Daniel J Hansen

US Patent:

6697870, Feb 24, 2004

Filed:

Jan 28, 2000

Appl. No.:

09/493918

Inventors:

Daniel Hansen - Pompton Plains NJ

Assignee:

Networks Associates Technology, Inc. - Santa Clara CA

International Classification:

G06F 1516

US Classification:

709233, 709224

Abstract:

In a probe system for monitoring and analyzing data flow and associated activities between devices connected in common to a point in a network, the probes driver runs in a âKernel modeâ on Windows NT for analyzing packets of data retrieved from the network, whereby programming is provided for operating the Kernel mode driver to monitor the rate of traffic or data packets entering an NIC card buffer, for causing the CPU to respond to an interrupt issued by the NIC everytime a data packet is received at a traffic rate below a predetermined threshold to access data packets entering the NIC card buffer, and to cause the CPU to respond to polling pulses at regular predetermined intervals to access data packets, when the traffic rate exceeds the predetermined threshold, for providing more CPU cycles to analyze the data packets. Processing by the CPU of data packets is terminated if more than a predetermined percentage of the available CPU time between system ticks has been expended, such that the entire CPU time is not consumed by processing received data packets.

US Patent:

6697871, Feb 24, 2004

Filed:

Sep 21, 1999

Appl. No.:

09/401118

Inventors:

Daniel Hansen - Pompton Plains NJ

Assignee:

Network Associates Technology, Inc. - Santa Clara CA

International Classification:

G06F 1516

US Classification:

709234, 709223, 709224, 709230, 709233, 709236, 709247, 370392, 380268

Abstract:

A system and method for the efficient encoding and decoding of protocol messages is described. In one embodiment, an offset from a beginning of a memory buffer is calculated based upon a maximum size of a header portion of the message. A variable length portion of the message is encoded beginning at the offset, and the header portion of the message is encoded based upon an encoded size of the variable portion and a size of the header portion. The encoding of the header portion begins at the offset less the encoded size of the header portion. Further, a set of object identifiers are decoded into a data structure. If a value portion corresponding to an object identifier of the set of object identifiers is variable in length, the value portion is decoded into the data structure.

US Patent:

6735629, May 11, 2004

Filed:

May 4, 2000

Appl. No.:

09/565021

Inventors:

Daniel Hansen - Pompton Plains NJ

Assignee:

Networks Associates Technology, Inc. - Santa Clara CA

International Classification:

G06F 15173

US Classification:

709224, 709233, 709228, 709223

Abstract:

In a probe system for monitoring and analyzing data flow and associated activities between devices connected in common to a point in a network, in the mode of operation, the probes driver runs in a âKernel modeâ on Windows NT for analyzing in relatively low detail packets of data retrieved from the network, whereby programming is provided for operating the Kernel mode driver to monitor the rate of traffic or data packets entering an NIC card buffer, for causing the CPU to respond to an interrupt issued by the NIC everytime a data packet is received at a traffic rate below a predetermined threshold to access data packets entering the NIC card buffer, and to cause the CPU to respond to polling pulses at regular predetermined intervals to access data packets, when the traffic rate exceeds the predetermined threshold, for providing more CPU cycles to analyze the data packets. In another mode of operation, unanalyzed data packets are transferred to a frame memory for relatively detailed analysis via Expert Analyzer software operating the CPU in a User mode, whereby the amount of unanalyzed data in the frame memory is monitored for allocating the percent of CPU time available for Kernel mode processing in inverse relationship thereto.

Address:

5 Hl Ct, Pompton Plains, NJ 07444

VIN:

JH4CU266X9C002678

Make:

ACURA

Model:

TSX

Year:

2009