Abstract: Techniques are provided for determining whether network traffic includes a user identifier of interest. Each byte of network traffic is classified as being either a valid character, an invalid character, or a delimiter character. An information stream can be generated based on the classification. Storage of valid characters in the information stream can be initiated when a first delimiter character is detected. Storage of valid characters in the information stream can be stopped when a second delimiter character is detected. The stored valid characters between the first delimiter character and the second delimiter character can be examined to determine whether the stored valid characters correspond to a user identifier.

Abstract: Techniques are provided for determining whether network traffic includes a user identifier of interest. Each byte of network traffic is classified as being either a valid character, an invalid character, or a delimiter character. An information stream can be generated based on the classification. Storage of valid characters in the information stream can be initiated when a first delimiter character is detected. Storage of valid characters in the information stream can be stopped when a second delimiter character is detected. The stored valid characters between the first delimiter character and the second delimiter character can be examined to determine whether the stored valid characters correspond to a user identifier.