Method and apparatus for performing network address translation

A network device for performing network address translation, the network device comprising:

• a storage module configured to store history of access patterns to destinations;
• a comparison module configured to employ pattern matching to compare characteristics of subsequent inbound traffic packets to the history;
• and
• a disambiguator module configured to use, in combination, the history and at least one record based on at least one field within an incoming payload to the subsequent inbound traffic packets to disambiguate a traffic packet in a network address translation (NAT) device.

A computer program product including a non-transitory computer readable medium having computer readable instructions to perform network address translation, wherein the computer readable instructions, when executed by a processor, cause the processor to:

• store history of characteristics of inbound traffic packets associated with a particular destination;
• employ pattern matching to compare characteristics of subsequent inbound traffic packets to the history;
• and
• disambiguate the characteristics of the subsequent inbound traffic packets to determine the particular destination associated with the subsequent inbound traffic packets using, in combination, the history and at least one record based on at least one field within an incoming payload of the inbound or subsequent inbound traffic packets.

A method for performing network address translation, the method comprising:

• storing history of characteristics of inbound traffic packets transmitted to a particular destination;
• employing pattern matching to compare characteristics of subsequent inbound traffic packets to the history;
• disambiguating the characteristics of the subsequent inbound traffic packets to determine the particular destination associated with the subsequent inbound traffic packets based on the pattern matching;
• and
• collecting resource identifiers by parsing traffic flow management methods or state machines to monitor progress of a negotiation between two peers for establishment of a corresponding resource identifier transmission.

A method for performing network address translation, the method comprising:

• storing history of characteristics of inbound traffic packets transmitted to a particular destination;
• employing pattern matching to compare characteristics of subsequent inbound traffic packets to the history;
• disambiguating the characteristics of the subsequent inbound traffic packets to determine the particular destination associated with the subsequent inbound traffic packets based on the pattern matching;
• and
• for flows that have timed out, inspecting payload of traffic packets for information that can be uniquely associated with one specific destination for the payload.

A method for performing network address translation, the method comprising:

• storing history of characteristics of inbound traffic packets transmitted to a particular destination;
• employing pattern matching to compare characteristics of subsequent inbound traffic packets to the history;
• disambiguating the characteristics of the subsequent inbound traffic packets to determine the particular destination associated with the subsequent inbound traffic packets based on the pattern matching;
• isolating and tabulating statistics for certain fields of application protocol messages;
• and
• using at least one statistic to disambiguate traffic packets with a resource identifier more or most likely to be determined to be associated with the records.

A method for performing network address translation, the method comprising:

• storing history of characteristics of inbound traffic packets transmitted to a particular destination;
• employing pattern matching to compare characteristics of subsequent inbound traffic packets to the history;
• disambiguating the characteristics of the subsequent inbound traffic packets to determine the particular destination associated with the subsequent inbound traffic packets based on the pattern matching;
• and
• using deep packet inspection to obtain data from certain fields, to obtain a resource identifier, or both.