Dynamically determining packet sampling rates
View Patent ↗For dynamically determining packet sampling rates, a method including setting a packet sampling rate for one or more switch ports, collecting for an interval of time a plurality of statistics for the one or more switch ports, and adjusting the packet sampling rate in response to one or more of the plurality of statistics.
1. A method comprising:
setting a packet sampling rate for a plurality of switch ports;
collecting for an interval of time a plurality of statistics for the plurality of switch ports; and
adjusting the packet sampling rate in response to one or more of the plurality of statistics, wherein the packet sampling rate is adjusted based on a formula using a maximum port speed, an average packet length, a port count, and a maximum samples received per second.
2. The method of claim 1 , further comprising tracking the actual port utilization over time.
3. The method of claim 1 , further comprising tracking the average packet length over time.
4. The method of claim 1 , wherein the plurality of statistics includes one or more of average packet length, average port speed, maximum port utilization, port count, and actual samples received per second.
5. The method of claim 1 , further comprising adjusting the sampling rate automatically in response to a sample queue becoming greater than a threshold.
6. The method of claim 1 , further comprising adjusting the packet sampling rate in response to a sample rate percentage for a first port varying more than a threshold amount from a sample rate percentage for a second port.
7. The method of claim 1 , further comprising adjusting the packet sampling rate in response to a maximum sample per second rate for a first statistic gathering period varying more than a threshold amount from a maximum sample per second rate for a second statistic gathering period.
8. The method of claim 1 , further comprising:
measuring a sample wait time; and
adjusting the packet sampling rate in response to the sample wait time.
9. The method of claim 8 , further comprising triggering an early adjustment of the packet sampling rate in response to a sample wait time outside of a range.
10. The method of claim 1 , further comprising:
determining a maximum number of samples that can be processed per second; and
setting an initial packet sampling rate for a plurality of switch ports, wherein the initial packet sampling rate is calculated using the maximum number of samples that can be processed per second as a factor.
11. An apparatus comprising:
a sampling rate module that sets a packet sampling rate for a plurality of switch ports;
a statistics module that collects for an interval of time a plurality of statistics for the plurality of switch ports; and
an adjustment module that adjusts the packet sampling rate in response to one or more of the plurality of the statistics, wherein the packet sampling rate is adjusted based on a formula using a maximum port speed, an average packet length, a port count, and a maximum samples received per second.
12. The apparatus of claim 11 , further comprising a tracking module that tracks the actual port utilization over time.
13. The apparatus of claim 11 , wherein the plurality of statistics includes one or more of average packet length, average port speed, maximum port utilization, port count, and actual samples received per second.
14. The apparatus of claim 11 , wherein the adjustment module adjusts the sampling rate automatically in response to the statistics module detecting a sample queue becoming greater than a threshold.
15. The apparatus of claim 11 , wherein the adjustment module adjusts the packet sampling rate in response to the statistics module detecting a maximum sample per second rate for a first statistic gathering period varying more than a threshold amount from a maximum sample per second rate for a second statistic gathering period.
16. A computer-program product, the computer program product comprising a non-transitory computer-readable storage medium having executable code embodied therein, the executable code readable by a processor to:
set a packet sampling rate for a plurality of switch ports;
collect for an interval of time a plurality of statistics for the plurality of switch ports; and
adjust the packet sampling rate in response to one or more of the plurality of statistics, wherein the packet sampling rate is adjusted based on a formula using a maximum port speed, an average packet length, a port count, and a maximum samples received per second.
17. The computer-program product of claim 16 , further comprising executable code readable by the processor to track the actual port utilization over time.
18. The computer-program product of claim 16 , wherein the plurality of statistics includes one or more of average packet length, average port speed, maximum port utilization, port count, and actual samples received per second.
19. The computer-program product of claim 16 , further comprising executable code readable by the processor to adjust the sampling rate automatically in response to a sample queue becoming greater than a threshold.
20. The computer-program product of claim 16 , further comprising executable code readable by the processor to adjust the packet sampling rate in response to a maximum sample per second rate for a first statistic gathering period varying more than a threshold amount from a maximum sample per second rate for a second statistic gathering period.