Capture of data in a computer network

An apparatus for capturing data in a computer network including:

• (a) dynamic memory having a plurality of areas of memory defining a plurality buffers, wherein each buffer is associated with a status flag;
• (b) persistent memory;
• (c) a data processor for:
• (i) receiving a data packet;
• (ii) writing a plurality of data packets to a buffer,
• (iii) modifying the status flag of a buffer in dependence on the contents of the buffer;
• and
• (iv) monitoring the status flag of a buffer;
• and
• (d) a computer daemon controlling the data processor to write the contents of a buffer to the persistent memory in dependence on the status flag of the buffer.

A method of capturing data in a computer network including the steps of:

• (a) designating a plurality of areas of computer memory wherein each area of computer memory is to be used as a buffer, wherein each of the plurality of buffers is associated with a status flag;
• (b) receiving a data packet;
• (c) writing the data packet to a buffer;
• (d) writing the contents of a buffer to persistent computer memory in response to detection of a special event request.