Patent ID: 9049111
Filing Date: 2015-06-02
Classification: H04L

Abstract:
1. A method, comprising: scanning a plurality of network entities to report traffic flow data that encapsulates network traffic data; selecting for reporting at least one network entity that transfers a largest amount of data among the plurality of network entities; receiving, at a NetFlow network traffic analyzer, a query of network traffic flow data over a certain time period for the selected at least one network entity; modifying the query to produce a plurality of sub-queries, wherein each of the sub-queries are based on different segments of time within the certain time period; executing at least one of the sub-queries; incrementally outputting results of each of said executed sub-queries as each of the sub-queries are completed; and iteratively performing the incremental outputting until all of the sub-queries are completed, wherein said incrementally outputting the results comprises immediately outputting the results of a sub-query when the sub-query is completed, wherein said immediately outputting the results of the sub-query further comprises generating a graphical chart illustrating the incremental results of the sub-query as the sub-query is completed, and wherein the query relates to traffic flow data from at least one network entity.