Patent ID: 11949646
Assignee: PACKET FORENSICS, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A computer system for identifying an association between a network address in a first addressing scheme and a network address in a second addressing scheme, the system comprising:
a first sensor, comprising an electronic processor, the first sensor communicatively coupled to a first device to detect a first protocol data unit, wherein the first protocol data unit is addressed from the first device in the first addressing scheme and addressed to a destination through the second addressing scheme,
wherein the first sensor is configured to insert an additional protocol data unit, the additional protocol data unit comprising, in a location subject to address translation by a network address translator, a source address of the first protocol data unit, the additional protocol data unit further comprising, in a location immune from address translation by the network address translator, the source address of the first protocol data unit; and
a second sensor, comprising an electronic processor, communicatively coupled to the network address translator to receive a translated protocol data unit, wherein the translated data protocol unit comprises the additional data protocol unit after translation by the network address translator, wherein the translated protocol data unit comprises a translated source address of the first protocol data unit, wherein the translated protocol data unit does not ever reach the destination,
wherein the computer system is configured to report an association of the source address of the first protocol data unit with the translated source address of the first protocol data unit.