Patent ID: 7356599
Filing Date: 2008-04-08
Classification: H04L

Abstract:
1. A method for normalization of traffic data, received from an internet and transmitted to a local network, said method comprising: dynamically establishing and maintaining a normalization table in a traffic normalizer, said traffic normalizer being interposed between said internet and said local network; receiving a packet fragment from said internet at said traffic normalizer, said packet fragment being addressed to an end-system in said local network; determining if an entry exists in said normalization table for said packet fragment, said entry including an identifier comprising identifying information from IDENTIFICATION, PROTOCOL, SOURCE IP ADDRESS, and DESTINATION IP ADDRESS header fields of said packet fragment; if said entry exists in said normalization table, determining if a conflict exists between said entry and a prior entry; if said conflict exists, discarding said packet fragment; and if said conflict does not exist, simultaneously transferring said packet fragment to a network intrusion detection system and said end-system of said local network.