Patent ID: 8676960

Claim:
A method, comprising: collecting and storing a plurality of transmission events comprised within a packet payload reported by one or more nodes of a network, into one or more data structures by, ascertaining one or more characteristics of each of one or selected said plurality of transmission events, and creating said one or more data structures based on each of said one or more characteristics, wherein each of said one or more data structures comprises one or more observation records generated from one or more of said plurality of transmission events and stored based on said one or more characteristics; extracting one or more data elements and at least one data feature comprising content of a message from each of said plurality of transmission events stored in said one or more data structures; creating one or more indices based on said stored data element, for each or for selected said one or more data structures, wherein at least one of said one or more indices comprises at least one indicator of a location of said one or more data elements; and creating one or more summaries for said each or of said selected data structures of said one or more data structures, wherein at least one of said one or more summaries comprises one or more data features of said one or more transmission events for determining the presences of at least one or more data features in any of said one or more transmission events or in selected said one or more transmission events.