| 摘要 |
PROBLEM TO BE SOLVED: To improve processing performance and scalability in a network monitoring system. SOLUTION: The invention relates to the network monitoring system of a hardware base. The system includes a packet processing engine and/or an application layer processor for session level analysis. The packet processing engine includes (a) a network processor for sniffing packets to analyze traffic, and (b) a core engine for processing packets which includes means for extracting protocols to build protocol analysis data on a protocol level as well as on an application level and means for protocol-based analysis of the packets. The application layer processor includes (a) means for extracting all sessions to build session data, and (b) means for analyzing the packet session base. COPYRIGHT: (C)2008,JPO&INPIT
|
