Intel Corporation

Thomas M Baggleman

Jay E Sternberg

Frank K Welch, Jr

Christopher S Thomas

Method and apparatus for monitoring file transfers and logical connections in a computer database featuring a file transfer record database

A method of monitoring logical connections in a computer network is described. All packets exchanged via the network are intercepted and analyzed. Upon receipt of a packet, a connection management engine determines whether packet is part of an existing logical connection. If it is not, a new record is created and stored in a connection record database. Otherwise, the existing record for the logical connection in the connection record database is updated. Also described is a method of monitoring file transfers in a computer network. File transfers are monitored using an file transfer record database, which allows each packet of the file transfer to be placed in proper context. Upon interception of a packet, an application management engine (AME) first determines whether the packet is part of a file transfer. If it is not, the AME ignores the packet. On the other hand, if the packet is part of a file transfer, then the AME determines whether if the packet is part of a new file transfer or a one of a multiplicity of existing file transfers. The AME creates a new record if the packet is the start of a new file transfer. If the packet is part of an existing file transfer, then the AME searches the file transfer record database to locate the record for the file transfer, which the packet is part of. Once located, the record is updated. Apparatus for monitoring file transfers and logical connections are also described.

Growing community of inventors

Phoenix, AZ, United States of America

Thomas M Baggleman