AN IMPROVED STREAMING METHOD AND SYSTEM FOR PROCESSING NETWORK METADATA

摘要

An improved method and system for processing network metadata is described. Network metadata may be processed by dynamically instantiated executable software modules which make policy based decisions about the character of the network metadata and about presentation of the network metadata to consumers of the information carried by the network metadata. The network metadata may be type classified and each subclass within a type may be mapped to a definition by a unique fingerprint value. The fingerprint value may be used for matching the network metadata subclasses against relevant policies and transformation rules. For template based network metadata such as NetFlow v9 an embodiment of the invention can constantly monitor network traffic for unknown templates capture template definitions and informs administrators about templates for which custom policies and conversion rules do not exist. Conversion modules can efficiently convert selected types and/or subclasses of network metadata into alternative metadata formats.