US 11,870,693 B2
Kernel space based capture using intelligent packet selection paradigm and event output storage determination methodology
Sameer T. Khanna, Cupertino, CA (US); Xiaoguang Liu, San Ramon, CA (US); and Jianwen Zhang, Saratoga, CA (US)
Assigned to Fortinet, Inc., Sunnyvale, CA (US)
Filed by Fortinet, Inc., Sunnyvale, CA (US)
Filed on Dec. 31, 2020, as Appl. No. 17/139,382.
Prior Publication US 2022/0210065 A1, Jun. 30, 2022
Int. Cl. H04L 12/741 (2013.01); H04L 45/74 (2022.01)
CPC H04L 45/74 (2013.01) 20 Claims
OG exemplary drawing
 
1. A method performed by a processing resource of a computer system, the method comprising:
receiving, in kernel space of an operating system of the processing resource, a packet;
ascertaining, in the kernel space, whether a destination address of the packet matches a logical address of the computer system;
when said ascertaining is affirmative, forwarding the packet to user space of the operating system by passing the packet up a network stack implemented by the operating system;
when said ascertaining is negative, determining, in the kernel space, whether the packet is associated with one or more predetermined protocols used by Internet of Things (IoT) devices;
when said determining is affirmative:
extracting a header information from the packet; and
sending the header information to the user space for use in a subsequent IoT device detection processing; and
when said determining is negative, dropping the packet.