The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 04, 2009

Filed:

Jun. 14, 2005
Applicants:

Olaf A. Miller, Bellevue, WA (US);

David N. Macdonald, Mercer Island, WA (US);

James J. Mcnelis, Carnation, WA (US);

Inventors:

Olaf A. Miller, Bellevue, WA (US);

David N. MacDonald, Mercer Island, WA (US);

James J. McNelis, Carnation, WA (US);

Assignee:

Microsoft Corporation, Redmond, WA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04J 3/22 (2006.01);
U.S. Cl.
CPC ...
Abstract

A method, apparatus, and computer-readable medium for analyzing network data streams with parsers generated using script based parsers is provided. The script based parsers are used to analyze the captured frames of a network data stream and identify conversations in the frames. The script based parsers are written in a language that describes network protocols. A script interpreter interprets script to build a parser in the memory of a computing device. A parsing engine uses the protocol parsers stored in memory to parse frames. A capture engine captures frames for parsing and frames are organized into conversations. The parsing of frames is optimized by substituting data structure sizes for data structures that are not of interest in a particular parser.


Find Patent Forward Citations

Loading…