OPTIMIZED DEEP PACKET INSPECTION (DPI) ANYWHERE

Abstract: a method of monitoring network traffic flowing in a production fabric, includes, in part, receiving a multitude of mirrored packets of the traffic flow at a service node disposed in a monitoring fabric that is distinct from the production fabric. from the received packets, the start of a communication session established between a first client and a second client on the production fabric is determined. a subset of the received packets are then selected for deep packet inspection at the service node to identify metadata associated with the network traffic of the identified session. the metadata may be used to identify the software application that generates the traffic flow. the mirrored packets may include packets sent from the first client to the second client, as well as packets sent from the second client to the first client.

Inventor(s): Sandip Shah, Michael T. Stolarchuk, Sean Dao

CPC Classification: H04L63/1425 ({Traffic logging, e.g. anomaly detection})

Search for rejections for patent application number 20250233876