Patent attributes
A network device identifies elephant flows. The network device filters received network data according to an application-specific criteria and identifies the elephant flow from the filtered network data. To do so, the network device can employ a multi-stage filtering process to identify an elephant flow in the received network data. The network device separates the filtered network data into multiple macroflows using a first hash function, and identifies the macroflow with the highest rate. Then, the network device disaggregates the high rate macroflow into multiple microflows using a second hash function and identifies the highest rate microflow as the elephant flow. The network device maintains an elephant flow cache with entries for currently identified elephant flows. The network device may also take management actions on the elephant flows, and the management actions may be application specific.
