Patent ID: 7835361
Filing Date: 2010-11-16
Classification: H04L

Abstract:
1. A method, comprising: a network access device receiving a data packet of a data stream containing a file segment of a file originated from an external host and destined to a protected host of a local area network (LAN), the file being transmitted via multiple file segments contained in multiple data packets of the data stream; if the received data packet is out of order, the network access device temporarily buffering the received data packet to wait for one or more other packets that are in order; and a data analysis module performing a data pattern analysis on a payload of the received data packet and payloads of the one or more other in-order packets as a whole when the one or more other in-order packets arrive to determine whether the payload of the received data packet contains an element of a predetermined data pattern, without waiting for a remainder of the data stream to arrive, wherein the predetermined data pattern is a content data pattern and includes a plurality of elements and the predetermined data pattern is defined via a data structure having a sequence of states, wherein each of the states indicates that one of the plurality of elements of the predetermined data pattern corresponding to the respective state has been satisfied.