US 12,355,645 B2
Aggregation of select network traffic statistics
David Anthony Hughes, Los Altos, CA (US); and Pawan Kumar Singh, Los Altos, CA (US)
Assigned to Hewlett Packard Enterprise Development LP, Spring, TX (US)
Filed by Hewlett Packard Enterprise Development LP, Spring, TX (US)
Filed on Feb. 9, 2023, as Appl. No. 18/166,735.
Application 18/166,735 is a continuation of application No. 17/161,286, filed on Jan. 28, 2021, granted, now 11,757,740.
Application 17/161,286 is a continuation of application No. 16/581,637, filed on Sep. 24, 2019, abandoned.
Application 16/581,637 is a continuation of application No. 15/180,981, filed on Jun. 13, 2016, granted, now 10,432,484, issued on Oct. 1, 2019.
Prior Publication US 2023/0188441 A1, Jun. 15, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 43/062 (2022.01); G06F 16/22 (2019.01); G06F 16/248 (2019.01); G06F 16/28 (2019.01); H04L 43/026 (2022.01); H04L 43/045 (2022.01); H04L 43/067 (2022.01)
CPC H04L 43/062 (2013.01) [G06F 16/22 (2019.01); G06F 16/248 (2019.01); G06F 16/284 (2019.01); H04L 43/026 (2013.01); H04L 43/045 (2013.01); H04L 43/067 (2013.01)] 21 Claims
OG exemplary drawing
 
1. A method for aggregating select network traffic statistics for a plurality of network appliances connected in a communication network, the method comprising:
receiving a first data flow comprising a first attribute value and a second data flow comprising a second attribute value;
building a hierarchical string by combining the first attribute value that is extracted from the first data flow as a source identifier and the second attribute value that is extracted from the second data flow as a destination identifier, the hierarchical string representing network traffic statistics collected for a network appliance in the plurality of network appliances with the hierarchical string comprising the first attribute value and the second attribute value;
generating an accumulating map that is updated in substantially real time,
the accumulating map comprising the hierarchical string and aggregated network metrics,
the accumulating map having a target number of entries for a specified time period and an eviction policy determining how information is aggregated once the accumulating map reaches its target number of entries for the specified time period,
the eviction policy of the accumulating map comprising:
identifying lower level information and higher level information of the hierarchical string in a first record, the lower level information comprising the source identifier or the destination identifier of the hierarchical string, and the higher level information comprising a combination of attributes of the source identifier or the destination identifier, and
in response to identifying a second record with a same higher level information, aggregating the first record and second record as a combined record and removing the lower level information from the combined record;
the first record and the second record being evicted from the accumulating map automatically at the specified time period in accordance with the eviction policy and the combined record remaining in the accumulating map; and
transmitting the accumulating map to a network information collector in communication with the network appliance.