Complete Packet Inspection (CPI) is technology for computer network traffic analysis that combines header classification and payload pattern search. Parsing of protocol headers supports variable size structures and option fields. Pattern searches can be anchored at a given offset, or non-anchored if the match occurs at an unknown location anywhere in the payload. CPI supports wild-cards and case insensitive matches. Applications of Complete Packet Inspection include network monitoring, application discovery, behavioral analysis, network security, policy enforcement, test and measurement, lawful interception, and trouble shooting. Integrating CPI functionality into the network infrastructure can provide intelligence that facilitates effective network operations. Cost effective chip implementations enable pervasive built-in network intelligence inside switches and other network devices.
