Patent ID: 11870649
Assignee: EXTREME NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 6:
7. A system, comprising:
a memory; and
a processor coupled to the memory and configured to:
maintain communication with a network component;
maintain a rule table comprising a first rule with a first plurality of identifiers and a first action for generating a first characteristic relating to a flow of packets, wherein the computing device and the network component are located at an edge of the network;
receive, from the network component, during a first period of time, a copy of a first network packet with a second plurality of identifiers;
determine that the second plurality of identifiers matches the first plurality of identifiers;
in response to the second plurality of identifiers of the first network packet matching the first plurality of identifiers of the first rule, perform the first action of the first rule to generate the first characteristic associated with the first period of time, based on the copy of the first network packet;
receive a copy of a second network packet during the first period of time, and determine a predicted baseline of normalcy for the first network parameter during a second period of time based on the copy of the second network packet and the first characteristic associated with the first period of time; and

determine that a second network parameter associated with the second period of time is an anomaly based on the predicted baseline of normalcy for the first network parameter, wherein the second network parameter is generated from a third packet received during the second period of time.