PROMISCUOUS MONITORING USING INTERNET PROTOCOL ENABLED DEVICES

• US 20090122709A1
• Filed: 11/08/2007
• Published: 05/14/2009
• Est. Priority Date: 11/08/2007
• Status: Active Grant

• Current Assignee: Stingray IP Solutions LLC (Acacia Research Corporation)
• Original Assignee: Harris Corporation (L3Harris Technologies, Inc.)
• Inventors: Voglewede, Paul, Roth, Peter J.
• Granted Patent: US 8,331,240 B2
• Time in Patent Office: Days
• US Class Current: 370/241
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 61/2503 Translation of Internet protocol [IP] addresses

Abstract

A method (500) is provided for enabling a promiscuous monitoring of network communications by a monitor node (MN). The method includes the steps of: generating a directed IP packet at a first node (FN); transmitting a first unicast signal including a RTS message from the FN to a second node (SN); transmitting a second unicast signal including a CTS message from the SN to the FN in response to the first unicast signal; modifying the directed IP packet by changing an IP destination address of the directed IP packet to an IP subnet broadcast address; transmitting a uni-broadcast signal including the modified directed IP packet from the FN to the IP subnet broadcast address; and receiving the uni-broadcast signal at the SN and a third node (TN). The TN is an IP-enabled device provided to monitor network communications between the FN and SN.

Claims

1. A method for enabling a promiscuous monitoring of network communications by an IP-enabled device, comprising:

generating a directed IP packet at a first node;

modifying said directed IP packet by changing an IP destination address of said directed IP packet to an IP subnet broadcast address;

transmitting a uni-broadcast signal including said directed IP packet that has been modified from said first node to said IP subnet broadcast address; and

receiving said uni-broadcast signal at a second node and a third node, wherein said third node is an IP-enabled device provided for monitoring communications between said first and second nodes.

2. The method according to claim 1, wherein said modifying said directed IP packet step further comprises selecting said IP destination address to be an IP destination address of a network layer protocol header.

3. The method according to claim 1, further comprising the steps of transmitting a first unicast signal including a request to send message from said first node to a second node prior to transmitting said uni-broadcast signal.

4. The method according to claim 3, wherein said transmitting a first unicast signal further comprises transmitting a MAC layer signal burst including said request to send message from said first node to a second node.

5. The method according to claim 3, further comprising the steps of transmitting a second unicast signal including a clear to send message from said second node to said first node in response to said first unicast signal.

6. The method according to claim 5, wherein said transmitting a second unicast signal further comprises transmitting a MAC layer signal burst including said clear to send message from said second node to said first node.

7. The method according to claim 1, wherein said transmitting a uni-broadcast signal further comprises transmitting a MAC layer data burst including said directed IP packet that has been modified from said first node to said IP subnet broadcast address.

8. The method according to claim 1, further comprising processing said directed IP packet at said third node as broadcast traffic.

9. The method according to claim 1, further comprising the step of transmitting a unicast signal including a drop link message from said second node to said first node after said second node receives said uni-broadcast signal.

10. The method according to claim 1, further comprising selecting said first node to be a sensor node.

11. The method according to claim 10, further comprising detecting an intrusion or message at said sensor node and generating a directed IP packet in response to detecting said intrusion or message.

12. The method according to claim 1, further comprising selecting said second node to be a relay node that is part of a route to a central node.

13. A method for enabling a promiscuous monitoring of network communications by an IP-enabled device, comprising:

generating a directed IP packet at a first node;

transmitting a first unicast signal including a request to send message from said first node to a second node;

transmitting a second unicast signal including a clear to send message from said second node to said first node in response to said first unicast signal;

modifying said directed IP packet by changing an IP destination address of said directed IP packet to an IP subnet broadcast address;

transmitting a uni-broadcast signal including said directed IP packet that has been modified from said first node to said IP subnet broadcast address; and

receiving said uni-broadcast signal at said second node and a third node, wherein said third node is an IP-enabled device provided for monitoring communications between said first and second nodes.

14. The method according to claim 13, wherein said modifying said directed IP packet step further comprises selecting said IP destination address to be an IP destination address of a network layer protocol header.

15. The method according to claim 13, wherein said transmitting a first unicast signal further comprises transmitting a MAC layer signal burst including said request to send message from said first node to a second node.

16. The method according to claim 13, wherein said transmitting a second unicast signal further comprises transmitting a MAC layer signal burst including said clear to send message from said second node to said first node.

17. The method according to claim 13, wherein said transmitting a uni-broadcast signal further comprises transmitting a MAC layer data burst including said directed IP packet that has been modified from said first node to said IP subnet broadcast address.

18. The method according to claim 13, further comprising the step of transmitting a unicast signal including a drop link message from said second node to said first node after said second node receives said uni-broadcast signal.

19. The method according to claim 13, further comprising selecting said first node to be a sensor node.

20. The method according to claim 13, further comprising selecting said second node to be a relay node that is part of a route to a central node.