Patent ID: 8443095
Filing Date: 2013-05-14
Classification: H04L

Abstract:
1. In a processor-enabled system, a computer-implemented method for analyzing a HTTP packet exchanged between a server computer and a client computer, said processor-enabled system representing one of said client computer and a system other than said server computer and said client computer that also receives said HTTP packet, a kernel of an operating system of said processor-enabled system being previously unable to provide TCP/IP information to an application space of a monitoring system, said method comprising: adding code to said kernel of said operating system of said processor-enabled system; using said code to pass a set of data from said kernel to an application in said application space of said monitoring system, said set of data including a TCP ACK number associated with said HTTP packet, said TCP ACK number being configured for acknowledging receipt of data; ascertaining, using said application that said TCP ACK number is different from a prior TCP ACK number that is associated with a last-received HTTP packet, said last-received HTTP packet being received at said processor-enabled system immediately prior to receiving said HTTP packet at said processor-enabled system; designating, based on said ascertaining, said HTTP packet as belonging to a second file that is different from a first file associated with said last-received HTTP packet; wherein said set of data further includes a TL value, an IP_HD_LN value, and a TCP_HD_LN value, said TL value representing a total packet length of said HTTP packet, said IP_HD_LN value represents a length of an IP header of said HTTP packet, and said TCP_HD_LN value represents a length of a TCP header of said HTTP packet; determining a value X that is equal to wherein said HT_HD_LN represents a length of a HTTP header of said HTTP packet; if said value X is greater than zero, designating said HTTP packet as a GET response from said server computer; and if said value X is equal to zero, designating said HTTP packet as a HEAD response from said server computer.