Attributing network address translation device processed traffic to individual hosts

    公开(公告)号:US10237151B2

    公开(公告)日:2019-03-19

    申请号:US15694481

    申请日:2017-09-01

    申请人: Narus, Inc.

    摘要: A method for profiling network traffic. The method includes capturing, from the network traffic using a packet capturing device, a plurality of packets, identifying a first portion of the plurality of packets as a first flow based at least on a common Internet Protocol (IP) address assigned to each packet of the first flow by a network address translation (NAT) device, extracting, by a hardware processor separate from the NAT device and based on an NAT profile of the NAT device, a first data item from the first flow, wherein the first data item is inserted into the first flow by the NAT device for identifying a first host device coupled to the NAT device, and determining, by the hardware processor based on the first data item, that the first flow is generated by the first host device.

    ATTRIBUTING NETWORK ADDRESS TRANSLATION DEVICE PROCESSED TRAFFIC TO INDIVIDUAL HOSTS

    公开(公告)号:US20190068468A1

    公开(公告)日:2019-02-28

    申请号:US16173578

    申请日:2018-10-29

    申请人: Narus, Inc.

    IPC分类号: H04L12/26 H04L29/12

    摘要: A method for profiling network traffic. The method includes capturing, from the network traffic using a packet capturing device, a plurality of packets, identifying a first portion of the plurality of packets as a first flow based at least on a common Internet Protocol (IP) address assigned to each packet of the first flow by a network address translation (NAT) device, extracting, by a hardware processor separate from the NAT device and based on an NAT profile of the NAT device, a first data item from the first flow, wherein the first data item is inserted into the first flow by the NAT device for identifying a first host device coupled to the NAT device, and determining, by the hardware processor based on the first data item, that the first flow is generated by the first host device.

    Attributing network address translation device processed traffic to individual hosts

    公开(公告)号:US10116538B2

    公开(公告)日:2018-10-30

    申请号:US15694484

    申请日:2017-09-01

    申请人: Narus, Inc.

    IPC分类号: G06F15/173 H04L12/26

    摘要: A method for profiling network traffic. The method includes capturing, from the network traffic using a packet capturing device, a plurality of packets, identifying a first portion of the plurality of packets as a first flow based at least on a common Internet Protocol (IP) address assigned to each packet of the first flow by a network address translation (NAT) device, extracting, by a hardware processor separate from the NAT device and based on an NAT profile of the NAT device, a first data item from the first flow, wherein the first data item is inserted into the first flow by the NAT device for identifying a first host device coupled to the NAT device, and determining, by the hardware processor based on the first data item, that the first flow is generated by the first host device.

    ATTRIBUTING NETWORK ADDRESS TRANSLATION DEVICE PROCESSED TRAFFIC TO INDIVIDUAL HOSTS

    公开(公告)号:US20180013646A1

    公开(公告)日:2018-01-11

    申请号:US15694484

    申请日:2017-09-01

    申请人: Narus, Inc.

    IPC分类号: H04L12/26

    摘要: A method for profiling network traffic. The method includes capturing, from the network traffic using a packet capturing device, a plurality of packets, identifying a first portion of the plurality of packets as a first flow based at least on a common Internet Protocol (IP) address assigned to each packet of the first flow by a network address translation (NAT) device, extracting, by a hardware processor separate from the NAT device and based on an NAT profile of the NAT device, a first data item from the first flow, wherein the first data item is inserted into the first flow by the NAT device for identifying a first host device coupled to the NAT device, and determining, by the hardware processor based on the first data item, that the first flow is generated by the first host device.

    ATTRIBUTING NETWORK ADDRESS TRANSLATION DEVICE PROCESSED TRAFFIC TO INDIVIDUAL HOSTS

    公开(公告)号:US20180013645A1

    公开(公告)日:2018-01-11

    申请号:US15694481

    申请日:2017-09-01

    申请人: Narus, Inc.

    IPC分类号: H04L12/26

    摘要: A method for profiling network traffic. The method includes capturing, from the network traffic using a packet capturing device, a plurality of packets, identifying a first portion of the plurality of packets as a first flow based at least on a common Internet Protocol (IP) address assigned to each packet of the first flow by a network address translation (NAT) device, extracting, by a hardware processor separate from the NAT device and based on an NAT profile of the NAT device, a first data item from the first flow, wherein the first data item is inserted into the first flow by the NAT device for identifying a first host device coupled to the NAT device, and determining, by the hardware processor based on the first data item, that the first flow is generated by the first host device.

    Attributing network address translation device processed traffic to individual hosts

    公开(公告)号:US09769038B1

    公开(公告)日:2017-09-19

    申请号:US14294946

    申请日:2014-06-03

    申请人: Narus, Inc.

    IPC分类号: H04L12/26

    摘要: A method for profiling network traffic. The method includes capturing, from the network traffic using a packet capturing device, a plurality of packets, identifying a first portion of the plurality of packets as a first flow based at least on a common Internet Protocol (IP) address assigned to each packet of the first flow by a network address translation (NAT) device, extracting, by a hardware processor separate from the NAT device and based on an NAT profile of the NAT device, a first data item from the first flow, wherein the first data item is inserted into the first flow by the NAT device for identifying a first host device coupled to the NAT device, and determining, by the hardware processor based on the first data item, that the first flow is generated by the first host device.