×

Transparent inline content inspection and modification in a TCP session

  • US 10,382,591 B2
  • Filed: 10/13/2014
  • Issued: 08/13/2019
  • Est. Priority Date: 10/13/2014
  • Status: Active Grant
First Claim
Patent Images

1. A method carried out in a device positioned between a sending entity, and a receiving entity, wherein each of the sending and receiving entities includes a TCP stack, comprising a set of operations:

  • during a TCP session established between the sending entity and the receiving entity, inspecting a stream of TCP traffic;

    upon determining that a portion of the stream is to be rewritten, the portion comprising one or more input data packets received from the sending entity, placing, in an input record, the one or more input data packets comprising the portion, the one or more input data packets including a last input data packet;

    returning to the sending entity an acknowledgement for each input data packet received except for the last input data packet;

    generating, from the one or more input data packets in the input record, a modified portion of the stream, the modified portion comprising one or more output data packets to be sent to the receiving entity;

    placing in an output record the one or more output data packets;

    forwarding into the stream of TCP traffic to the receiving entity the one or more output data packets in the output record; and

    upon receipt of acknowledgements from the receiving entity for the output data packets comprising the modified portion in the output record, transmitting to the sending entity an acknowledgement of the last input data packet of the one or more input data packets comprising the portion;

    wherein the set of operations are carried out without requiring a TCP stack in the device, and without requiring termination or re-origination of a connection between the sending entity and the receiving entity;

    wherein a number of input data packets constituting the portion of the stream to be rewritten differs from a number of output data packets constituting the modified portion of the stream.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×