Logging records of traffic in computer network

Abstract

The invention relates to a method, system and computer program product for logging communication packets from a communication signal in a communication network. The communication network comprises oneor more perimeters. A split signal is formed of said communication signal, the communication signal comprising information, and the split signal being identical in information content to the communication signal. The communication packets of the split signal are captured by using a network interface controller into a transitory memory. The network interface controller operates in real promiscuousmode. A virtual network interface controller may be operated from an isolated user space container, and the isolated user space container can access said transitory memory as an isolated memory range. The communication packets may be captured into the isolated memory range, and the data of the communication packets may be written from the isolated memory range to the non-transitory memory.

Description

Background technique [0001] Computer network security is becoming more and more important. With advances in the computing power of personal computers and other computing hardware and the widespread use of networks connected to the Internet, network security breaches have become quite common. However, it is often the case that the network owner may not even detect the intrusion, and thus be unable to take necessary action. Furthermore, if an intrusion is detected, it may not be clear to what extent the security of the computer network has been compromised and what data and portions of the computer network were affected. For these and other reasons, even lawmakers (eg in the European Union) are requiring companies to improve their ability to detect and track computer network intrusions. [0002] Therefore, a solution for logging traffic in computer networks is needed. Contents of the invention [0003] An improved method and technical equipment for implementing the method h...

AI Technical Summary

Problems solved by technology

However, it is often the case that the network owner may not even detect the intrusion, and thus be unable to take necessary action

Furthermore, if an intrusion is detected, it may not be clear to what extent the computer network security has been compromised and what data and parts of the computer network were affected

Images