Patent ID: 7706267
Filing Date: 2010-04-27
Classification: H04L

Abstract:
1. A method for monitoring network services, comprising: examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service; transmitting an event including packet service type information and packet address information to a second network device in response to a determination that the protocol of the packet corresponds to the given network service, the packet address information being selected from the group of: a source address of the packet and a destination address of the packet; determining whether the network service is an authorized service by comparing information contained in the event to information in a list of network services on the second network device and by comparing the packet service type information to a number of entries in the list including a service type and an associated service type address; executing a remedial action in response to a determination that the network service is an unauthorized service; determining whether a provider of the network service is an authorized provider by comparing the packet address information to the number of entries in response to a determination that the network service is an authorized service; and executing the remedial action in response to a determination that the provider of the network service is an unauthorized provider.