Extrahop Networks, Inc.

Charlotte Ching-Hsing Tan

Benjamin Thomas Higgins

Jesse Abraham Rothstein

Michael Kerber Krause Montague

Eric James Rongo

Embodiments resynchronize encrypted network traffic. A capture flow that includes network traffic captured from encrypted network flows may be monitored and the captured network traffic may be decrypted for analysis. A hole in the capture flow may be determined based on gaps in portions of the captured network traffic disabling the monitoring of the capture flow and the decryption of the captured network traffic. A size of the hole may be determined based on a size of the gap in the portions of the captured network traffic. Other network traffic may be captured from the capture flow subsequent to the hole. Cipher resynchronization parameters may be determined based on the size of the hole, other portions of the captured network traffic, or the encryption protocol. The other portions of the captured network traffic may be decrypted based on the cipher resynchronization parameters to reenable monitoring of the capture flow.

Resynchronizing encrypted network traffic

Embodiments are direct to monitoring communication between computers may be using network monitoring computers (NMCs). Network packets that are communicated between the computers may be captured and stored in a data store. If the NMCs identify a secure communication session established between two computers, the NMCs may obtain key information that corresponds to the secure communication session that includes a session key that may be provided by a key provider. Correlation information associated with the secure communication session may be captured by the NMCs. The correlation information may include tuple information associated with the secure communication session. And, the key information and the correlation information may be stored in a key escrow. The key information may be indexed in the key escrow using the correlation information.

Growing community of inventors

Seattle, WA, United States of America

Charlotte Ching-Hsing Tan