Abstract: Methods, systems, and computer program products for monitoring tunneled Internet protocol (IP) traffic on a high bandwidth IP network are disclosed. According to one method, a copy of a tunneled IP packet traversing an IP communications network is generated. The packet may include a payload having tunneled protocol address information. The tunneled protocol address information and the payload portion of the copied IP packet is read. The packet is distributed, using the tunneled protocol address information, to a function for providing at least one of packet classification and network monitoring service for the packet.

Abstract: Methods, systems, and computer readable media for collecting data from network traffic traversing a high speed Internet protocol communication links are disclosed. According to one method, a plurality of packet classification filters is cascaded to form n stages of the packet classification filters connected to series, where n is an integer of at least two. At the nth stage, network traffic copied from a high speed IP communication link is received and first packet classification processing is performed to identify an attribute of each packet of the network traffic. If the attribute is identifiable at the nth stage and is of interest for a first type of data collection processing, the first type of data collection processing is performed for the packet.

Abstract: Methods, systems, and computer program products for monitoring tunneled Internet protocol (IP) traffic on a high bandwidth IP network are disclosed. According to one method, a copy of a tunneled IP packet traversing an IP communications network is generated. The packet may include a payload having tunneled protocol address information. The tunneled protocol address information and the payload portion of the copied IP packet is read. The packet is distributed, using the tunneled protocol address information, to a function for providing at least one of packet classification and network monitoring service for the packet.