METHODS AND COMPUTER PROGRAM PRODUCTS FOR MONITORING THE CONTENTS OF NETWORK TRAFFIC IN A NETWORK DEVICE
First Claim
Patent Images
1. A method for monitoring the contents of network traffic in a network device, the method comprising:
- collecting, in substantially real-time using at least one kernel space driver interface, network traffic data sent by and/or received at the network device;
parsing the collected network traffic data, wherein parsing comprises;
extracting, from the collected network traffic data, transaction data corresponding to at least one logical transaction defined by a network protocol, andstoring an indicator of a quantity of the collected network traffic data that was consumed; and
generating an event incorporating the extracted transaction data,wherein the collecting network traffic data, parsing the collected network traffic data, and generating an event comprise operations performed using at least one computer processor.
6 Assignments
0 Petitions
Accused Products
Abstract
Provided are methods and computer program products monitoring the contents of network traffic in a network device. Methods may include collecting, using a kernel space driver interface, network traffic data sent by and/or received at the network device, parsing the collected network traffic data to extract transaction data corresponding to at least one logical transaction defined by a network protocol and storing an indicator of a quantity of the collected network traffic data that was parsed, and generating an event incorporating the extracted transaction data.
-
Citations
21 Claims
-
1. A method for monitoring the contents of network traffic in a network device, the method comprising:
-
collecting, in substantially real-time using at least one kernel space driver interface, network traffic data sent by and/or received at the network device; parsing the collected network traffic data, wherein parsing comprises; extracting, from the collected network traffic data, transaction data corresponding to at least one logical transaction defined by a network protocol, and storing an indicator of a quantity of the collected network traffic data that was consumed; and generating an event incorporating the extracted transaction data, wherein the collecting network traffic data, parsing the collected network traffic data, and generating an event comprise operations performed using at least one computer processor. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17)
-
-
18. A computer program product comprising:
-
a non-transitory computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising; computer readable program code configured to collect, in substantially real-time using at least one kernel space driver interface, network traffic data sent by and/or received at a network device; computer readable program code configured to parse the collected network traffic data, wherein the computer readable program code configured to parse comprises; computer readable program code configured to extract, from the collected network traffic data, transaction data corresponding to at least one logical transaction defined by a network protocol, and computer readable program code configured to store an indicator of a quantity of the collected network traffic data that was parsed; and computer readable program code configured to generate an event incorporating the extracted transaction data. - View Dependent Claims (19, 20, 21)
-
Specification