Patent ID: 6874089
Filing Date: 2005-03-29
Classification: H04L

Abstract:
1. A method, comprising: detecting on a network an initiation of a data transaction between at least a server and a client, the data transaction comprising a plurality of data packets transmitted between the server and the client; capturing a copy of the data transaction by copying the data packets as the data packets are transmitted through the network between the server and the client; associating at least one identifier with the data transaction; generating timestamps for the copied data packets, wherein each timestamp includes information therein identifying at least a portion of the at least one identifiers: storing the captured copy of the data transaction, the at least one identifier and the timestamps in one or more data stores; mapping the at least one identifier associated with the stored captured copy of the data transaction to an entry in an index to permit retrieval of the stored copy of the data transaction and the timestamps from the data store via the index; wherein the data transaction is encrypted by utilizing a session secret negotiated between the server and the client; and retrieving the captured copy of the data transaction from the data store utilizing the entry in the index; submitting a portion of the captured copy of the data transaction to the server or client to obtain at least the session secret from the server or client; and decrypting the captured copy of the data transaction utilizing the obtained session secret.