A METHOD OF PROCESSING DATA, A NETWORK ANALYSER CARD, A HOST AND AN INTRUSION DETECTION SYSTEM

摘要

The present invention relates to a method of processing data. The method comprises: receiving data from a network link; replicating said data no board a network analyser card to produce at least two editions of the received data; and writing said editions of the received data to an area of memory in a host that is directly accessible by a host application. The invention also relates to a network analyser card for connection to a host and a network, the card comprising: a receiver for receiving plural data frames from a network link; data replication means for generating at least two replica editions of the received data frames; and a descriptor adder configured and arranged to add a descriptor to substantially each of the data frames of each of the at least two replica editions of the received data frames, the descriptor including data about the data frame to which it is attached for use in processing of the data frame.