Traffic analytics service for telemetry routers and monitoring systems

摘要

In one embodiment, a service converts a stream of network telemetry data into sketches. The stream of network telemetry data comprises a plurality of characteristics of traffic observed in a network. The service forms a time series of the sketches. The service performs anomaly detection on the time series of the sketches in part by calculating a joint distribution of ranks and frequencies of a portion of the characteristics at different points in time of the time series. The service sends an anomaly detection alert, when an anomaly is detected from the time series of the sketches.