Analysis of network traffic
Embodiments generally disclosed herein include a computer-implemented method for monitoring and correlating network traffic data associated with a primary network that is in communication with a plurality of secondary networks. The method generates a network traffic data set by monitoring network traffic between the primary network and the plurality of secondary networks. The method also determines a mapping of network connectivity by monitoring inter-network routing information between the primary network and the plurality of secondary networks. In addition, the method generates a traffic measurement data set by monitoring network utilization statistics between the primary network and the plurality of secondary networks. With the collected data sets, the method then calculates a relational network mapping between the primary network and the plurality of secondary networks by correlating the network traffic data set, the mapping of network connectivity, and the traffic measurement data set.
1. A system comprising:
a primary network comprising a plurality of network devices selected from the group consisting of: switches, routers, servers, and gateways; wherein the primary network is connected to a plurality of secondary networks, wherein the plurality of secondary networks comprises a first customer network directly connected to the primary network; and
a network correlator module stored as instructions in memory and executable by one or more of said network devices, the network correlator module configured to perform an impact analysis of disconnecting the first customer network from the primary network by determining which secondary networks are connected to the primary network only via an indirect connection via the first customer network such that the secondary networks would lose their indirect connection with the primary network if the first customer network was disconnected from the primary network.
2. A system as recited in claim 1 , wherein the network correlator module is further configured to:
determine a first set of Autonomous System Numbers (ASNs) associated with each secondary network that are reachable by the primary network via an indirect connection with the first customer network;
determine a second set of ASNs associated with each secondary network that are reachable by the primary network not via an indirect connection with the first customer network; and
compare the first set with the second set and identifying nonoverlapping ASNs.
3. A system as recited in claim 2 further comprising:
a network flow module configured to generate a network traffic data set by monitoring network traffic between the primary network and the plurality of secondary networks;
a network connectivity module configured to determine a mapping of network connectivity by monitoring inter-network routing information between the primary network and the plurality of secondary networks; and
wherein the network correlator module is further configured to calculate a relational network mapping between the primary network and the plurality of secondary networks by correlating the network traffic data set and the mapping of network connectivity.
4. A system as recited in claim 3 further comprising:
a graphical user interface; and
wherein the network correlator module is further configured to render, in the graphical user interface, a graphical display of:
the relational network mapping between the primary network and the plurality of secondary networks; and
based on the impact analysis, secondary networks that would become unreachable if the first customer network were to be disconnected from the primary network.