Network protocol analyzer apparatus and method
AssigneeSecure Crossing Research & Development, Inc.
InventorRandall E. Reeves
Life of this patent
Estimating the term…
Abstract
In one embodiment, a method for electronically analyzing packets using a packet analyzing apparatus includes receiving one or more data packets via a first interface port, wherein the one or more data packets comprises a full packet that may include a payload, determining whether the full packet is part of an existing permitted connection, and if so, determining whether the full packet contains a payload, and if the full packet of the existing permitted connection does not contain a payload, transmitting data indicative of the full packet via the second interface port to an industrial machine control.
Claims20
A protocol analyzer apparatus comprising:
- a first interface port configured to receive one or more data packets, said one or more data packets comprising a full packet that may include a payload,
- a second interface port configured to transmit data that may include said payload:
- a connection test module comprising a firewall state table memory indicating permitted existing connections and an indication of whether a full packet of each said existing permitted connection contains a payload, said connection test module configured to indicate whether said full packet is part of an existing said connection and whether said full packet contains a payload;
- and
- a special protocol analyzer test module, said special protocol analyzer test module configured to allow said second interface port to transmit data indicative of said full packet when both said full packet is part of an existing permitted connection and the firewall state table memory indicates that said full packet does not contain a payload.
A method for electronically analyzing network traffic, said method comprising:
- receiving one or more data packets via a first interface port, said one or more data packets comprising a full packet that may include a payload,
- determining whether said full packet is part of an existing permitted connection, and if so, determining whether said full packet contains a payload;
- and
- if the full packet of said existing permitted connection does not contain a payload, transmitting data indicative of said full packet via said second interface port to a machine controller.
A non-volatile, machine-readable memory having recorded thereon instructions configured to instruct an apparatus having a processor, a first interface port configured to receive one or more data packets, said one or more data packets comprising a full packet that may include a payload, a second interface port configured to transmit data that may include said payload to an industrial machine control, and additional memory to:
- receive one or more data packets via a first interface port, said one or more data packets comprising a full packet that may include a payload,
- determine whether said full packet is part of an existing permitted connection, and if so, determining whether said full packet contains a payload;
- and
- if the full packet of said existing permitted connection does not contain a payload, transmit data indicative of said full packet via said second interface port to an industrial machine controller.
Dependencies are inferred from the claim text.