US 9,813,447 B2
Device and related method for establishing network policy based on applications
Michael Rash, Mount Airy, MD (US); Markus Nispel, Frankfurt (DE); Jamie Woodhead, Pelham, NH (US); and Richard Graham, Derry, NH (US)
Assigned to Extreme Networks, Inc., San Jose, CA (US)
Filed by Extreme Networks, Inc., San Jose, CA (US)
Filed on Mar. 15, 2013, as Appl. No. 13/836,048.
Prior Publication US 2014/0282823 A1, Sep. 18, 2014
Int. Cl. H04L 29/06 (2006.01)
CPC H04L 63/20 (2013.01) 10 Claims
OG exemplary drawing
 
1. A packet forwarding device of a network system including a plurality of network infrastructure devices, the packet forwarding device comprising a hardware processor and:
a. one or more ports configured to, using the hardware processor, receive packets including frames and to send the frames to one or more other devices of the plurality of network infrastructure devices;
b. one or more network policies for receiving and sending packets, wherein one of the one or more policies is to minor selectable ones of the frames to an application identification appliance of the plurality of network infrastructure devices; and
c. a network policy controller in communication with a packet forwarding function configured for, using the hardware processor:
detecting one or more computer applications by:
comparing the frames to known signatures associated with the one or more computer applications,
calculating a signature-based score for each of the one or more computer applications based on the comparison,
extracting metadata associated with the frames,
calculating a statistics-based score based on a statistical analysis of the extracted metadata, and
calculating a reliability score for each of the one or more computer applications by combining the signature-based score and the statistics-based score in a weighted average, and
changing the one or more network policies for receiving and sending packets based on information associated with one or more computer applications detected running on the network system, wherein the packet forwarding device is only any one of switch, a router, or a switch-router.