Abstract: A method for selectively processing a packet flow using a flow inspection engine is disclosed. The method includes receiving, by at least one hardware data plane processor component in a network packet broker, a plurality of packets associated with a packet flow, and forwarding, by the at least one hardware data plane processor component to at least one flow inspection engine, a copy of at least a portion of one or more of the initial packets of the packet flow.

Abstract: Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

Abstract: Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

Abstract: A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

Abstract: A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

Abstract: A method for automatic configuration and control of a remote inline network monitoring probe includes receiving packets from a router or firewall associated with a network being monitored by the inline network monitoring probe. A source medium access control (MAC) and a source IP address are extracted from a first packet of the packets received from the router or firewall. The method further includes storing the source IP address and the source MAC address in memory of the inline network monitoring probe. The method further includes changing a MAC address of the inline network monitoring probe to the source MAC address. The method includes assigning the source IP address to the inline network monitoring probe. The method further includes using the source MAC address and the source IP address to communicate with a remote network monitoring control center.