US 12,407,595 B2
Method of capturing packets from applications hosted on containers
Harald Albrecht, Nuremberg (DE)
Assigned to Siemens Aktiengesellschaft, Munich (DE)
Appl. No. 18/695,556
Filed by Siemens Aktiengesellschaft, Munich (DE)
PCT Filed Jul. 29, 2022, PCT No. PCT/EP2022/071313
§ 371(c)(1), (2) Date Mar. 26, 2024,
PCT Pub. No. WO2023/046340, PCT Pub. Date Mar. 30, 2023.
Claims priority of application No. 21199113 (EP), filed on Sep. 27, 2021.
Prior Publication US 2025/0126041 A1, Apr. 17, 2025
Int. Cl. G06F 15/16 (2006.01); H04L 43/028 (2022.01); H04L 43/12 (2022.01); H04L 43/20 (2022.01)
CPC H04L 43/12 (2013.01) [H04L 43/028 (2013.01); H04L 43/20 (2022.05)] 14 Claims
OG exemplary drawing
 
1. A method of capturing packets from one or more applications hosted on one or more containers connected to one or more network interfaces in a section of an industrial network, by a packet capture service wherein the packet capture service is connected to a packet capture client for transmitting the captured packets to the packet capture client, the method comprising:
receiving a capture request for capturing packets associated with a connection of a second container from the one or more containers, wherein the connection is between the second container and a network destination for transmitting one or more packets;
determining a network path associated with the connection of the second container, wherein the network path is indicative of the one or more network interfaces used by the packets of the connection from the second container to the network destination;
determining a presence of the one or more network interfaces in one of a first capture session and the connection between the packet capture service and the packet capture client, wherein the first capture session is for capturing packets associated with a first container, wherein at least one network interface from the one or more network interfaces is present in one of a network path of the first capture session and the connection between the packet capture service and the packet capture client;
generating a filter related to the capture request for capturing packets associated with the connection of the second container, wherein the filter comprises one or more filter expressions for filtering one or more of packets associated with the first capture session and packets originating from or transmitted to the packet capture service; and
approving the capture request for creating a second capture session for capturing packets associated with the connection of the second container.