| 摘要 |
<p>A computer system for identifying and extracting content from data traffic, the system comprising: a capture driver arranged to monitor data traffic and to copy data packets from the traffic to a buffer without disrupting the traffic flow, and to generate pointer information to identify specific pans of a data packet; a plurality of decoder modules, each module being adapted to decode one or more specific data transfer protocols; and a control interface adapted to receive pointer information from the capture driver, to route the pointer information to one or more of the plurality of decoder modules, and to route extracted content from the data traffic to an application. The invention decodes a wide variety of protocols or object types e.g. Ethernet protocol, Internet Protocol (IP), Transmission Control Protocol (TCP), Hyper Text Transfer Protocol (HTTP) of each packet in real time. It can be arranged in a modular fashion, enabling the introduction of further decoding modules without any significant effect on the data throughput capacity of the system, and without the need to reconfigure the basis. Aspects of the invention include examining the lowest layer of the data packet to identify its protocol, and decoding each layer until there are no more layers in the packet.</p> |
