Passive network monitoring system
AssigneeAlcatel Lucent
InventorsChao Kan, Pierrick Guingo
Life of this patent
Estimating the term…
Abstract
A network monitoring system (10). The system comprises a database (32) and at least one monitoring circuit (36) coupled to a network (20). Network traffic flows along the network in a form of packets. The at least one monitoring circuit is programmed to perform the steps of receiving a packet communicated along the network and determining whether data in the packet satisfies a rule set. Further, the at least one monitoring circuit is responsive to determining that data in the packet satisfies a rule set by copying information relating to the packet to be stored into the database. The system also comprises circuitry for querying the information communicated by the at least one monitoring circuit to the database to identify an irregularity in the network traffic.
Claims31
A network monitoring system, comprising:
- a database;
- at least one monitoring circuit coupled to a network along which network traffic flows in a form of packets, at least one monitoring circuit programmed to perform the steps of:
- receiving a packet communicated along the network;
- determining whether data in the packet satisfies a rule set;
- and
- responsive to determining that data in the packet satisfies a rule set, copying information relating to the packet to be stored into the database;
- and
- circuitry for querying the information communicated by the at least one monitoring circuit to the database to identify an irregularity in the network traffic.
A method of monitoring a network along which network traffic flows in a form of packets, comprising:
- receiving a packet communicated along the network;
- determining whether data in the packet satisfies a rule set;
- and
- responsive to determining that data in the packet satisfies a rule set, copying information relating to the packet to be stored into a database;
- storing a network flow in the database and corresponding to the information;
- and
- querying the information to identify an irregularity in the network traffic.
Dependencies are inferred from the claim text.