Transcript Adaptive Software Defined

Adaptive Software Defined
Monitoring of Large-scale Networks
Hitachi Data Systems and VSS Monitoring
February 2014
© 2003-2013 VSS Monitoring. All rights reserved.
Network Owner Challenges
Increasing Volume and Velocity


Increase MTTR for performance and
security incidents
Drive up monitoring costs
Sophisticated Threats

Unknown Vulnerabilities
Complexity & Congestion


End User Experience, SLAs
Application/Network Performance
Intelligence Acceleration

Security Agility & Speed
1.5 billion users by
2013
3.6 Exabytes per
month in 2014
10’s of Millions
billed customers
Network generates a huge
amount of real-time data.
HDS-VSS Solution
Software Defined Monitoring fabric delivers an accelerated network data
solution with unparalleled intelligence and adaptability.
2
Line rate preprocessing and capture of network
data with the VSS distributed NPB platform
1 Persistent intelligence with
the HDS customizable,
adaptive controller
Metadata and/
or Packet data
Policy Triggers
HSDP
Hitachi Stream Data Processor
Adaptive SDM
Fabric
CAPTURE
IDENTIFICATION
CORRELATION
ANALYSIS
ADAPTED CAPTURE
VSS Network Packet Broker Platform
3 Refined capture stored in
open format with metadata
4 Analysis/Forensics
METADATA
OPEN FORMAT
Network
Hitachi Content Platform
QUICK RETRIEVAL
APP NEUTRAL
Analytics Apps
An open capture format allows
analysis by tools of choice.
Joint Solution Advantages
Hitachi Data Systems
VSS Monitoring
100% failsafe network access
 Non-intrusive bump in wire
 Self-healing network broker mesh
 Cross-WAN breadth
Real time pre-processing
Single pane management
High-speed batch execution
 Concurrent processes
 Model learning
 Pattern detection
 Triggers/Warnings/Data Extraction
Adaptive Software Defined Monitoring



Automatically trigger targeted capture/redirection based on network posture
Shorter MTTR by getting the right data to the right tool in real time
Reduce monitoring costs with efficient resourcing
Democratized Network Analytics




Store data independent of analytics application in HDS content platform
Metadata accelerates retrieval
Analyze data with applications of choice
Reduce costs with commodity solutions/virtualized probes
Threshold monitoring and targeted capture in EPC network
Warnings/Trigger query in response to microburst
Triggers
Warnings
HSDP
Warning Generation
HSDP
Trigger Generation
vCapacity files
Log
Server
PCAPs
Staging server



Online Parameterized
Model Learning
FTP -> REST/HTTP
Triggered extract of PCAP /
packet level metadata
Triggered PCAP Copy to HCP
Metadata
Time of Capture
Location of Capture
EPC Interface
PCAP
© 2003-2013 VSS Monitoring. All rights reserved.
HCP query
PCAP/metadata
Wireshark analysis
5
Summary
SDM solution accelerates network intelligence and refines monitoring.
Open packet storage supports virtualized analytics/probes.




Reduce response times
Proactively address threats
Ensure uptime and SLAs
Reduce CAPEX/OPEX
Persistent Intelligence.
Targeted Capture.