Patent Document ID: 20130346377
Application ID: 14010402
Patent Status: 0

Claim One:
1. A computer system for assembling a comprehensive capture file representing dataframe traffic on a computer network, wherein the computer system includes a memory device for storing electronic data and a computer processor, comprising: a first collection of dataframes received by the computer system from a first capture device on the computer network; each dataframe of the first collection of dataframes including a first frame identifier and a first timestamp; a second collection of dataframes received from a second capture device on the computer network; each dataframe of the second collection of dataframes including a second frame identifier and a second timestamp; the computer processor, in communication with the first collection of dataframes and the second collection of dataframes and programmed to: a. chronologically sort the first collection of dataframes according to the first timestamp; b. chronologically sort the second collection of dataframes according to the second timestamp; c. eliminate duplicate dataframes from the first collection of dataframes so that no dataframes in the first collection of dataframes have the same first identifier; d. eliminate duplicate dataframes from the second collection of dataframes so that no dataframes in the second collection of dataframes have the same second identifier; e. set a flag variable in the memory device to indicate that no duplicate frames have been found; f. successively select each dataframe of the second collection of dataframes as a selected dataframe, and compare the second identifier of the selected dataframe to the first identifier of each dataframe in the first collection of dataframes to determine a if a matched dataframe exists; g. if a matched dataframe exists, then calculate a time difference between the second timestamp of the selected dataframe and the first timestamp corresponding to the matched dataframe and store the time difference as a time difference variable in the memory device; h. discard the selected dataframe; i. if the flag variable indicates that no duplicate frames have been found, then perform the steps: i1. for each dataframe in the second collection of dataframes with a second timestamp preceding the first timestamp of the matched dataframe, alter the second timestamp by the time difference variable; i2. reset the flag variable to indicate that duplicate frames have been found; i3. return to step “f” for a successive dataframe in the second collection of dataframes; j. if a matched dataframe does not exist and the flag variable indicates that no duplicate frames have been found, then perform the steps: j1. move the selected dataframe into the first collection of dataframes; j2. return to step “f” for a successive dataframe in the second collection of dataframes; k. if a matched dataframe does not exist and the flag variable indicates that duplicated frames have been found, then perform the steps: k1. alter the second timestamp of the selected dataframe in the second collection of dataframes by the time difference variable; k2. move the selected dataframe into the first collection of dataframes; k3. return to step “f” for a successive dataframe in the second collection of dataframes; l. record the first collection of dataframes as the comprehensive capture file representing time-synchronized dataframe traffic on the multi-tier computer network.