Patent ID: 8879558

Claim:
A method, comprising: receiving, by one or more processors of a traffic analysis device, a first request for information regarding ports that are local to a network device; generating, by the one or more processors and based on the first request, a second request for information regarding one or more ports associated with the network device; receiving, by the one or more processors, the information regarding the one or more ports associated with the network device based on the second request; outputting, by the one or more processors and to the network device, filter information associated with a particular port of the one or more ports associated with the network device, the filter information specifying one or more conditions associated with traffic of interest; receiving, by the one or more processors, from the network device, and based on the outputted filter information, information regarding traffic received or sent by the network device via the particular port, the traffic satisfying the one or more conditions associated with the traffic of interest; and storing or outputting, by the one or more processors, a representation of at least a portion of the received information regarding the traffic satisfying the one or more conditions associated with the traffic of interest.