Patent ID: 8619614

Claim:
A device comprising: one or more processors to: determine that a traffic flow associated with received data is not identified, store, based on the traffic flow not being identified, a copy of the data, transmit the data from a first port of the device, receive other data based on the transmitting of the data from the device, identify the traffic flow associated with the data based on the other data, determine that the identified traffic flow comprises a particular type of traffic flow to be monitored, mirror the data, to form mirrored data, based on the identified traffic flow comprising the particular type of traffic flow, modify the mirrored data to cause the mirrored data to be associated with a second port of the device, the second port being different from the first port, and transmit, via the second port, the mirrored data to a monitoring appliance that is configured to monitor the particular type of traffic flow.