Patent ID: 8494000
Filing Date: 2013-07-23
Classification: H04L

Abstract:
1. A method for storing network data, comprising: receiving a plurality sets of classifier rules, each set of classifier rules defining data packets to be stored; receiving data packets at a location in a network for monitoring; selecting a set of classifier rules from the plurality sets of classifier rules based on data rates of the data packets at the location; selecting data packets associated with an application layer protocol having at least one data field of a variable size based on the selected set of classifier rule, responsive to receiving the data packets; determining at least a start location of the at least one data field and an end location of the at least one data field in each of the selected data packets by analyzing each of the selected data packets; segmenting each of the selected data packets based on the start location and the end location into two or more segments; and storing a subset of the two or more segments, wherein said subset includes less than all of said two or more segments.