Detection processing method for data flow, central processing unit and switch

Abstract

The invention relates to a detection processing method for data flow, central processing unit and switch. The method includes acquiring the recording time of the front packet having the identical data characteristic information with the current packet, according to the received current packet; adding 1 to the packet counting when the difference between the recording time of the front packet and the current recording time is smaller than a scheduled detecting cycle; and executing corresponding process operations, when the value of packet counting after adding 1 exceeds a prescribed waterline. The central processing unit includes a time acquiring unit, a current time setting unit, a packet counting unit and a detecting processing unit. The switch provided with the central processing unit, limits speed of the data stream received by the switch in real time by counting the time difference between the identical packets, alleviates the detecting process load of the switch CPU and improves the detecting processing efficiency and attack resistance capability of the switch.

Description

technical field [0001] The invention relates to data exchange technology, in particular to a data flow detection and processing method, a central processing unit and a switch. Background technique [0002] At present, the hardware structure of the switch is composed of application specific integrated circuits (Application Specific Integrated Circuits, ASIC) and CPU, such as figure 1 . ASIC chip 1 is used for high-speed forwarding of data packets between different ports such as port P1, port P2, and port Pn. CPU 2 undertakes more complex affairs, such as: management and monitoring of the entire switch; network management tasks and Request processing; and receiving various messages that need to be processed by software from the port, etc. [0003] When the switch forwards a message, it records the forwarded message by extracting data feature information. The data feature information of the message refers to the information extracted from the fields in all the messages, and ...

AI Technical Summary

Problems solved by technology

For example, when it is necessary to limit the rate of the packet traffic sent to CPU 2 with the same data characteristic information in the network, after the timer expires, CPU 2 needs to limit the traffic of all packets with the same data characteristic information For statistics, the more characteristic information of different data, the greater the amount of information calculated by CPU 2 after the timer expires each time; if the time period required for statistics is shorter, the frequency of timer startup will be higher, and the Greatly increase the processing burden of the switch CPU 2

Images