Method for tracking source and destination internet protocol data
View Patent ↗In an IP network, tabulating the number of data packets received from and/or sent to a particular IP address over time can provide a mechanism by which it is possible to determine or predict overloading of a node or nodes in an IP data network. By selectively deleting data packets received from a suspect source address or inhibiting the transmission of data packets to a suspect destination address, network management and control can be readily accomplished.
1. A method comprising:
sending a message to a first router, the message instructs the first router to override previously stored data packets in a buffer with newly received data packets, the previously stored data packets associated with a time-based traffic measure,
wherein the first router is not a source router for the previously stored data packets, the first router directly interconnected by a first plurality of data paths to a first sub-plurality of interconnected routers from a plurality of interconnected routers, the message transmitted from a second router responsive to a determination that the time-based traffic measure exceeds a predetermined threshold, the determination based upon a tabulation at the second router, the tabulation comprising a plurality of source counts of IP data packets, each source count of IP data packets of the plurality of source counts of IP data packets indicative of a count of packets received from a particular IP source during a predetermined time interval, the plurality of source counts of IP data packets associated with every source that provides IP data packets to the second router.
2. The method of claim 1 , further comprising:
receiving a plurality of IP data packets at the second router, the second router directly interconnected by a second plurality of data paths to a second sub-plurality of interconnected routers from the plurality of interconnected routers.
3. The method of claim 1 , further comprising: tabulating the plurality of source counts of IP data packets.
4. The method of claim 1 , further comprising:
tabulating at the second router a plurality of destination counts of IP data packets, each destination count of IP data packets of the plurality of destination counts of IP data packets indicative of a count of packets routable to a particular IP destination address during the predetermined time interval.
5. The method of claim 1 , further comprising:
storing each of the plurality of source counts in a memory device for subsequent processing.
6. The method of claim 1 , further comprising:
determining that the time-based data traffic measure exceeds the predetermined threshold, the time-based traffic measure based upon a particular destination count of a plurality of destination counts.
7. The method of claim 1 , further comprising: reading the time-based traffic data measure from a memory device.
8. The method of claim 1 , further comprising: denying reception of IP data packets based upon the message.
9. The method of claim 1 , further comprising:
sending an alarm to all switches connected to a network comprising the second router, the alarm causes each of the switches to discard IP data packets addressed as being from the particular IP source.
10. A method comprising:
sending a message to a first router, the message instructs the first router to discard packets associated with a time-based traffic measure of packets and a particular IP destination,
wherein the first router is not a source router for the packets, the first router directly interconnected by a first plurality of data paths to a first sub-plurality of interconnected routers from a plurality of interconnected routers, the message transmitted from a second router responsive to a determination by the second router that the time-based traffic measure exceeds a predetermined threshold, the tabulation comprising a plurality of destination counts of IP data packets, each destination count of IP data packets of the plurality of destination counts of IP data packets indicative of a count of packets routable to the particular IP destination address during a predetermined time interval.
11. The method of claim 10 , further comprising:
receiving a plurality of IP data packets at the second router, the second router directly interconnected by a second plurality of data paths to a second sub-plurality of interconnected routers from the plurality of interconnected routers.
12. The method of claim 10 , further comprising:
tabulating the plurality of destination counts of IP data packets.
13. The method of claim 10 , further comprising:
tabulating at the second router a plurality of source counts of IP data packets, each source count of IP data packets of the plurality of source counts of IP data packets indicative of a count of packets received from a particular IP source during the predetermined time interval, the plurality of source counts of IP data packets associated with every source that provides IP data packets to the second router.
14. The method of claim 10 , further comprising:
storing each of the plurality of destination counts in a memory device for subsequent processing.
15. The method of claim 10 , further comprising:
determining that the time-based data traffic measure exceeds the predetermined threshold, the time-based traffic measure based upon a particular source count of a plurality of source counts.
16. The method of claim 10 , further comprising:
selectively discarding IP data packets received at the first router responsive to the determination that the time-based data traffic measure exceeds the predetermined threshold, the time-based traffic measure based upon a particular destination count of the plurality of destination counts.
17. The method of claim 10 ,
further comprising: selectively discarding IP data packets responsive to the message.
18. The method of claim 10 , further comprising: denying reception of IP data packets based upon the message.
19. The method of claim 10 , further comprising:
automatically polling a memory over time to monitor a rate at which packets are flowing through the second router, the message sent responsive to the rate.
20. The method of claim 10 , further comprising:
sending an alarm to all switches connected to a network comprising the second router, the alarm causes each of the switches to discard IP data packets addressed as being sent to the particular IP destination address.
21. A method comprising:
sending a message to a first router, the message instructs the first router to discard previously stored data packets in a buffer, the previously stored data packets associated with a time-based traffic measure, wherein the first router is not a source router for the previously stored data packets, the first router directly interconnected by a first plurality of data paths to a first sub-plurality of interconnected routers from a plurality of interconnected routers, the message transmitted from a second router responsive to a determination that the time-based traffic measure exceeds a predetermined threshold, the determination based upon a tabulation at the second router, the tabulation comprising a plurality of source counts of IP data packets, each source count of IP data packets of the plurality of source counts of IP data packets indicative of a count of packets received from a particular IP source during a predetermined time interval, the plurality of source counts of IP data packets associated with every source that provides IP data packets to the second router.