Patent ID: 9049034
Filing Date: 2015-06-02
Classification: H04L

Abstract:
1. A computer-implemented method of monitoring a multicast flow comprising: receiving, at a device in a network, first multicast packets of a multicast flow in a distribution tree; determining attributes for the first multicast packets of the multicast flow; characterizing the first multicast packets of the multicast flow as a baseline flow entity based on the determined attributes for the first multicast packets of the multicast flow; receiving, at the device, second multicast packets of the multicast flow in the distribution tree; determining attributes for the second multicast packets of the multicast flow; characterizing the second multicast packets of the multicast flow as a current flow entity; and comparing the attributes determined for the second multicast packets in the current flow entity against the attributes for the first multicast packets in the baseline flow entity to identify anomalies between the baseline flow entity and the current flow entity.