Patent attributes
A method is described for calculating a first hash of a packet application layer payload at an inside sensor before a boundary, and storing a first hash data record at a device that has direct access to the inside sensor. A second hash of the packet application layer payload can be calculated at an outside sensor after the boundary, and a second hash data record can be stored at a device that has direct access to the outside sensor. The packet can be transmitted from a client to a server, or from a server to a client, and the boundary is between the client and the server. The first hash data record and second hash data record can include a hash value, an IP address, and a timestamp. Finally, a determination can be made whether the first hash data record and the second hash data record match.