Patent ID: 11936539
Assignee: CAPITAL ONE SERVICES, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method of packet capture management, the method comprising:
storing a first network packet capture file in a primary storage, wherein a retention policy specifies an amount of time that traffic captured by the packet capture management system should be stored and includes a time-to-live (TTL) of the first network packet capture file, wherein the first network packet capture file stores a captured data flow between a source and a destination exchanging network packets;
receiving an instruction, from a first network monitoring device that monitors or analyzes the traffic, identifying the first network packet capture file as being of interest to a network administrator;
in response to the instruction, moving the first network packet capture file from the primary storage to a secondary storage;
in response to the moving, changing the TTL to specify that the first network packet capture file remains in the secondary storage after the first network packet capture file is scheduled for deletion in the primary storage; and
sending an instruction to a second network monitoring device to set a TTL of a decryption key stored in a secure keystore, wherein the setting of the TTL of the decryption key is based on the retention policy corresponding to network packets associated with the decryption key.