Locational tagging in a capture system

• US 20070271372A1
• Filed: 05/22/2006
• Published: 11/22/2007
• Est. Priority Date: 05/22/2006
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: Reconnex Corporation
• Inventors: Deninger, William, Ahuja, Ratinder Paul Singh, Iglesia, Erik de la
• Granted Patent: US 8,010,689 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A system and method for locational tagging in a capture system are described. Metadata associated with a captured object includes: information about a location in storage of an object and that objects association to a particular user; and/or tiered location information.

Claims

1. An article of manufacture including program code which, when executed by a machine, causes the machine to perform a method, the method comprising:

maintaining a tiered location configuration for a capture system;

maintaining list of internet protocol (IP) address relationships to tier location configuration values for the capture system;

capturing a packet with the capture system; and

classifying the packet within the tiered location configuration.

2. The article of manufacture of claim 1, further comprising:

storing the tiered location configuration as a part of metadata associated with the packet.

3. The article of manufacture of claim 1, further comprising:

creating a tiered location configuration.

4. The article of manufacture of claim 1, further comprising:

creating a list of internet protocol (IP) address relationships to tier location configuration values for the capture system.

5. The article of manufacture of claim 1, wherein the tiered location configuration comprises:

four tiers, wherein each tier is of a different level of abstraction.

6. An article of manufacture including program code which, when executed by a machine, causes the machine to perform a method, the method comprising:

initializing a log file, the log file to store internet protocol (IP) address assignment by MAC address;

reading the log to determine a relationship between an IP address and a user;

capturing a packet addressed to a particular IP address; and

associating the packet to a user from the log.

7. The article of manufacture of claim 6, further comprising:

storing an item associated with the packet in a storage system, wherein the item is associated with the user.

8. The article of manufacture of claim 7, wherein the storage system is rolling storage.

9. The article of manufacture of claim 6, wherein the log is a DHCP log.

10. A system comprising:

at least one computer attached to a network;

a capture system attached to the network, the capture system including;

a network interface module to receive a packet,

a packet capture module to capture to the packet received by the network interface module,

an object assembly module to reassemble an object associated from the captured packet,

an object classification module to generate metadata for the object, and storage for the object and the metadata, and

a server to assign internet protocol (IP) addresses to the at least one computer attached to the network.

11. The system of claim 10, wherein the metadata includes a tier location configuration component.

12. The system of claim 11, wherein the tier location configuration component is comprised of four tiers.

13. The system of claim 10, wherein the object storage is rolling storage.

14. The system of claim 11, wherein the metadata includes an association between an object stored at a location in the rolling storage and a user.

15. A method comprising:

maintaining a tiered location configuration for a capture system;

maintaining list of internet protocol (IP) address relationships to tier location configuration values for the capture system;

capturing a packet with the capture system; and

classifying the packet within the tiered location configuration.

16. The method of claim 15, further comprising:

storing the tiered location configuration as a part of metadata associated with the packet.

17. The method of claim 15, wherein the tiered location configuration comprises:

four tiers, wherein each tier is of a different level of abstraction.

18. A method comprising:

initializing a log file, the log file to store internet protocol (IP) address assignment by MAC address;

reading the log to determine a relationship between an IP address and a user;

capturing a packet addressed to a particular IP address; and

associating the packet to a user from the log.

19. The method of claim 18, further comprising:

storing an item associated with the packet in a storage system, wherein the item is associated with the user.

20. The method of claim 19, wherein the storage system is rolling storage.