US 11,671,343 B2
Dynamic network traffic sniffer
Yi Sun, San Jose, CA (US); and Fei Zou, Menlo Park, CA (US)
Assigned to Helios Data Inc., Mountain View, CA (US)
Filed by Helios Data Inc., Mountain View, CA (US)
Filed on Feb. 25, 2021, as Appl. No. 17/185,454.
Claims priority of provisional application 62/982,942, filed on Feb. 28, 2020.
Prior Publication US 2021/0273872 A1, Sep. 2, 2021
Int. Cl. H04L 12/26 (2006.01); H04L 43/12 (2022.01); H04L 43/02 (2022.01); H04L 43/045 (2022.01); H04L 43/062 (2022.01)
CPC H04L 43/12 (2013.01) [H04L 43/02 (2013.01); H04L 43/045 (2013.01); H04L 43/062 (2013.01)] 19 Claims
OG exemplary drawing
 
1. A method, comprising:
receiving, by a control program that is executing on a computer system, a request to locate instances of data on a computer network having a plurality of computer systems that are managed by an orchestration program;
performing, by the control program, multiple, limited-time-period deployments of a sniffer program to different portions of the computer network in order to sample network traffic from the different portions to determine whether instances of the data appear in the network traffic, wherein performing a particular one of the multiple, limited-time-period deployments includes:
selecting one of the plurality of computer systems on which to deploy the sniffer program;
instructing the orchestration program to deploy the sniffer program on the selected computer system such that the sniffer program is connected to a network of that computer system, wherein the sniffer program is capable of sampling network traffic of the network of that computer system to determine whether instances of the data appear on that network; and
removing the sniffer program from the selected computer system before performing a subsequent deployment of the sniffer program to another portion of the computer network; and
receiving, by the control program from the sniffer program, information that identifies one or more of the different portions of the computer network whose network traffic included instances of the data.