Method and device for filtering data packets

Abstract

The invention discloses a method and a device for filtering data packets. The method comprises the following steps: receiving a plurality of related data packets, wherein each of the plurality of data packets carries a plurality of same key words; performing a matching operation on part or all of the key words in a first word packet in the plurality of the data packets to acquire a matching action; and according to the plurality of key words, configuring the matching action to the other data packets besides the first data packet in the plurality of data packets. In the method and the device for filtering the data packets, by performing the matching operation on the first data packet in the plurality of related data packets which contain the same key words, the acquired matching action is configured to other data packets which contain the same key words, and a data packet matching speed can be increased, so that the problem that the data packet filtering speed is slow in the related technique is solved, and system cost is saved and system processing efficiency is improved.

Description

technical field [0001] The present invention relates to the communication field, in particular to a data packet filtering method and device. Background technique [0002] In data network applications, data packet filtering is a common operation. For example, in a device with a firewall, it is necessary to scan the data packets entering the device, so that the data packets that meet the requirements pass through, and the data packets that do not meet the requirements are filtered. throw away. [0003] The core of data packet filtering technology is scanning (or called matching operation), that is, comparing the information (or called keywords) contained in the relevant fields of the data packet with the pre-established filtering rules. Describes the requirements that the information contained in the relevant fields should meet. The purpose of the comparison operation is to determine whether the information meets the requirements, and then perform relevant processing operatio...

AI Technical Summary

Problems solved by technology

[0009] Considering that there is data packet filtering speed relatively slow in the related art, can't effectively and correctly filter the problem of a plurality of IP fragmentation packets based on the same IP data message and propose the present invention, for this reason, the main purpose of the present invention The purpose is to provide an improved data packet filtering solution to solve at least one of the above-mentioned problems in related technologies

Images