Patent ID: 8813189

Claim:
A method comprising: establishing, by a proxy server, a communications session between each of a plurality of client devices and the proxy server; receiving, at the proxy server, a session key from each of the plurality of client devices; selecting, by the proxy server, a particular traffic flow associated with a particular client device, the particular traffic flow selected from a plurality of traffic flows, each of the plurality of traffic flows being associated with one of the plurality of client devices and comprising encrypted data; and communicating, by the proxy server, flow information to a first capture device communicatively coupled to the proxy server, the flow information comprising the session key received from the particular client device and an identification of the particular traffic flow; wherein: the first capture device is configured to: receive the plurality of traffic flows from the particular client device; store the encrypted data of the particular traffic flow selected by the proxy server; store the session key received in the flow information from the proxy server; discard any of the plurality of received traffic flows not identified in the flow information received from the proxy server; utilize the session key to decrypt encrypted data of traffic flows; and export the decrypted data to a network analyzer for analysis; and the proxy server and the first capture device are communicatively coupled to the particular client device through separate connections.