Patent ID: 9042252
Filing Date: 2015-05-26
Classification: H04B,H04L

Abstract:
1. A method of generating an application protocol estimation information, comprising: (a) receiving a first packet and a second packet onto an appliance wherein the first and second packets are part of a flow pair; (b) determining an application protocol of the first and second packets; (c) determining a first packet size of the first packet and a second packet size of the second packet; (d) converting the packet sizes of (b) into a first and second packet size state; (e) determining a packet size state transition between the first packet and the second packet; (f) determining a most likely application protocol (MLAP) for the packet size state transition between the first and second packet; (g) calculating a probability that the MLAP of (f) is the application protocol of the flow pair; and (h) storing the MLAP of (g) and the probability of (g) in the application protocol estimation table.