Patent ID: 7587762
Filing Date: 2009-09-08
Classification: H04L

Abstract:
1. A method for detecting an intrusion initiated in a first network toward a second network, comprising: receiving, at a probe located outside the second network, data packets communicated over a first network link which transmits, from the first network to the second network, the data packets in a format suitable for the first network; converting the received data packets received at the probe into a format suitable for an intrusion detection system (IDS) for detecting the intrusion initiated in the first network toward the second network, the IDS located outside the second network and configured to not receive data packets exchanged inside the second network; monitoring, by the probe, the data packets received at the probe to evaluate network performance of the first network link; collecting, by the probe, current network performance data based on the network performance; updating, by the probe, historical network performance information with the current network performance data; and transmitting, by the probe over a second network link to the IDS the converted data packets and the updated historical network performance information, wherein at least one of the converted data packets and the updated historical network performance information is used by the IDS to detect the intrusion.