Patent ID: 11876775
Assignee: ARBOR NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC G  H

Claim 19:
20. The computer system as recited in claim 17, wherein: each Time-Decaying Bloom filter is an array of non-negative integers and is indexed by the result of a hash function computed over the pairs formed from the querier IP address and each service IP address from the DNS response; the non-zero values in all array elements decrement by the user configured time period with every tick of the clock; the value stored in each array element is the amount of time until the value decays to zero; and wherein a DNS Response is passively examined by the network device that monitors the interne network traffic such that at least the following components are extracted from the DNS Response: 1) IP Address of the DNS Querier; 2) DNS Name for which the address was requested; 3) one or more IP Addresses corresponding to the DNS Name; and 4) amount of time remaining during which the DNS name corresponds to the IP address of the DNS name for each of the one or more IP Addresses.