Configurable Network Traffic Parser Selective Field Extraction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network monitoring technologies face inefficiencies in parsing network traffic, as they typically parse all protocol fields, leading to increased processing time and resource utilization.

Innovation Solution

A configurable parsing engine is developed to selectively parse only the requested protocol fields of network traffic, reducing unnecessary processing and resource usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If all protocol fields are parsed, then complete network traffic analysis is achieved, but processing time and resource utilization increase

Engineering Contradiction:
Improvenetwork traffic analysis completenessVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent extracts and identifies only the specific protocol fields that are requested by processing engines, rather than parsing all protocol fields. This selective extraction approach reduces processing time while maintaining the completeness of analysis for the required fields.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent implements partial action by parsing only the necessary subset of protocol fields that are requested, rather than performing excessive parsing of all fields. This partial parsing strategy achieves sufficient analysis completeness while reducing resource consumption.

Inventive Principle:
Principle #16Partial or excessive action

2Measurement precision

If all protocol fields are parsed, then complete network traffic analysis is achieved, but resource utilization increases

Engineering Contradiction:
Improvenetwork traffic analysis completenessVSAvoidresource utilization
Core Design Contradiction:
Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The patent extracts only the requested protocol fields from the network traffic, avoiding the unnecessary extraction and processing of all protocol fields. This selective approach reduces computational resources and energy consumption while maintaining analysis completeness for required fields.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies partial action by performing parsing operations only on the necessary protocol fields rather than all fields. This reduces the overall computational workload and resource utilization while achieving sufficient analysis coverage.

Inventive Principle:
Principle #16Partial or excessive action

3Productivity

If selective parsing is implemented, then processing efficiency improves, but system complexity increases

Engineering Contradiction:
Improveparsing efficiencyVSAvoidparser configuration complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent implements feedback mechanisms where processing engines communicate their field requirements to the parsing engine, which then adjusts its parsing behavior accordingly. This feedback loop enables selective parsing without requiring complex pre-configuration, as the system adapts based on actual processing needs.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The parsing system performs self-service by automatically determining which protocol fields to parse based on requests from processing engines. This eliminates the need for manual configuration and reduces system complexity, as the parser adapts its behavior autonomously based on operational requirements.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12289225B2Configurable network traffic parser
Publication Date: 2025.04.29 FORESCOUT TECHNOLOGIES INC
  • US12289225B2 patent drawing
  • US12289225B2 patent drawing
  • US12289225B2 patent drawing

AI summary

Systems, methods, and related technologies for parsing network traffic are described. Network traffic transmitted by a set of devices communicatively coupled to a network is obtained. The network traffic is parsed to determine a set of field values from the network traffic based on the set of protocol fields. The set of field values are transmitted to the set of processing engines.