Patent ID: 7995496

Claim:
A computer-based method for collecting and storing types and quantities of traffic passing through an internet protocol (IP) network, said method comprising: extracting, from a database, a single instance of each unique packet header associated with a plurality of IP-to-IP packets, the IP-to-IP packets having been transmitted across the computer network over a predefined period of time; determining by a computer a highest probability service port for each IP-to-IP packet combination using the extracted packet headers; accumulating by the computer all IP-to-IP-on-Port packet combinations into a single record, the single record including a first packet time, a last packet time, and a total number of bytes transferred; storing the records for all IP-to-IP-on-Port conversations in the database; accumulating by the computer the packets based on IP-to-IP-on-protocol if the packets were part of a protocol where port numbers do not exist; storing the accumulated packets where port numbers do not exist in the database; and filtering false alarming IP addresses and ports from the accumulated packets to create a normal traffic database.