Network traffic identification device
AssigneeRedfig Consulting Pty Ltd
InventorGavan Newell
Life of this patent
Estimating the term…
Abstract
A network traffic device comprising: at least one network device adapted to receive network data packets; wherein said at least one network device filters network data packets to locate at least one identifying packet, and samples said network data packets to select at least one sample packet. The at least one network device may transfer said at least one identifying packet and said at least one sample packet to an analyser. A predetermined sample rate may determine the number of sample packets selected by said at least one network device.
Claims20
A network device comprising a processor and a computer readable medium comprising computer-readable instructions which when executed by the processor cause the device to:
- receive network data packets, each network data packet comprising a packet header and a packet payload;
- filter said network data packets according to predefined criteria, said filtering comprising inspection of at least a portion of the packet payload of the received network data packets and identifying at least one identifying packet in which the inspected portion of the respective packet payload satisfies the predefined criteria, and wherein received network data packets not satisfying the predefined criteria are identified as non-identifying packets;
- sample said non-identifying packets to select at least one sample packet according to a sampling rule;
- and
- transfer the at least one identifying packet and the at least one sample packet to an analyser.
A network traffic device comprising:
- at least one network device operating exclusively in a data plane, said at least one network device adapted to:
- receive network data packets, each network data packet comprising a packet header and a packet payload;
- filter said network data packets according to predefined criteria, said filtering comprising inspection of at least a portion of the payload of the received network data packets and identifying at least one identifying packet in which the inspected portion of the respective packet payload satisfies the predefined criteria, and wherein received network data packets not satisfying the predefined criteria are identified as non-identifying packets;
- sample said non-identifying packets to select at least one sample packet according to a sampling rule;
- transfer the at least one identifying packet and the at least one sample packet to at least one analyser;
- and
- at least one analyser, adapted to perform deep packet inspection on received packets, said received packets comprising the said at least one identifying packet and said at least one sample packet.
Dependencies are inferred from the claim text.