Patent ID: 6381632
Filing Date: 2002-04-30
Classification: G06Q

Abstract:
A network monitoring and event recording apparatus for monitoring an application layer data stream between a node and a network server and recording data representing an activity occurring in the data stream that is a recordable event, the network monitoring and event recording apparatus comprising:a stream inspector for non-invasively inspecting a first portion of the application layer data stream to determine whether it contains indicia of an http address; an address locator for non-invasively inspecting a second portion of the application layer data stream when the first portion of the application layer data stream contains indicia of an http address, the address locator further determining whether an http address is contained within the application layer data stream, wherein the second portion of the application layer data stream includes at least some part of the first portion of the application layer data stream; an activity type identifier for non-invasively inspecting a portion of the application layer data stream when the second portion of the application layer data stream comprises an http address, the activity type identifier further determining an activity type intended to be achieved by the third portion of the application layer data stream; a filter list containing a list of pre-specified http addresses and activity types; a monitor list containing a list of pre-specified http addresses and activity types; and an activity recorder for recording the activity type identified by the activity type identifier and the http address identified by the address locator if the http address and activity type are included in the monitor list but are not included in the filter list.