Method and system for determining intra-session event correlation across network address translation devices
US6985920B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jun 23, 2003 |
| Grant date | Jan 10, 2006 |
| Priority date | — |
| Expiry date | Nov 21, 2023 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L61/2514
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
An intra-session network correlation system receives a stream of network events and then group them into different network session according to each event's event parameters and the corresponding network address translation (NAT) information. An event in the stream is first matched against any existing session, and then categorized using the information about a NAT device that translates a message the event is related to. Finally, at a predefined time, a categorized event is processed to identify other categorized events in accordance with a NAT message or an expiry timer associated with the categorized event, and the categorized event and identified other categorized events are grouped into the same network session.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.