Network monitoring system and method thereof

• US 8,144,609 B2
• Filed: 06/20/2007
• Issued: 03/27/2012
• Est. Priority Date: 06/23/2006
• Status: Expired due to Fees

• Current Assignee: Nippon Office Automation Company Limited, Toshimitsu Tazaki
• Original Assignee: Nippon Office Automation Company Limited, Tazaki Toshimitsu
• Inventors: Rao, Umesh Ramachandra
• Primary Examiner(s): Kizou, Hassan
• Assistant Examiner(s): Jiang, Charles C
• Application Number:
  US11/821,534
• Publication Number:
  US 20080002595A1
• Time in Patent Office: 1,742 Days
• Field of Search: 370216-253, 714100- 57
• US Class Current: 370/252
• CPC Class Codes: H04L 43/18 Protocol analysers
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A packet processing engine is disclosed which comprises (a) packet processor for sniffing the packets and for analyzing traffic, and (b) core engine for packet processing. The core engine comprises means for extraction of protocols to build protocol analysis data and means for protocol-based analysis of the packets.

Claims

1. A hardware-based method for monitoring

Network data traffic, said method comprising steps of :

a. sniffing packets

b. checking the packets sniffed in step a. for a pre-assigned application protocol for simultaneously extracting a parameter relevant to applications by microengines,

c. analyzing the parameter extracted in step b. for a plurality of information and then saving the sniffed packets associated with the analyzed parameter onto host memory

d. segregating the packets saved in step c. for each protocol type as per the session they belong to,

e. analyzing the packets segregated in step d, and

f. re-assembling the packets with session information for uploading onto the host memory, wherein the session is saved in two segments called index file and data file, and wherein the method traces the origin of the traffic in the network which is identified using MAC (Media Access Control) address of the source and destination of the session, start and end time of the session and unique tag assigned for processing engine and application layer processor card.