Full time network traffic recording systems and methods
First Claim
1. A full time network traffic recording system, comprising:
- a network capture device, said network capture device being configurable to sample network packets on a network segment without regard to packet destinations;
a packet annotator, said packet annotator in accessible communication with said network capture device whereby sampled network packets may be referenced or read, said packet annotator annotating the sampled network packets with at least a time of receipt to form annotated packets;
a network data caching system, said network data caching system having a network data cache, said packet annotator providing access to said caching system of the annotated packets whereby the annotated packets may be referenced or read, said caching system forming a series of hierarchically organized finite logical storage units containing the annotated packets, said caching system further recording at least a start and an end time of the contained annotated packets to the finite logical storage units, said caching system further being configurable to initiate write commands to a storage interface;
and a storage interface operable to receive write commands from said caching system, said interface being configurable to forward write commands to a storage device whereby finite logical storage units may be stored to media of a configured storage device.
12 Assignments
0 Petitions
Accused Products
Abstract
Included in the invention are systems and methods of full time recording network traffic to a hierarchical data storage. Also included in the invention are systems and methods of retrieval of recorded network traffic from a hierarchically organized network data repository. Additionally included in the invention are systems and methods of efficiently filtering data in a hierarchically organized network data repository. Systems and methods of displaying recorded network data utilizing the retrieval systems are also included in the invention. Further included in the invention are systems and methods of providing sliding time window selection user interfaces. Detailed information on various example embodiments of the inventions are provided in the Detailed Description below, and the inventions are defined by the appended claims.
-
Citations
20 Claims
-
1. A full time network traffic recording system, comprising:
-
a network capture device, said network capture device being configurable to sample network packets on a network segment without regard to packet destinations;
a packet annotator, said packet annotator in accessible communication with said network capture device whereby sampled network packets may be referenced or read, said packet annotator annotating the sampled network packets with at least a time of receipt to form annotated packets;
a network data caching system, said network data caching system having a network data cache, said packet annotator providing access to said caching system of the annotated packets whereby the annotated packets may be referenced or read, said caching system forming a series of hierarchically organized finite logical storage units containing the annotated packets, said caching system further recording at least a start and an end time of the contained annotated packets to the finite logical storage units, said caching system further being configurable to initiate write commands to a storage interface;
and a storage interface operable to receive write commands from said caching system, said interface being configurable to forward write commands to a storage device whereby finite logical storage units may be stored to media of a configured storage device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14)
-
-
15. A full time network traffic recording computer system, comprising:
-
a network capture device, said network capture device being configurable to sample network packets on a network segment;
at least one processor, said processors in operable communication with said network capture device to receive sampled network packets;
a storage device operating to accept write commands from said processor;
computer readable instructions contained in memory, said memory readable by said processors, said computer executable instructions enabling said processor to perform the functions of;
(i) receiving sampled network packets from said network capture device, (ii) annotating the received packets with at least the time of receipt, said annotating forming annotated packets, (iii) organizing the annotated packets in a hierarchical organization of finite logical storage units, and (iv) storing the finite logical storage units to said storage device. - View Dependent Claims (16, 17, 18)
-
-
19. A full time network traffic recording system, comprising:
-
a network capture means, said network capture means being configurable to sample network packets on a network segment;
means of annotating sampled packets with at least a time of receipt to form annotated packets, said annotating means in accessible communication with said network capture means whereby sampled network packets may be referenced or read;
means of forming finite logical storage units containing the annotated packets, said annotating means providing referential or read access of the annotated packets to said forming means, said forming means further recording at least a start and an end time of the contained annotated packets to the formed units;
means of storing a succession of formed units to storage.
-
-
20. A method of capturing a large quantity of network data, comprising:
-
non-intrusively sampling network packets from a network segment;
annotating sampled network packets with at least a time of receipt;
organizing the annotated packets into a hierarchical data organization composed of finite logical storage units;
and storing the finite logical storage units to storage.
-
Specification