Increasing data availability

Abstract

Systems, methods, and related technologies for increasing data availability. The determining of one or more recommendations to improve classification may include accessing network traffic from a network and selecting an entity. One or more values associated with one or more properties associated with the entity may be determined. The one or more values may be accessed from the network traffic. The entity may be classified and in response to the classification meeting a condition, one or more properties that are unavailable in the network traffic may be determined. A data source associated with the one or more properties for which a value is not present in the network traffic may be determined and the data source associated with the one or more properties that are unavailable in the network traffic may be stored.

What is claimed is: 
     
         1 . A method comprising:
 accessing network traffic from a network;   selecting an entity;   determining one or more values associated with one or more properties associated with the entity, wherein the one or more values are accessed from the network traffic;   determining a classification of the entity;   in response to the classification meeting a condition, determining, by a processing device, one or more properties that are unavailable in the network traffic;   determining a data source associated with the one or more properties for which a value is not present in the network traffic;   storing an identification of the data source associated with the one or more properties that are unavailable in the network traffic; and   performing a remediation action with respect to the data source associated with the one or more properties that are unavailable in the network traffic.   
     
     
         2 . The method of  claim 1 , wherein the action with respect to the data source associated with the one or more properties that are unavailable in the network traffic comprises at least one of changing a configuration of one or more network devices, changing a configuration switched port analyzer (SPAN) or mirror port, adding network infrastructure login information, or getting an updated profile library. 
     
     
         3 . The method of  claim 1 , wherein the one or more properties that are unavailable in the network traffic is associated with at least one of dynamic host control protocol traffic (DHCP), active scanning, hypertext transfer protocol (HTTP) traffic, a profile library being out of date, media access control (MAC) address, unidirectional traffic, or an address resolution protocol (ARP) table. 
     
     
         4 . The method of  claim 1 , wherein the condition comprises at least one of a classification confidence value associated with the classification being below a threshold, a plurality of classifications associated with the entity, or an unknown classification of the entity. 
     
     
         5 . The method of  claim 1  further comprising:
 displaying a notification comprising a reference to the data source associated with the one or more properties that are unavailable in the network traffic. 
 
     
     
         6 . The method of  claim 5 , wherein the notification comprises a message to perform a manual classification of the entity. 
     
     
         7 . The method of  claim 1 , further comprising:
 accessing information associated with the entity from a system; and   determining one or more properties that are unavailable in the information from the system.   
     
     
         8 . A system comprising:
 a memory; and   a processing device, operatively coupled to the memory, to:
 access network traffic from a network; 
 select an entity; 
 determine one or more values associated with one or more properties associated with the entity, wherein the one or more values are accessed from the network traffic; 
 determine a classification of the entity; 
 in response to the classification meeting a condition, determine one or more properties that are unavailable in the network traffic; 
 determine a data source associated with the one or more properties for which a value is not present in the network traffic; and 
 store an identification of the data source associated with the one or more properties that are unavailable in the network traffic; and 
 perform a remediation action with respect to the data source associated with the one or more properties that are unavailable in the network traffic. 
   
     
     
         9 . The system of  claim 8 , wherein the action respect to the data source associated with the one or more properties that are unavailable in the network traffic comprises at least one of changing a configuration of one or more network devices, changing a configuration switched port analyzer (SPAN) or mirror port, adding network infrastructure login information, getting an updated profile library. 
     
     
         10 . The system of  claim 8 , wherein the one or more properties that are unavailable in the network traffic is associated with at least one of dynamic host control protocol traffic (DHCP), active scanning, hypertext transfer protocol (HTTP) traffic, a profile library being out of date, media access control (MAC) address, unidirectional traffic, or an address resolution protocol (ARP) table. 
     
     
         11 . The system of  claim 8 , wherein the condition comprises at least one of a classification confidence value associated with the classification being below a threshold, a plurality of classifications associated with the entity, or an unknown classification of the entity. 
     
     
         12 . The system of  claim 8 , the processing device further to:
 display a notification comprising a reference to the data source associated with the one or more properties that are unavailable in the network traffic.   
     
     
         13 . The system of  claim 12 , wherein the notification comprises a message to perform a manual classification of the entity. 
     
     
         14 . A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
 access network traffic from a network;   select an entity;   determine one or more values associated with one or more properties associated with the entity, wherein the one or more values are accessed from the network traffic;   determine a classification of the entity;   in response to the classification meeting a condition, determine, by the processing device, one or more properties that are unavailable in the network traffic;   determine a data source associated with the one or more properties for which a value is not present in the network traffic;   store an identification of the data source associated with the one or more properties that are unavailable in the network traffic; and   perform a remediation action with respect to the data source associated with the one or more properties that are unavailable in the network traffic.   
     
     
         15 . The non-transitory computer readable medium of  claim 14 , wherein the action with respect to the data source associated with the one or more properties that are unavailable in the network traffic comprises at least one of changing a configuration of one or more network devices, changing a configuration switched port analyzer (SPAN) or mirror port, adding network infrastructure login information, or getting an updated profile library. 
     
     
         16 . The non-transitory computer readable medium of  claim 14 , wherein the one or more properties that are unavailable in the network traffic is associated with at least one of dynamic host control protocol traffic (DHCP), active scanning, hypertext transfer protocol (HTTP) traffic, a profile library being out of date, media access control (MAC) address, unidirectional traffic, or an address resolution protocol (ARP) table. 
     
     
         17 . The non-transitory computer readable medium of  claim 14 , wherein the condition comprises at least one of a classification confidence value associated with the classification being below a threshold, a plurality of classifications associated with the entity, or an unknown classification of the entity. 
     
     
         18 . The non-transitory computer readable medium of  claim 14 , wherein the instructions, when executed by the processing device, further cause the processing device to:
 display a notification comprising a reference to the data source associated with the one or more properties that are unavailable in the network traffic, wherein the notification comprises a message to perform a manual classification of the entity.   
     
     
         19 . The non-transitory computer readable medium of  claim 18 , wherein the notification comprises a message to perform a manual classification of the entity. 
     
     
         20 . The non-transitory computer readable medium of  claim 14 , wherein the instructions, when executed by the processing device, further cause the processing device to:
 access information associated with the entity from a system; and   determine one or more properties that are unavailable in the information from the system.