Patent ID: 7573859

Claim:
A system comprising: a wired backbone network; a network, coupled to the wired backbone network; a wireless access domain, including: a first access area having a first wireless exchange switch for sending data through the network to the wired backbone network, and a first access point, with a first snoop filter, that links wireless mobile stations to the wired backbone network through the first wireless exchange switch; a second access area having a second wireless exchange switch for sending data through the network to the wired backbone network, and a second access point, with a second snoop filter, that links wireless mobile stations to the wired backbone network through the second wireless exchange switch; an intrusion detection system, coupled to the network, for analyzing packets; wherein, in operation, a connection is established between a mobile device in the first access area and the mobile device is associated with a persistent identity; the first snoop filter monitors traffic between the mobile device and the first access point and copies packets that meet a specified criteria to the intrusion detection system; when the mobile device moves into the second access area, the connection is maintained along with the persistent identity of the mobile device; the second snoop filter continues to monitor traffic between the mobile device and the second access point and continues to copy packets that meet the specified criteria to the intrusion detection system.