Roke Manor Research Limited

Neil Duxbury

Andrew Reeve

David Findlay

A networked probe system for a communications network () comprising at least one user device and at least one network device, comprises a plurality of probes (). A probe () is provided in each path between the or each user device and the or each network device. Each probe () stores one or more parameters of interest. The probes () monitor communication from the user device for a subset of the communication satisfying the one or more parameters. On determining the presence of the one or more parameters in the subset of the communication, the probe () provides a notification to all other probes in the network ().

Networked probe system

A method of grouping communication sessions, the method comprising: selecting a plurality of communications sessions from a data stream; determining which data structures, of said communication sessions, occur more frequently than chance; and sorting the communication sessions into groups, wherein communication sessions which have similar data structures, determined to occur more frequently than chance, are sorted into the same group.

Determining communication sessions having the same protocol structure

A method of filtering sections of a data stream involves determining a set of characters of interest, testing each section of the data stream for the presence of one or more of the set of characters of interest and extracting sections in which at least one of the characters is present.

Method of filtering sections of a data stream

A method of processing an encoded data stream comprises determining one or more data strings of interest; wherein the data string comprises a predetermined sequence of characters; encoding () the or each data string using the same encoding that was used to encode to the data stream; and searching () for the encoded data string in the encoded data stream.

Data processing system and method

In a method of constructing an Aho-Corasick tree, tree is constructed in a general depth first manner, one string at a time. Preferably during the construction of the string, after each node is added, failure links or extended failure links from that node to other nodes are added and failure links to nodes in the newly inserted branch are re-updated.

Growing community of inventors

Westbury, United Kingdom

Neil Duxbury