Apparatus, System, and Method for Enhanced Monitoring and Interception of Network Data

摘要

An apparatus includes a plurality of microcode controlled state machines and a first circuit. At least one of the microcode controlled state machines is configured to process network data received by the apparatus and to apply a first rule to the network data to produce an associated output indicating a first characteristic of at least a portion of the network data. The first circuit is configured to store a first portion of the network data received by the apparatus prior to the determination of the first characteristic, and to store a second portion of the network data received by the apparatus subsequent to the determination of the first characteristic. The first circuit is also configured to preserve the first portion and the second portion of the network data in response to the determination of the first characteristic.

主权项

1. An apparatus, comprising:
a plurality of microcode controlled state machines, at least one of the plurality of microcode controlled state machines being configured to process network data received by the apparatus and to apply a first rule to the network data to produce an associated output indicating a first characteristic of at least a portion of the network data; and a first circuit configured to store a first portion of the network data received by the apparatus prior to the determination of the first characteristic, and to store a second portion of the network data received by the apparatus subsequent to the determination of the first characteristic, the first circuit also being configured to preserve the first portion and the second portion of the network data in response to the determination of the first characteristic.