HOST ENTRY SYNCHRONIZATION
First Claim
1. A method performed by data processing apparatus, the method comprising:
- storing in the memory of the data processing apparatus a host table, the host table including, for each of a plurality of host devices monitored on a network, a record including;
an IP address field for storing an IP address assigned to the host device;
an agent identifier field for storing an agent identifier of agent installed on the host device; and
a time stamp field for storing a time stamp indicating the time that host attributes were stored in the record;
receiving from a peer data processing apparatus, in response to a synchronization event, a peer record for a host device, the peer record comprising data for a record stored in a host table in the memory of the peer data processing apparatus;
determining whether an IP address of the peer record is stored in a record in the host table;
in response to determining that the IP address of the peer record is not stored in a record of the host table;
determining whether the peer record includes an agent identifier;
in response to determining that the peer record includes the agent identifier, determining whether the agent identifier of the peer record is stored in a record of the host table;
in response to determining that the agent identifier of the peer record is stored in a record of the host table, determining whether the peer record is more recent than the record of the host table based on the time stamp of the peer record and the time stamp of the records in the host table; and
in response to determining that the peer record is more recent than the record of the host table, updating the record in the host table with data of the peer record.
10 Assignments
0 Petitions
Accused Products
Abstract
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, synchronizing records in peer devices. In one aspect, a method includes comparing, in a first peer device, a peer record received from a second peer device based on an IP address of the peer record from the second peer device and an IP address of a record stored in a host table of the first peer device. Unique agent identifiers, MAC addresses and time stamps are also compared to determine whether the peer record indicates a new host device, a new IP assignment to a known host device, or a new user logged into a known host device.
-
Citations
23 Claims
-
1. A method performed by data processing apparatus, the method comprising:
-
storing in the memory of the data processing apparatus a host table, the host table including, for each of a plurality of host devices monitored on a network, a record including; an IP address field for storing an IP address assigned to the host device; an agent identifier field for storing an agent identifier of agent installed on the host device; and a time stamp field for storing a time stamp indicating the time that host attributes were stored in the record; receiving from a peer data processing apparatus, in response to a synchronization event, a peer record for a host device, the peer record comprising data for a record stored in a host table in the memory of the peer data processing apparatus; determining whether an IP address of the peer record is stored in a record in the host table; in response to determining that the IP address of the peer record is not stored in a record of the host table; determining whether the peer record includes an agent identifier; in response to determining that the peer record includes the agent identifier, determining whether the agent identifier of the peer record is stored in a record of the host table; in response to determining that the agent identifier of the peer record is stored in a record of the host table, determining whether the peer record is more recent than the record of the host table based on the time stamp of the peer record and the time stamp of the records in the host table; and in response to determining that the peer record is more recent than the record of the host table, updating the record in the host table with data of the peer record. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A data processing apparatus, comprising:
-
a memory subsystem, an input/output subsystem that transmits and receives data over a network, and a processor in data communication with the memory subsystem and the input/output subsystem, the processor programmed to perform operations comprising; storing in the memory of the data processing apparatus a host table, the host table including, for each of a plurality of host devices monitored on a network, a record including; an IP address field for storing an IP address assigned to the host device; an agent identifier field for storing an agent identifier of agent installed on the host device; and a time stamp field for storing a time stamp indicating the time that host attributes were stored in the record; receiving from a peer data processing apparatus, in response to a synchronization event, a peer record for a host device, the peer record comprising data for a record stored in a host table in the memory of the peer data processing apparatus; determining whether an IP address of the peer record is stored in a record in the host table; in response to determining that the IP address of the peer record is not stored in a record of the host table; determining whether the peer record includes an agent identifier; in response to determining that the peer record includes the agent identifier, determining whether the agent identifier of the peer record is stored in a record of the host table; in response to determining that the agent identifier of the peer record is stored in a record of the host table, determining whether the peer record is more recent than the record of the host table based on the time stamp of the peer record and the time stamp of the records in the host table; and in response to determining that the peer record is more recent than the record of the host table, updating the record in the host table with data of the peer record. - View Dependent Claims (12, 13, 14, 15, 16, 17)
-
-
18. A system, comprising:
-
a pair of peer sensors configured to control access to a network for a plurality of host devices, each of the peer sensors including a memory subsystem, an input/output subsystem that transmits and receives data over the network, and a processor in data communication with the memory subsystem and the input/output subsystem, wherein each processor is processor programmed to cause each peer sensor to perform operations comprising; storing in the memory of the peer sensor a host table, the host table including, for each of the plurality of host devices monitored on the network by the peer sensors, a record including; an IP address field for storing an IP address assigned to the host device; an agent identifier field for storing an agent identifier of agent installed on the host device; and a time stamp field for storing a time stamp indicating the time that host attributes were stored in the record; receiving from the other peer sensor, in response to a synchronization event, peer record for a host device, the peer record being a record stored in the host table in the memory the other peer sensor; determining whether an IP address of the peer record is stored in a record in host table of the peer sensor; in response to determining that the IP address of the peer record is not stored in a record of the host table of the peer sensor; determining whether the peer record includes an agent identifier; in response to determining that the peer record includes the agent identifier, determining whether the agent identifier of the peer record is stored in a record of the host table of the peer sensor; in response to determining that the agent identifier of the peer record is stored in a record of the host table of the peer sensor, determining whether the peer record is more recent than the record of the host table of the peer sensor based on the time stamp of the peer record and the time stamp of the record in the host table; and in response to determining that the peer record is more recent than the record of the host table of the peer sensor, updating the record in the host table of the peer sensor with data of the peer record. - View Dependent Claims (19, 20, 21, 22, 23)
-
Specification