Deep packet inspection method

A deep packet inspection and data packet technology, applied in the field of data communication, can solve the problems of keyword segmentation and matching, which are difficult to implement, and achieve the effect of easy logic implementation and pipeline processing, simplifying the processing process, and reducing false hits

Active Publication Date: 2014-04-09
RUN TECH CO LTD BEIJING
View PDF2 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0010] The present invention aims at the problem that the segmentation and matching of keywords are not easy to realize in the process of implementing deep packet detection in FPGA+TCAM mode, and proposes a method for segmentation and matching of keywords, which makes the process easy to realize

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Deep packet inspection method
  • Deep packet inspection method
  • Deep packet inspection method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0046] The working environment of this method is as follows figure 1 shown. Before the data packets are connected, the FPGA first configures the keywords to be matched into the TCAM, and at the same time configures the data packet processing method corresponding to the matching rules into the SRAM of the corresponding address. Keywords can also be updated during the process of packet inspection through deep packet inspection.

[0047] A keyword has two characteristics: offset position and content. The offset position is the value at which the start position of the keyword is offset from the start position of the packet load. When configuring keywords, if the matching length supported by the TCAM is M, the keywords are divided according to the length N=M / 2. According to the offset position and length of the keyword, it is divided into two types of segmentation and configuration.

[0048] Type 1: When the offset position and end position of the fixed-position keyword satisfy:...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a deep packet inspection method. The method comprises the following step of: building an FPGA (Field Programmable Gata Array) module, wherein the FPGA module is connected with a TCAM (Three-phase Content Addressing Memory) so as to receive a to-be-inspected data packet load and match keywords, and the supported match length of the keywords in the TCAM is M. The step concretely comprises the following sub-steps of: 1) segmenting the keyword, wherein the keyword is segmented according to a keyword segmentation length N, and N=M / 2; 2) recombining the keyword in the step 1) according to a set condition which a keyword offset position and an end position meet, to get a keyword matching rule; 3) storing the segmented and recombined keyword into the TCAM and an SRAM (Static Random Access Memory) to finish the pretreatment on the keyword; 4) extracting the data packet load by the FPGA module, segmenting and recombining the load, and sending the result of treatment into the TCAM for matching by the FPGA, and returning back the result of matching to the FPGA module; and 5) returning back the mode of processing operations of corresponding data packets to the FPGA module through reading the matching address in the SRAM by the FPGA, and outputting data packet data.

Description

technical field [0001] The invention relates to a method for processing keywords in the process of hardware deep packet detection, which belongs to the field of data communication. Background technique [0002] Deep packet inspection technology is widely used in the field of data communication, and is often used in data packet application type analysis, user behavior analysis, intrusion detection, virus / worm detection, etc. [0003] Traditional deep packet inspection is often implemented by software, using various pattern matching algorithms to match specific keywords, but the speed of software deep packet inspection is limited, and line-speed processing cannot be guaranteed. The method of using hardware to implement deep packet inspection can realize wire-speed processing under large traffic conditions. [0004] Using hardware to implement deep packet inspection, the most commonly used method is to use a "field programmable gate array" (FPGA) plus a "three-phase content ad...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/26
Inventor 岳培培李树佳刘钧凯
Owner RUN TECH CO LTD BEIJING
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap