Logging of traffic in a computer network

A computer system comprising at least one processor, memory including computer program code, the memory and the computer program code configured to, with the at least one processor, cause the system to:

• form a split signal of said communication signal at a split point, said communication signal comprising information, said split signal being identical in information content to said communication signal,
• receive said split signal by a network interface controller from said split point;
• capture communication packets of said split signal using said network interface controller into a transitory memory in a direct memory access operation without filtering or coalescing said communication packets by said network interface controller, said network interface controller operating in real promiscuous mode,
• read data of said communication packets from the transitory memory in a direct memory access operation;
• and
• write data of said communication packets to a non-transitory memory in a direct memory access operation so that the data of said communication packets is identical in information content to said communication signal;
• form a verification code on the basis of said communication packets configured to be used to show that the storage has not been tampered with;
• and
• store the verification code to a secure location.

A method of logging communication packets from a communication signal in a communication network, said method comprising:

• forming a split signal of said communication signal at a split point, said communication signal comprising information, said split signal being identical in information content to said communication signal,
• receiving said split signal by a network interface controller from said split point;
• capturing communication packets of said split signal using said network interface controller into a transitory memory in a direct memory access operation without filtering or coalescing said communication packets by said network interface controller, said network interface controller operating in real promiscuous mode,
• reading data of said communication packets from the transitory memory in a direct memory access operation;
• writing data of said communication packets to a non-transitory memory in a direct memory access operation so that the data of said communication packets is identical in information content to said communication signal;
• forming a verification code on the basis of said communication packets to be used to show that the storage has not been tampered with;
• and
• storing the verification code to a secure location.

A computer program product embodied on a non-transitory computer readable medium, comprising computer program code configured to, when executed on at least one processor, cause an apparatus or a system to:

• receive a split signal by a network interface controller from a split point, said split signal formed of said communication signal by said split point, said communication signal comprising information, said split signal being identical in information content to said communication signal,
• capture communication packets of said split signal using a network interface controller into a transitory memory in a direct memory access operation without filtering or coalescing said communication packets by said network interface controller, said network interface controller operating in real promiscuous mode,
• read data of said communication packets from the transitory memory in a direct memory access operation;
• and
• write data of said communication packets to a non-transitory memory in a direct memory access operation so that the data of said communication packets is identical in information content to said communication signal;
• form a verification code on the basis of said communication packets configured to be used to show that the storage has not been tampered with;
• and
• store the verification code to a secure location.