Patent Document ID: 20160294647
Application ID: 15176316
Patent Status: 0

Claim One:
1. A method, in a data processing system comprising a processor and a memory, for determining an event rate, the method comprising: sampling, by the data processing system, a sequence of data packets at least by performing a mirroring of data packets from a plurality of normal ports of a network forwarding device to a mirror port of the network forwarding device from which the data packets are randomly sampled as a result of a number of data packets mirrored to the mirror port exceeding a saturation limit of the mirror port, to generate a set of sampled data packets, wherein at least a subset of the sampled data packets in the set of sampled data packets have associated data packet sequence values indicating a position of the sampled data packets within the sequence of data packets; grouping, by the data processing system, the sampled data packets into a plurality of data packet groups based on a common characteristic of the data packets; determining, by the data processing system, for each data packet group, sequence values of sampled data packets associated with the data packet group; and calculating, by the data processing system, for each data packet group, an estimated data packet flow rate based on the sequence values of the sampled data packets associated with the data packet group and the total number of data packets in the sequence of data packets.