Jonathan D Chang

US Patent:

20160072685, Mar 10, 2016

Filed:

Nov 13, 2015

Appl. No.:

14/941124

Inventors:

- San Jose CA, US
John David HUBER - San Diego CA, US
Mei WANG - Mountain View CA, US
Jonathan CHANG - Cupertino CA, US
Flavio BONOMI - Palo Alto CA, US
Sumeet SINGH - Fremont CA, US

International Classification:

H04L 12/26
H04L 29/06

Abstract:

A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.