Patent ID: 8929236
Filing Date: 2015-01-06
Classification: H04L

Abstract:
1. A method for network flow analysis, comprising: receiving sample packets from a stream of packets over a time interval from a network element; aggregating the sample packets into a subclass of packets; determining a sample pool size of the stream of packets in the time interval, a number of sample packets received over the time interval, and a number of sample packets aggregated into the subclass of packets; calculating an effective sampling ratio (ESR) from the sample pool size of the stream of packets in the time interval and the number of sample packets received over the time interval; comparing the calculated ESR to a [historical ESR]numerical value to determine if the calculated ESR is within a predetermined range of the [historical ESR]numerical value; and calculating an extrapolated flow for the subclass of sample packets as a function of the calculated ESR and the number of sample packets aggregated into the subclass of packets when the calculated ESR is within the predetermined range of the [historical ESR]numerical value and calculating an extrapolated flow for the subclass of sample packets as a function of the [historical ESR]numerical value and the number of sample packets aggregated into the subclass of packets when the calculated ESR is outside the predetermined range of the [historical ESR]numerical value, wherein the numerical value is calculated as a function of a plurality of historical ESR values.