US 11,949,646 B2
Correlating protocol data units transiting networks with differing addressing schemes
Victor Oppleman, Virginia Beach, VA (US); Daniel Ghiringhelli, Fort Mill, SC (US); Zachary Kanner, Virginia Beach, VA (US); and Kristoffer Odland, Virginia Beach, VA (US)
Assigned to PACKET FORENSICS, LLC, Virginia Beach, VA (US)
Filed by Packet Forensics, LLC, Virginia Beach, VA (US)
Filed on Aug. 9, 2022, as Appl. No. 17/884,122.
Prior Publication US 2024/0056414 A1, Feb. 15, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 61/256 (2022.01); H04L 43/08 (2022.01)
CPC H04L 61/256 (2013.01) [H04L 43/08 (2013.01)] 28 Claims
OG exemplary drawing
 
1. A computer-implemented method of identifying an association between a network address in a first addressing scheme and a network address in a second addressing scheme, the method comprising:
detecting a first protocol data unit from a first device in the first addressing scheme and addressed to a destination through the second addressing scheme;
inserting an additional protocol data unit, the additional protocol data unit comprising, in a location subject to address translation by a network address translator, a source address of the first protocol data unit, the additional protocol data unit further comprising, in a location immune from address translation by the network address translator, the source address of the first protocol data unit;
receiving a translated protocol data unit, wherein the translated data protocol unit comprises the additional data protocol unit after translation by the network address translator, wherein the translated protocol data unit comprises a translated source address of the first protocol data unit, and wherein the translated protocol data unit does not ever reach the destination; and
reporting an association of the source address of the first protocol data unit with the translated source address of the first protocol data unit.