Patent ID: 9009830
Filing Date: 2015-04-14
Classification: H04L

Abstract:
1. A method comprising: in response to receiving a packet at a network gateway, assigning an identifier to the packet; generating, by the network gateway, a copy of the packet; inserting, by the network gateway, the identifier into a header of the copy of the packet; storing the packet and the identifier identifying the copy of the packet at the network gateway; transmitting the copy of the packet having the identifier in the header from the network gateway to an intrusion detection system; maintaining the packet at the network gateway while the copy is analyzed by the intrusion detection system to determine whether the packet includes an attack signature; receiving a reply message from the intrusion detection system at the network gateway, the reply message comprising the identifier extracted from the header of the copy of the packet and indicating one or more results of the analysis, the reply message further comprising a code representative of an action to take in response to the reply message, the size of the reply message less than the size of the packet; and taking, by the network gateway, the action associated with the code in response to the reply message.