Free string match encoding and preview

• US 7,996,523 B2
• Filed: 01/18/2008
• Issued: 08/09/2011
• Est. Priority Date: 01/17/2008
• Status: Active Grant

• Current Assignee: NetScout Systems Incorporated
• Original Assignee: Fluke Corporation (Fortive Corp.)
• Inventors: Morin, Tom
• Primary Examiner(s): Maung; Zarni
• Application Number:
  US12/016,927
• Publication Number:
  US 20090187568A1
• Time in Patent Office: 1,299 Days
• Field of Search: 709223-229, 709220-221, 709/250, 714/4.1
• US Class Current: 709/224
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/18 Protocol analysers
• CPC Class Codes: H04L 43/50 Testing arrangements

Abstract

A system for entering data in a format that is easy to use, enabling selection of encoding format and displaying the resulting search data string in format to enable generation of byte sets for supplying to free string match algorithm for application to network data.

Claims

1. A network test instrument, comprising:

data entry user interface for entering a pattern match string to be encoded and for selection of an encoding type to be used for encoding the string for application of the pattern match string to network data monitored by the network test instrument;

display user interface for displaying at least one representation of the pattern match string as will be encoded in a preview area of the display user interface;

network traffic data storage;

a network traffic filter employing the encoded pattern match string to filter monitored network data, said network traffic filter beginning capturing and storing network traffic that matches the encoded pattern match string into said network traffic data storage.

2. The network test instrument according to claim 1, wherein said display user interface comprises:

a display of a textual representation of the pattern match string; and

a display of a hexadecimal representation of the pattern match string.

3. The network test instrument according to claim 1, wherein said data entry user interface for selection of an encoding type comprises a set of plural selectable encoding types from which a user can select.

4. The network test instrument according to claim 3, wherein said set of plural selectable encoding types comprises:

Hex, Decimal, ASCII, Integer, Unicode, and ASN.1 OID.

5. A method of operating a network test instrument, comprising:

enabling a user to select an encoding format for a pattern match string;

allowing the user to enter the pattern match string; and

displaying the pattern match string to the user in a preview area as encoded in accordance with the encoding format,

further comprising;

employing the encoded pattern match string to filter network traffic, beginning capturing and storing network traffic that matches the encoded pattern match string.

6. The method according to claim 5, wherein said displaying is performed as the user is entering the pattern match string.

7. The method according to claim 5, wherein said displaying the pattern match string as encoded in accordance with the encoding format comprises:

displaying a hexadecimal representation of the encoded pattern match string.

8. The method according to claim 5, wherein said displaying the pattern match string as encoded in accordance with the encoding format comprises:

displaying a text representation of the encoded pattern match string.

9. The method according to claim 5, further comprising performing analysis processing of the captured network traffic.

10. The method according to claim 5, further comprising performing analysis processing of the captured network traffic.

11. The method according to claim 5, further comprising:

enabling the user to specify a triggering event that defines when to begin applying the pattern match string to the network traffic.

12. The method according to claim 5, further comprising:

enabling the user to specify whether to apply the pattern match string to an entire frame of a given frame of network traffic or whether to apply the pattern match string to a subset of the entire frame.

13. The method according to claim 5, wherein said enabling a user to select an encoding format for a pattern match string comprises enabling the user to select from a set of encoding types including, Hex, Decimal, ASCII, Integer, Unicode, and ASN.1 OID.

14. A method of operating a network test instrument, comprising:

enabling a user to select an encoding format for a pattern match string to be applied to monitored network traffic;

allowing the user to enter the pattern match string;

providing a selectable option of either displaying or not displaying the pattern match string to the user in a preview area as encoded in accordance with the encoding format;

displaying the pattern match string encoded with the encoding format if the option of displaying is selected;

employing the encoded pattern match string to filter monitored network traffic, beginning capturing and storing monitored network traffic that matches the encoded pattern match string.

15. The method according to claim 14, wherein said enabling a user to select an encoding format for a pattern match string comprises enabling the user to select from a set of encoding types including, Hex, Decimal, ASCII, Integer, Unicode, and ASN.1 OID.

16. The method according to claim 14, further comprising performing analysis processing of the monitored network traffic.

17. The method according to claim 14, further comprising:

enabling the user to specify a triggering event that defines when to begin applying the pattern match string to the monitored network traffic.

18. The method according to claim 14, further comprising:

enabling the user to specify whether to apply the pattern match string to an entire frame of a given frame of monitored network traffic or whether to apply the pattern match string to a subset of the entire frame.