Patent ID: 9451036
Filing Date: 2016-09-20
CPC Classification: H04L

Claim Text:
1. A method for identifying the number of computers and types of operating systems behind a network address translator, comprising: processing an internet protocol packet associated with at least one host computer system including capturing said internet protocol packet at a point between the at least one host computer system and a network and extracting fields from said internet protocol packet to produce a fingerprint; analyzing said fields to determine if an associated network address translator is connected between said at least one host computer system and the point at which the internet protocol packet was captured; if said network address translator is connected, analyzing said fields to determine the number of host computer systems behind said associated network address translator; analyzing said fields to determine with a level of probability that said fingerprint identifies an operating system running said at least one host computer system; recording subscriber information for subscribers associated with the at least one host computer system in a user index table; and generating a subscriber profile from the subscriber information in the user index table if the at least one host computer system has not been previously fingerprinted.