Traffic monitoring
    1.
    发明授权

    公开(公告)号:US11677645B2

    公开(公告)日:2023-06-13

    申请号:US17507449

    申请日:2021-10-21

    Applicant: VMware, Inc.

    CPC classification number: H04L43/028 H04L43/04 H04L43/10 H04L47/2483 H04L47/41

    Abstract: Some embodiments provide a method of aggregating and providing packet metrics collected during a live packet monitoring session performed for packets matching a specified set of characteristics. The method receives, from one or more computing devices that process packets during the live packet monitoring session, multiple metrics associated with a set of packets matching the specified set of characteristics. Metrics associated with each packet in the set are accompanied by a packet identifier (ID) used to tag the packet by an initial computing device that processed the packet. The method uses the accompanying packet IDs to aggregate the received plurality of metrics. The method provides (i) an aggregated set of session metrics for the set of packets matching the specified set of characteristics during the live packet monitoring session and (ii) individual packet metrics using the packet IDs for at least one packet in the set of packets.

    TAGGING PACKETS FOR MONITORING AND ANALYSIS

    公开(公告)号:US20230087454A1

    公开(公告)日:2023-03-23

    申请号:US17507453

    申请日:2021-10-21

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a method for performing data traffic monitoring. The method processes a packet through a packet processing pipeline that includes multiple stages. At a filtering stage, the method tags the packet with a set of monitoring actions for subsequent stages to perform on the packet based on a determination that the packet matches a particular filter. For each stage of a set of packet processing stages subsequent to the filtering stage, the method (i) executes any monitoring actions specified for the stage to perform on the packet and (ii) sends the packet to a next stage in the packet processing pipeline.

    Virtual network flow monitoring
    3.
    发明授权
    Virtual network flow monitoring 有权
    虚拟网络流量监控

    公开(公告)号:US09407519B2

    公开(公告)日:2016-08-02

    申请号:US13831685

    申请日:2013-03-15

    Applicant: VMware, Inc.

    CPC classification number: H04L43/028 H04L43/026 Y02D50/30

    Abstract: Embodiments perform end-to-end virtual network flow monitoring in a virtual datacenter and provide differentiated views to users based on user role. A target flow pattern describing data packets of interest is distributed to a plurality of applications managing VMs in the virtual datacenter, such as hosts, virtual gateways, and other virtual network applications. Each of the applications monitors data packets routed by the application by comparing the data packets to the flow pattern and selectively collecting context data describing the data packets. The context data collected by the applications is aggregated at a remote server for analysis and reporting.

    Abstract translation: 实施例在虚拟数据中心中执行端到端虚拟网络流监视,并且基于用户角色向用户提供不同的视图。 描述感兴趣的数据分组的目标流程模式被分发到管理虚拟数据中心中的VM的多个应用,诸如主机,虚拟网关和其他虚拟网络应用。 每个应用程序通过将数据分组与流程模式进行比较来监视由应用程序路由的数据分组,并且选择性地收集描述数据分组的上下文数据。 应用程序收集的上下文数据在远程服务器上进行聚合,以进行分析和报告。

    PROXY METHODS FOR SUPPRESSING BROADCAST TRAFFIC IN A NETWORK
    4.
    发明申请
    PROXY METHODS FOR SUPPRESSING BROADCAST TRAFFIC IN A NETWORK 有权
    用于在网络中抑制广播交通的代用方法

    公开(公告)号:US20150058968A1

    公开(公告)日:2015-02-26

    申请号:US14070360

    申请日:2013-11-01

    Applicant: VMware, Inc.

    Abstract: Some embodiments use proxies on host devices to suppress broadcast traffic in a network. Each host in some embodiments executes one or more virtual machines (VMs). In some embodiments, a proxy operates on each host between each VM and the underlying network. For instance, in some of these embodiments, a VM's proxy operates between the VM and a physical forwarding element executing on the VM's host. The proxy monitors the VM's traffic, and intercepts broadcast packets when it knows how to deal with them. The proxy connects to a set of one or more controllers that provides a directory service that collects and maintains global information of the network. By connecting to the controller cluster, the proxy can obtain information that it can use to resolve broadcast requests. In some embodiments, the connection between the proxy and the controller cluster is encrypted and authenticated, to enhance the security. Also, in some embodiments, the connection is an indirect connection through an agent that executes on the host device and connects the proxies of the host device with the controller cluster.

    Abstract translation: 一些实施例使用主机设备上的代理来抑制网络中的广播流量。 在一些实施例中,每个主机执行一个或多个虚拟机(VM)。 在一些实施例中,代理在每个VM和底层网络之间的每个主机上运行。 例如,在这些实施例中的一些实施例中,VM的代理在VM和在VM主机上执行的物理转发元件之间运行。 代理监视虚拟机的流量,并在知道如何处理广播数据包时拦截广播数据包。 代理连接到一组一个或多个控制器,提供收集和维护网络的全局信息的目录服务。 通过连接到控制器集群,代理可以获取可用于解决广播请求的信息。 在一些实施例中,代理和控制器集群之间的连接被加密和认证,以增强安全性。 而且,在一些实施例中,连接是通过在主机设备上执行并将主机设备的代理与控制器集群连接的代理的间接连接。

    PERFORMANCE OF TRAFFIC MONITORING ACTIONS

    公开(公告)号:US20230087143A1

    公开(公告)日:2023-03-23

    申请号:US17507462

    申请日:2021-10-21

    Applicant: VMware, Inc.

    Abstract: Some embodiments provide a method for performing data traffic monitoring. For each packet processing stage of a set of packet processing stages in a packet processing pipeline, the method determines whether a packet received by the packet processing pipeline specifies a set of monitoring actions to be performed on the packet. When the packet specifies a set of monitoring action, the method determines whether the monitoring actions in the set are supported by the packet processing stage. The method executes the supported monitoring actions on the packet in addition to processing the packet according to configuration data for the stage.

    Updating flow cache information for packet processing

    公开(公告)号:US11882052B2

    公开(公告)日:2024-01-23

    申请号:US17197397

    申请日:2021-03-10

    Applicant: VMware, Inc.

    CPC classification number: H04L47/62 H04L45/74 H04L67/568

    Abstract: Example methods and systems to perform flow cache information update(s) for packet processing are described. In one example, a network element may configure flow cache information specifying a set of actions based on a sequence of stages that is executable during slow-path packet processing. The network element may configure dependency information specifying execution dependence or independence among the set of actions during fast-path packet processing. In response to detecting a configuration change associated with stage(s) from the sequence of stages, the network element may identify first action(s) affected by the configuration change and second action(s) not affected by the configuration change. This way, a granular update may be performed to the flow cache information by updating the at least one first action, but not the at least one second action.

    Flow-based latency measurement for logical overlay network traffic

    公开(公告)号:US11349736B1

    公开(公告)日:2022-05-31

    申请号:US17093517

    申请日:2020-11-09

    Applicant: VMware, Inc.

    Abstract: Example methods and systems for flow-based latency measurement for logical overlay network traffic are described. In one example, in response to detecting a first inner data packet associated with a packet flow, a first computer system may generate and send a first encapsulated packet via a logical overlay tunnel towards a second computer system. The first encapsulated packet may be generated by encapsulating the first inner data packet with a first outer header that includes first time information associated with the first inner data packet at the first computer system. In response to detecting a second encapsulated packet from the second computer system via the logical overlay tunnel, the first computer system may determine a flow-based latency measurement associated with the packet flow based on the first time information, and second time information identified from a second outer header of the second encapsulated packet.

Patent Agency Ranking