Methods, systems, and devices for software defined network monitoring

1. A device, comprising:

a processing system including a processor; and

a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:

determining a group of coefficients for a digital filter;

configuring the digital filter according to the group of coefficients;

determining and configuring processing a group of statistics associated with a group of data flows traversing a communication network utilizing a group of processors, wherein a portion of the group of data flows are processed utilizing the digital filter;

determining a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination; and

based on the first determination, identifying a group of instructions for a group of network devices.

2. The device of claim 1 , wherein the operations further comprise identifying an event in the communication network based on measurements associated with the group of data flows.

3. The device of claim 1 , wherein the digital filter and the group of processors are configured by one of a software defined network (SDN) controller remotely and a smart onboard (SON) controller locally, wherein the group of network devices includes the SDN controller.

4. The device of claim 1 , wherein the operations further comprise identifying a change in first data traffic to a communication device associated with a first data flow from the group of data flows based on the first determination.

5. The device of claim 4 , wherein the operations comprise determining and mitigating one of a denial of service (DOS) attack and a distributed denial of service (DDOS) attack on the communication device associated with the first data flow based on the change in first data traffic.

6. The device of claim 5 , wherein the operations comprise providing first instructions from the group of instructions to a one of a SDN controller and a SON controller to indicate an action that include one of re-routing second data traffic from the communication device and dropping packets from the second data traffic.

7. The device of claim 1 , wherein the digital filter comprises a group of filters with different characteristics including a low-pass characteristic, a high-pass characteristic, a band-pass characteristic, and a band-stop characteristic.

8. The device of claim 1 , wherein the operations comprise:

identifying an increase of flow size associated with a second data flow from the group of data flows over a time period based on the first determination; and

splitting the second data flow into the second data flow and a third data flow to decrease the flow size associated with the second data flow.

9. The device of claim 8 , wherein the operations comprise determining a lower quality of service (QoS) associated with a second data flow with the increase of flow size resulting in a second determination, wherein the splitting of the second data flow comprises splitting the second data flow based on the second determination.

10. The device of claim 1 , wherein the operations comprise adjusting the coefficients of the digital filter based on the first determination.

11. The device of claim 1 , wherein the operations comprise adaptively configuring of the statistical threshold based on the first determination.

12. A non-transitory, machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:

identifying a group of data flows, wherein each of the group of data flows traverse a communication network;

configuring a digital filter for each data flow of the group of data flows;

determining and configuring processing a statistic for each data flow resulting in a group of statistics utilizing a group of processors, wherein a portion of the group of data flows are processed utilizing the digital filter;

determining a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination; and

based on the first determination, identifying a group of instructions for a group of network devices.

13. The non-transitory, machine-readable medium of claim 12 , wherein the operations further comprise identifying a change in first data traffic to a communication device associated with a first data flow from the group of data flows based on the first determination.

14. The non-transitory, machine-readable medium of claim 13 , wherein the operations comprise determining and mitigating one of a denial of service (DOS) attack and a distributed denial of service (DDOS) attack on the communication device associated with the first data flow based on the change in first data traffic.

15. The non-transitory, machine-readable medium of claim 13 , wherein the operations further comprise identifying an event in the communication network based on measurements associated with the group of data flows.

16. The non-transitory, machine-readable medium of claim 13 , wherein the digital filter and the group of processors are configured by one of a software defined network (SDN) controller remotely and a smart onboard (SON) controller locally, wherein the group of network devices includes the SDN controller.

17. The non-transitory, machine-readable medium of claim 13 , wherein the operations comprise providing first instructions from the group of instructions to one of a SDN controller and a SON controller to indicate an action that includes one of re-routing second data traffic from the communication device and dropping packets from the second data traffic, wherein the group of network devices comprises a software defined network (SDN) controller.

18. The non-transitory, machine-readable medium of claim 12 , wherein the digital filter comprises a group of filters with different characteristics including a low-pass characteristic, a high-pass characteristic, a band-pass characteristic, and a band-stop characteristic.

19. A method, comprising:

determining, by a processing system including a processor, a group of coefficients for a digital filter;

configuring, by the processing system, the digital filter according to the group of coefficients;

determining and configuring processing, by the processing system, a group of statistics associated with a group of data flows traversing a communication network utilizing a group of processors, wherein a portion of the group of data flows are processed utilizing the digital filter;

determining, by the processing system, a first statistic from the group of statistics does not satisfy a statistical threshold resulting in a first determination; and

based on the first determination, identifying, by the processing system, a group of instructions for a group of network devices.

20. The method of claim 19 , comprising:

identifying, by the processing system, a change of flow size associated with a first data flow from the group of data flows over a time period based on the first determination; and

splitting, by the processing system, the first data flow into the first data flow and a second data flow to decrease the flow size associated with the first data flow.