Back to results
US 2016/0241518 A1Published application
Configuration management for a capture/registration system
AssigneeMcAfee, Inc.
InventorJitendra B. Gaitonde
Life of this patent
Estimating the term…
Abstract
A method, apparatus, and system is described for distributing a rule to a distributed capture system and storing the rule in a global configuration database, wherein the rule defines an action for the distributed capture system to perform regarding packets intercepted by the distributed capture system.
Claims24
-34. (canceled)
At least one machine-readable storage medium comprising executable instructions that when executed, cause at least one processor to:
- distribute, to a distributed capture system, a rule defining an action for the distributed capture system to perform regarding packets intercepted by the distributed capture system;
- and
- store the rule in a memory element, wherein the distributed capture system is associated with registered objects, each of the registered objects indicated by a respective signature and a respective object identifier that collectively form a searchable key, wherein the action is based on a particular one of the registered objects and content of an intercepted object provided in the packets, and wherein the particular registered object is to be identified, at least in part, by one or more signatures, which can be compared against signatures derived from the intercepted object.
A system comprising:
- a memory including a memory element to store a rule;
- a configuration manager coupled to the memory element to distribute the rule;
- and
- a distributed capture system to receive the rule and store the rule, the rule defining an action for the distributed capture system to perform regarding packets intercepted by the distributed capture system, wherein the distributed capture system is associated with registered objects, each of the registered objects indicated by a respective signature and a respective object identifier that collectively form a searchable key, wherein the action is based on a particular one of the registered objects and content of an intercepted object provided in the packets, and wherein the particular registered object is to be identified, at least in part, by one or more signatures, which can be compared against signatures derived from the intercepted object.
1 more element
A method, comprising:
- distributing, to a distributed capture system, a rule defining an action for the distributed capture system to perform regarding packets intercepted by the distributed capture system;
- and
- storing the rule in a memory element, wherein the distributed capture system is associated with registered objects, each of the registered objects indicated by a respective signature and a respective object identifier that collectively form a searchable key, wherein the action is based on a particular one of the registered objects and content of an intercepted object provided in the packets, and wherein the particular registered object is to be identified, at least in part, by one or more signatures, which can be compared against signatures derived from the intercepted object.
Dependencies are inferred from the claim text.