DETERMINING DATA FLOWS TO AN INGRESS ROUTER WITH DATA FLOWS RECEIVED AT AN EGRESS ROUTER

摘要

A method for identifying an ingress router with collected IP network traffic data captured at an egress router is described. The method includes receiving, at a learning database, an ingress network traffic data flow exported from the ingress router and an ingress interface. The method then proceeds to receive, at a flow processing module, an egress network traffic data flow exported from the egress router and an egress interface. The method then enables the flow processing module to query the learning database with the egress network traffic data flow. The method determines the ingress router corresponding to the egress network traffic data flow, when the learning database matches the egress network traffic data flow with the ingress network traffic data flow.