Network device having service card for intercept and monitoring of packet flows

US8037175B1 · kind B1 · utility

Assignee

• Juniper Networks, Inc. · US

Inventors

• Manoj Apte · San Jose, US
• Sandeep Jain · Milpitas, US
• Fritz Budiyanto · Sunnyvale, US
• Senthil Kumar Duraiswamy · Viralimalai, IN
• Saravanan Deenadayalan · San Jose, US
• Yulianto Kokasih Ko · Fremont, US

Key dates

• Filing date: Jun 24, 2010
• Grant date: Oct 11, 2011
• Expiry date: Jun 24, 2030

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L45/38
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the CSs. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow CSs to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.