METHOD AND SYSTEM FOR NETWORK TRAFFIC ANALYSIS WITH RUN-TIME BEHAVIORAL ENHANCEMENTS

A system for network traffic analysis comprises a classification engine operable to parse received frames and provide pre-analysis of the received frames to generate classification information on a flow-basis and on a per packet-basis, a filter processing engine operable to reduce the received frames based on the generated classification information to form information representing filtered frames, and an analysis block operable to perform detailed analysis on contents of the filtered frames and generate objects representing the analysis, wherein the analysis performed by the analysis block is controlled by at least one component defining a particular type of analysis performed to be on a protocol.