Patent Document ID: 8045470
Application ID: 11921367
Patent Flag: 1

Claim One:
1. A system for a sample-analysis of data comprising a multitude of data packets, the system comprising: an input of a monitoring system receiving from a network data from which a parent population number (N) of data packets is provided, a sampling device the monitoring system setting a sample number (n), the sampling device sampling a sample group with the sample number (n) of data packets from the parent population number (N) of data packets, a classification device of the monitoring system classifying the sample group by classification rules into sample-flow-groups (f 1 , f 2 , f 3. . .) representing different flows, each sample-flow-group (f 1 , f 2 , f 3. . .) consisting of a sample-flow-quantity (n f1 , n f2 , n f3. . .) of data packets, a computing device of the monitoring system determining sample-flow-mean-sizes (μ f1 , μ f2 , μ f3. . .) defined by mean data size of the data packets in each sample-flow-group (f 1 , f 2 , f 3. . .), the computing device determining sample-flow-variances (v f1 , v f2 , v f3. . .) defined by a variance of data size of the data packets in each sample-flow-group (f 1 , f 2 , f 3. . .), determining sample-flow-ratios (p f1 , p f2 , p f3. . .) defined by the sample-flow-quantity (n f1 , n f2 , n f3. . .) in proportion to the sample number (n), the computing device calculating an estimated flow size (Sum f ) defined by an estimated sum of data sizes of data packages in a flow of the parent population number (N) of data packets, and the computing device calculating a variance (V[Sum f ]) of the estimated flow size (Sum f ), wherein for the calculating steps the parent population number (N), the sample number (n) and at least one of the sample-flow-ratios (p f1 , p f2 , p f3. . .), the sample-flow-mean-sizes (μ f1 , μ f2 , μ f3. . .), and the sample-flow-variances (v f1 , v f2 , v f3. . .) are used, comprising the step of determining at least one of parent population flow-ratios (P f1 , P f2 , P f3. . .), parent population flow-mean-sizes (M f1 , M f2 , M f3. . .), and parent population flow-variances (V f1 , V f2 , V f3. . .) for each flow in the parent population number (N) of data packets, wherein the estimated flow size (Sum f ) is defined by Sum f = ⁢ N f · M f = ⁢ N · p f · μ f = ⁢ N · n f n · 1 n f · ∑ i = 1 n f ⁢ x f , i = ⁢ N n · ∑ i = 1 n f ⁢ x f , i and N f denotes a determined number of data packets belonging to one flow f in the parent population number (N) of data packets, M f denotes the determined parent population flow-mean-sizes (M f1 , M f2 , M f3. . .), μ f denotes the sample-flow-mean-sizes (μ f1 , μ f2 , μ f3. . .), N denotes the parent population number (N), p f denotes the sample-flow-ratios (p f1 , p f2 , p f3. . .), n denotes the sample number (n), n f denotes the sample-flow-quantities (n f1 , n f2 , n f3. . .) and x f denotes the data size of a data packet belonging to one sample-flow-group of the sample-flow-groups (f 1 , f 2 , f 3. . .), and wherein the variance (V[Sum f ]) of the estimated flow size (Sum f ) is calculated by V ⁡ [ Sum f ] = N 2 n · ( ( V f + M f 2 ) · P f - M f 2 · P f 2 ) and V f corresponds to the determined parent population flow-variances (V f1 , V f2 , V f3. . .) and P f denotes the determined parent population flow-ratios (P f1 , P f2 , P f3. . .).