Patent ID: 9191288
Filing Date: 2015-11-17
Classification: H04L

Abstract:
1. A method for improving the monitoring of flows of packets over a network, wherein a network computer performs the method by executing actions, comprising: selecting one or more of a plurality of flows for passive monitoring in real time over a network, wherein one or more other flows are related to the selected one or more flows; providing one or more triggers that is initiated in real time by one or more conditions that are associated with the one or more selected flows, wherein the one or more other flows are unassociated with the one or more conditions; buffering in real time the one or more selected flows in a buffer, wherein each selected flow is arranged as a thread in the buffer; when one of the plurality of selected flows dominates a capacity of the buffer, executing one or more actions including: when the one or more conditions occurs and initiates the one ormore triggers, recording in real time each packet for the one or more selected flows that is associated with the one or more conditions and each packet for the one or more other flows, wherein each buffered packet for the one or more selected flows is recorded in real time along with the selected flow's packets and each packet for the one or more other flows that are received after the initiation of the one or more triggers.