Patent ID: 7779143

Claim:
A computer implemented method for detecting traffic patterns in a data network, the method comprising: partitioning keys of the data network into D sub-keys, wherein each key has |1≦i≦D| sub-keys, D refers to the number of sub-keys in a key, each key having a length of D; constructing D hash arrays, wherein each hash array i includes M i independent hash tables each having K buckets, with each of the buckets having an associated traffic total, wherein each of the D sub-keys corresponds with one of the D hash arrays, each of the sub-keys D i through D D corresponds to one of each of hash arrays i−D, each independent hash table M i corresponding to the ith hash array in a sequential hashing scheme, and each of the D sub-keys are associated with one bucket of each of the M i independent hash tables, wherein K refers to a number of buckets in each hash array, and wherein each of the keys corresponds with a single bucket of each of the M i independent hash tables; updating a traffic total of each bucket that corresponds with a key responsive to receiving traffic associated with the key; identifying high traffic buckets of the M independent hash tables having a traffic total greater than a threshold value; and detecting traffic patterns of the data network based on the high traffic buckets.