Abstract: The present technology addresses deficiencies associated with common practices for handling out of order data in a streaming data database. An aspect of the present technology is avoid storing out of order data in a snapshot but just store the out of order data as additional data linked to the temporal graph. The present technology receives out of order data and records a modification time for the data and a next modification time for the data that equals a timestamp of data previously stored in the database. If there is also data in the database for a time earlier than the timestamp of the out of order data, the earlier data is adjusted so that its next modification time matches the timestamp of the out of order data.

Abstract: In one embodiment, present disclosure discloses a method for partitioning a temporal graph is described. Embodiments of the method comprises creating a plurality of storage blocks for each type of the different types of graph elements based on predefined label groups, each of the plurality of storage blocks configured to store the telemetry information generated in a corresponding predefined time-range, recreating each of the plurality of storage blocks upon expiry of a configurable rollover time, and sharding each of the plurality of storage blocks into a plurality of shards based on a configurable sharding count.

Abstract: The present technology addresses deficiencies associated with common practices for handling out of order data in a streaming data database. An aspect of the present technology is avoid storing out of order data in a snapshot but just store the out of order data as additional data linked to the temporal graph. The present technology receives out of order data and records a modification time for the data and a next modification time for the data that equals a timestamp of data previously stored in the database. If there is also data in the database for a time earlier than the timestamp of the out of order data, the earlier data is adjusted so that its next modification time matches the timestamp of the out of order data.

Abstract: The present technology addresses deficiencies associated with common practices for handling out of order data in a streaming data database. An aspect of the present technology is avoid storing out of order data in a snapshot but just store the out of order data as additional data linked to the temporal graph. The present technology receives out of order data and records a modification time for the data and a next modification time for the data that equals a timestamp of data previously stored in the database. If there is also data in the database for a time earlier than the timestamp of the out of order data, the earlier data is adjusted so that its next modification time matches the timestamp of the out of order data.

Abstract: In one embodiment, present disclosure discloses a method for partitioning a temporal graph is described. Embodiments of the method comprises creating a plurality of storage blocks for each type of the different types of graph elements based on predefined label groups, each of the plurality of storage blocks configured to store the telemetry information generated in a corresponding predefined time-range, recreating each of the plurality of storage blocks upon expiry of a configurable rollover time, and sharding each of the plurality of storage blocks into a plurality of shards based on a configurable sharding count.

Abstract: In one embodiment, present disclosure discloses a method for partitioning a temporal graph is described. Embodiments of the method comprises creating a plurality of storage blocks for each type of the different types of graph elements based on predefined label groups, each of the plurality of storage blocks configured to store the telemetry information generated in a corresponding predefined time-range, recreating each of the plurality of storage blocks upon expiry of a configurable rollover time, and sharding each of the plurality of storage blocks into a plurality of shards based on a configurable sharding count.

Abstract: The present technology addresses deficiencies associated with common practices for handling out of order data in a streaming data database. An aspect of the present technology is avoid storing out of order data in a snapshot but just store the out of order data as additional data linked to the temporal graph. The present technology receives out of order data and records a modification time for the data and a next modification time for the data that equals a timestamp of data previously stored in the database. If there is also data in the database for a time earlier than the timestamp of the out of order data, the earlier data is adjusted so that its next modification time matches the timestamp of the out of order data.

Abstract: In one embodiment, present disclosure discloses a method for partitioning a temporal graph is described. Embodiments of the method comprises creating a plurality of storage blocks for each type of the different types of graph elements based on predefined label groups, each of the plurality of storage blocks configured to store the telemetry information generated in a corresponding predefined time-range, recreating each of the plurality of storage blocks upon expiry of a configurable rollover time, and sharding each of the plurality of storage blocks into a plurality of shards based on a configurable sharding count.

Abstract: A method for performing network analysis comprising: receiving telemetry information for a computer network, the telemetry information comprising network device state information for internetworking devices in the computer network and network traffic flow information for data packet flows through the computer network; transforming the telemetry information into a temporal graph that is digitally stored in computer memory, wherein the temporal graph comprises a plurality of graph elements include a plurality of vertices and a plurality of edges, each of the vertices representing an internetworking device, each of the edges representing one or more portions of a data packet flow; digitally storing graph element metadata corresponding to the plurality of graph elements in a structured format, the graph element metadata comprising temporal data for each graph element of the plurality of graph elements, the temporal data comprising a modification time value specifying a modification time that is associated with ea

Abstract: A method for performing network analysis comprising: receiving telemetry information for a computer network, the telemetry information comprising network device state information for internetworking devices in the computer network and network traffic flow information for data packet flows through the computer network; transforming the telemetry information into a temporal graph that is digitally stored in computer memory; receiving, from a client computing device, a request for network analytics information for the computer network; in response to receiving the request for network analytics information, generating network analytics information for the computer network based on the temporal graph and sending the network analytics information to the client computing device.

Abstract: Methods and apparatuses for autonomous relay of statistics from a network device to a network controller of a software-defined networking (SDN) network are described. The network controller is operative to transmit a message including a statistics profile, where the statistics profile includes a type of data to be collected associated with a behavior of a flow at the network device and a set of one or more criteria; where the message causes the network device to transmit a statistics message associated with one or more flows when the one or more flows satisfy at least one criterion from the set of one or more criteria, where the statistics message includes data collected at the network device associated with a behavior of the one or more flows as identified by the type of data to be collected included in the statistics profile.

Abstract: A method for performing network analysis comprising: receiving telemetry information for a computer network, the telemetry information comprising network device state information for internetworking devices in the computer network and network traffic flow information for data packet flows through the computer network; transforming the telemetry information into a temporal graph that is digitally stored in computer memory, wherein the temporal graph comprises a plurality of graph elements include a plurality of vertices and a plurality of edges, each of the vertices representing an internetworking device, each of the edges representing one or more portions of a data packet flow; digitally storing graph element metadata corresponding to the plurality of graph elements in a structured format, the graph element metadata comprising temporal data for each graph element of the plurality of graph elements, the temporal data comprising a modification time value specifying a modification time that is associated with ea

Abstract: A method for performing network analysis comprising: receiving telemetry information for a computer network, the telemetry information comprising network device state information for internetworking devices in the computer network and network traffic flow information for data packet flows through the computer network; transforming the telemetry information into a temporal graph that is digitally stored in computer memory; receiving, from a client computing device, a request for network analytics information for the computer network; in response to receiving the request for network analytics information, generating network analytics information for the computer network based on the temporal graph and sending the network analytics information to the client computing device.

Abstract: A method, in a network controller of a control plane in a software defined network (SDN) coupled to a network element (NE) of a data plane in the SDN, of resynchronizing forwarding table entries of the NE according to forwarding table entries of the network controller is disclosed. The method includes causing the NE to update a first subset of forwarding table entries from a set of one or more of forwarding table entries to include a post-synchronization indicator. The method continues with causing the NE to delete, following the update of the first subset of forwarding table entries, a second subset of zero or more forwarding table entries from the set of forwarding table entries, where each forwarding table entry from the second subset includes a pre-synchronization indicator.

Abstract: Methods and apparatuses for autonomous relay of statistics from a network device to a network controller of a software-defined networking (SDN) network are described. The network controller is operative to transmit a message including a statistics profile, where the statistics profile includes a type of data to be collected associated with a behavior of a flow at the network device and a set of one or more criteria; where the message causes the network device to transmit a statistics message associated with one or more flows when the one or more flows satisfy at least one criterion from the set of one or more criteria, where the statistics message includes data collected at the network device associated with a behavior of the one or more flows as identified by the type of data to be collected included in the statistics profile.

Abstract: A method in a network controller coupled to a network device of a software defined network (SDN), of modifying forwarding table entries of the network device is described. The method includes constructing a first message including a flow profile associated with a plurality of flows and an install profile command, where the flow profile includes a flow profile identifier, and a set of default parameter values that are common for the plurality of flows. The method continues with causing the network device to install the flow profile associated with the plurality of flows.

Abstract: A method in a network controller of a control plane in a software defined network (SDN) coupled to a plurality of network elements (NEs) of a data plane in the SDN is described. The method includes causing the plurality of NEs to install one or more packet handling rules for a selected type of packet so that the NEs forward only a subset of data for each packet of the selected type to the network controller. The method further includes receiving the subset of data for each packet of the selected type and composing a whole packet of the selected type that includes the subset of data.

Abstract: A method, in a network controller of a control plane in a software defined network (SDN) coupled to a network element (NE) of a data plane in the SDN, of resynchronizing forwarding table entries of the NE according to forwarding table entries of the network controller is disclosed. The method includes causing the NE to update a first subset of forwarding table entries from a set of one or more of forwarding table entries to include a post-synchronization indicator. The method continues with causing the NE to delete, following the update of the first subset of forwarding table entries, a second subset of zero or more forwarding table entries from the set of forwarding table entries, where each forwarding table entry from the second subset includes a pre-synchronization indicator.

Abstract: A method in a network controller of a control plane in a software defined network (SDN) coupled to a plurality of network elements (NEs) of a data plane in the SDN is described. The method includes causing the plurality of NEs to install one or more packet handling rules for a selected type of packet so that the NEs forward only a subset of data for each packet of the selected type to the network controller. The method further includes receiving the subset of data for each packet of the selected type and composing a whole packet of the selected type that includes the subset of data.