Patent ID: 11949570
Assignee: KEYSIGHT TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. A non-transitory computer readable medium having stored thereon executable instructions that when executed by a processor of a computer control the computer to perform steps comprising:
receiving, as input at a network packet broker, network traffic flow data;
aggregating, from the network traffic flow data, network traffic flow data associated with a particular endpoint device over a predefined time period to generate Internet protocol (IP) flow feature vectors containing metadata parameters associated with one or more particular endpoint device;
providing the IP flow feature vector to a machine learning element in the network packet broker;
identifying, by the machine learning element, one or more anomalies existing in the metadata parameters included in the IP flow feature vector; and
automatically configuring one or more filter elements in the network packet broker in response to detecting the identified one or more anomalies of the IP flow feature vector.