Patent ID: 8848744
Filing Date: 2014-09-30
Classification: H04L

Abstract:
1. A method for monitoring packets of data over a network, wherein at least one network device enables actions, comprising: passively monitoring at least one flow of packets for a session between at least two endpoints based on copies of the packets for the at least one monitored flow, wherein transmission of the packets between the at least two endpoints is performed separate from the passive monitoring; generating information based on the copies of packets for the at least one monitored flow; if the at least one monitored flow is encrypted and is being decrypted based on at least a generated keystream, advancing the generated keystream based on at least a size of a hole detected in the at least one monitored flow, wherein the advanced keystream is employed to continue decryption after the hole; determining if the generating of information is desynchronized from the at least one monitored flow based at least on a detection of the hole in the at least one monitored flow; and if the generating of information is determined to be desynchronized, re-synchronizing the generating of information based at least on resuming the generating of information at a downstream position of the at least one monitored flow that is after the hole and is based on at least one aspect of the hole.