Cisco Systems, Inc.
Distributed packet capture for network anomaly detection

Abstract:

Distributed packet capture for network anomaly detection may be provided. An anomaly may be detected at a first network device of a plurality of network devices. One or more target network devices of the plurality of network devices may be identified based on a property associated with the anomaly. A set of packets may be received from the one or more target network devices. A source of the anomaly may be determined based on the received set of packets.