. The network device of claim 15 , wherein the processing unit is further configured for determining a second identity of a second network equipment based on the discovery protocol.

17. The network device of claim 16 , wherein the first network equipment is associated with the first network port, and the second network equipment is associated with a second network port at the network device, and the non-transitory medium is configured for storing the second identity of the second network equipment and the second identity of the second network port in association with each other.

18. The network device of claim 16 , wherein the second network equipment is associated with the first network port, and the non-transitory medium is configured for storing the second identity of the second network equipment and the first identity of the first network port in association with each other.

19. The network device of claim 15 , wherein the processing unit is further configured for: maintaining a list of network equipment that includes the first network equipment; and presenting a network topology to a user that includes the list of network equipment.

20. The network device of claim 15 , wherein the processing unit is configured for: determining whether there has been a change in a list of network equipment that includes the first network equipment; and
generating a message to inform a user if there has been a change in the list of the network equipment.

21. The network device of claim 20 , wherein the processing unit is configured to generate the message automatically in response to the change in the list of the network equipment.

22. The network device of claim 15 , further comprising one or more additiona

Assignees

• Gigamon Inc

Inventors

• Cafarelli Dominick
• Merchant Shehzad

Classifications

• H04L41/0853 Primary

  by actively collecting configuration information or by backing up configuration information · CPC title

• Y02B60/43

  Cross-Sectional Technologies · mapped topic

• H04L43/12

  Network monitoring probes · CPC title

• H04L41/12 Primary

  Discovery or management of network topologies · CPC title

• Y02D30/00

  Reducing energy consumption in communication networks · CPC title