US 12,463,879 B2
Tag-based packet capture and query
Kanzhe Jiang, Los Altos Hills, CA (US); Zhao Dong, Sunnyvale, CA (US); Sandip Shah, Fremont, CA (US); and Shunjia Yu, San Jose, CA (US)
Assigned to ARISTA NETWORKS, INC., Santa Clara, CA (US)
Filed by Arista Networks, Inc., Santa Clara, CA (US)
Filed on Mar. 26, 2024, as Appl. No. 18/616,699.
Prior Publication US 2025/0310219 A1, Oct. 2, 2025
Int. Cl. H04L 43/028 (2022.01); H04L 12/46 (2006.01)
CPC H04L 43/028 (2013.01) [H04L 12/4633 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method performed by a network management system (NMS), the method comprising:
storing an association between a set of network device interfaces in a network managed by the NMS and a tag;
receiving a request to provision a packet capture session in the network, the request specifying a name of the packet capture session, the tag as a packet capture source, and a network element in the network as a packet capture destination; and
in response to the request:
identifying the set of network device interfaces associated with the tag using the stored association; and
transmitting, to each network device that has an interface in the set of network device interfaces, a device configuration that causes the network device to mirror network packets from the interface to the network element via a Layer 3 tunnel, wherein each network packet mirrored via the Layer 3 tunnel includes the name of the packet capture session and the tag in a tunnel protocol header of the network packet.