Cecilia A Martin

US Patent:

20080225740, Sep 18, 2008

Filed:

Mar 15, 2007

Appl. No.:

11/724911

Inventors:

Cecilia Martin - Morgan Hill CA, US
John Huber - San Diego CA, US
Mei Wang - Mountain View CA, US
Jonathan Chang - Cupertino CA, US
Flavio Bonomi - Palo Alto CA, US
Sumeet Singh - Fremont CA, US

International Classification:

H04J 1/16

US Classification:

370252, 370389

Abstract:

A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.

US Patent:

20110087779, Apr 14, 2011

Filed:

Dec 17, 2010

Appl. No.:

12/971358

Inventors:

Cecilia MARTIN - Morgan Hill CA, US
John HUBER - San Diego CA, US
Mei WANG - Mountain View CA, US
Jonathan CHANG - Cupertino CA, US
Flavio BONOMI - Palo Alto CA, US
Sumeet SINGH - Fremont CA, US

Assignee:

CISCO TECHNOLOGY, INC. - San Jose CA

International Classification:

G06F 15/173

US Classification:

709224

Abstract:

A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.