US 9,813,311 B1
Dynamic snapshot value by turn for continuous packet capture
Alexander Christian Leone, Seattle, WA (US)
Assigned to ExtraHop Networks, Inc., Seattle, WA (US)
Filed by ExtraHop Networks, Inc., Seattle, WA (US)
Filed on Feb. 27, 2017, as Appl. No. 15/443,868.
Application 15/443,868 is a continuation of application No. 15/289,760, filed on Oct. 10, 2016, granted, now 9,584,381.
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 12/28 (2006.01); H04L 12/26 (2006.01); H04J 1/16 (2006.01)
CPC H04L 43/04 (2013.01) [H04L 43/022 (2013.01); H04L 43/0876 (2013.01); H04L 43/12 (2013.01); H04L 43/18 (2013.01)] 30 Claims
OG exemplary drawing
 
1. A method for capturing packets on a network, wherein one or more processors in a network computer execute instructions to perform actions, comprising:
providing a snapshot value for one or more network monitoring computers (NMCs); and
employing the one or more NMCs that are handling a network flow to perform actions, including:
monitoring one or more characteristics of one or more packets in the network flow; employing the one or more characteristics of the network flow that indicate that a turn is occurring on the network flow to increase the snapshot value;
employing one or more conditions that indicate that the turn is complete to decrease the snapshot value; and
storing a portion of each of the one or more packets of the network flow in one or more datastores.