公开(公告)号：US20160072685A1

公开(公告)日：2016-03-10

申请号：US14941124

申请日：2015-11-13

Applicant: Cisco Technology, Inc.

Inventor： Cecilia MARTIN ,  John David HUBER ,  Mei WANG ,  Jonathan CHANG ,  Flavio BONOMI ,  Sumeet SINGH

IPC: H04L12/26 ,  H04L29/06

CPC classification number: H04L43/062 ,  H04L43/00 ,  H04L43/022 ,  H04L43/0876 ,  H04L43/106 ,  H04L43/16 ,  H04L45/00 ,  H04L45/745 ,  H04L47/10 ,  H04L49/50 ,  H04L63/1408 ,  H04L69/22

Abstract: A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.

Abstract translation: 装置包括多级过滤器和大象捕集器。 多级过滤器具有散列函数和数组。 多级过滤器可操作以接收与候选重网络用户相关联的分组，并将分组发送到散列函数。 散列函数生成与数组中的索引对应的哈希函数输出值。 大象陷阱连接到多级过滤器。 大象陷阱包括缓冲区和概率抽样逻辑。 概率抽样逻辑可操作以部分地基于多级过滤器查找的结果来试图将与分组相关联的信息添加到缓冲器中的特定百分比的时间。 缓冲器可操作以保存与分组相关联的信息，计数器信息和时间戳信息。