CPC H04L 45/64 (2013.01) [H04L 12/4641 (2013.01); H04L 41/22 (2013.01); H04L 45/74 (2013.01)] | 20 Claims |
1. A method comprising:
receiving underlay flow data from an underlay network, the underlay network including a plurality of network devices, the underlay flow data including information identifying an underlay network source, an underlay network destination, an overlay network source and an overlay network destination for each underlay data flow;
identifying, for each underlay data flow, a source overlay network and a destination overlay network associated with the underlay data flow, wherein identifying includes retrieving, from one or more Ethernet Virtual Private Network (EVPN) databases, information identifying the source and destination overlay networks;
forming an enriched data flow record for each underlay data flow, the enriched data flow record including information identifying, for each underlay data flow, the underlay network source, the underlay network destination, the source overlay network, and the destination overlay network associated with each respective underlay data flow;
receiving, by a network analysis system, a request for information on a selected overlay data flow, wherein the request for information includes an overlay source identifier and an overlay destination identifier for the selected overlay data flow; and
querying the data store with the overlay source identifier and the overlay destination identifier to identify, based on the enriched data flow records, one or more network devices from the plurality of network devices in the underlay network that processed at least one packet in the selected overlay data flow.
|