Arista Networks, Inc.
Accelerated network traffic sampling using a network chip

Abstract:

A method and system for accelerating monitoring of network traffic. The method may include receiving, at a network chip of a network device, a network traffic data unit; selecting, by the network chip, the network traffic data unit based on a traffic sampling rate; processing, by the network chip, the network traffic data unit to obtain sample information; truncating the network traffic data unit to obtain a network traffic data unit portion; generating a flow sample header comprising the sample information; storing, in storage of the network chip, a flow sample comprising the flow sample header and the network traffic data unit portion; constructing a flow datagram comprising the flow sample and a plurality of other flow samples; sending the flow datagram to a collector; and clearing the flow sample and the plurality of other flow samples from the storage of the network chip.