Patent ID: 11888738
Assignee: JUNIPER NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 12:
13. A system, comprising:
a network, the network having a plurality of network devices and one or more virtual networks executing on the network devices; and
processing circuitry connected to the network, the processing circuitry configured to perform operations comprising:
receiving underlay flow data from the network, the underlay flow data including information identifying an underlay source, an underlay destination, an overlay source and an overlay destination for each underlay data flow;
identifying, for each underlay data flow, a source virtual network and a destination virtual network associated with the underlay data flow, wherein identifying includes retrieving, from an Ethernet VPN (EVPN) database, a virtual network identifier for the source virtual network and a virtual network identifier for the destination virtual network;
forming an enriched data flow record for each underlay data flow, the enriched data flow record including information identifying the underlay source, the underlay destination and the virtual network identifiers for the source and destination virtual networks associated with each underlay data flow;
receiving, by a network analysis system, a request for information about a selected overlay data flow, wherein the request for information includes an overlay source identifier and an overlay destination identifier for the overlay data flow; and
querying the data store with the overlay source identifier and the overlay destination identifier to identify, based on the enriched data flow records, one or more network devices of the plurality of network devices that processed at least one packet in the selected overlay data flow.