Patent ID: 11949646
Assignee: PACKET FORENSICS, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computer-implemented method of identifying an association between a network address in a first addressing scheme and a network address in a second addressing scheme, the method comprising:
detecting a first protocol data unit from a first device in the first addressing scheme and addressed to a destination through the second addressing scheme;
inserting an additional protocol data unit, the additional protocol data unit comprising, in a location subject to address translation by a network address translator, a source address of the first protocol data unit, the additional protocol data unit further comprising, in a location immune from address translation by the network address translator, the source address of the first protocol data unit;
receiving a translated protocol data unit, wherein the translated data protocol unit comprises the additional data protocol unit after translation by the network address translator, wherein the translated protocol data unit comprises a translated source address of the first protocol data unit, and wherein the translated protocol data unit does not ever reach the destination; and
reporting an association of the source address of the first protocol data unit with the translated source address of the first protocol data unit.