System and method for realizing deep packet inspection technology based on multi-core and multi-thread

A deep message inspection and multi-threading technology, applied in the field of network security, can solve the problems of high CPU usage and low processing efficiency, and achieve the effect of accelerated processing, small load and fast speed

Inactive Publication Date: 2012-06-13
DAWNING INFORMATION IND BEIJING
View PDF9 Cites 17 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Because the existing technology will go deep into the load of the message for content retrieval, resulting in high CPU usage and low processing efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • System and method for realizing deep packet inspection technology based on multi-core and multi-thread
  • System and method for realizing deep packet inspection technology based on multi-core and multi-thread

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0018] according to figure 1 Schematic diagram of the structure, the system includes multiple receiving buffer modules and multiple corresponding CPU modules developed on the professional network card on the multi-core server, so as to accurately match the keywords of the received message content in parallel. At the same time, with the help of the dynamically maintained TCP connection flow table module, it is used for real-time identification and statistics of 102 Internet message protocols.

[0019] The present invention firstly opens up a plurality of packet receiving buffers on the professional network card, and binds the threads for processing buffer messages with multiple CPUs one by one, so as to realize accurate matching of the keywords of the received message content in parallel and Match result output.

[0020] Then, with the help of the flow table of the TCP connection, the real-time identification and statistics of the packet protocol are realized. Among them, the...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a system and a method for realizing a deep packet inspection technology based on multi-core and multi-thread. The system comprises a plurality of packet receiving buffer modules and a plurality of CPU (Central Processing Unit) modules. The system is characterized in that the packet receiving buffer modules are corresponding to the CPU modules so as to realize parallel accurate matching of keywords of the received packet contents. In the method, a plurality of packet receiving buffers are created, and the threads of the packets in the buffers are bound with the plurality of CPU one to one, so as to realize the parallel accurate matching of the keywords of the received packet contents. With the provided system and method for realizing the deep packet inspection technology based on multi-core and multi-thread, the load on the CPU is reduced, and the processing procedure of deep packet inspection is accelerated.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a system and method for realizing a deep message detection technology based on multi-core and multi-thread. technical background [0002] At present, the implementation of deep packet inspection technology is mainly carried out in the way of single-thread pipeline operation. When the amount of data processed is very large, the CPU burden is heavy, and the phenomenon of packet loss is prone to occur if the processing is not timely. [0003] Patent No. CN200710198554.7 (deep message detection equipment and method) discloses a deep message detection device and method, the method includes the following steps: (a) sending the message to be detected to the deep message detection device by the network processor Text data, including the message to be detected and the additional control information of the network processor, the control information includes the current...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L29/06H04L29/08G06F17/30
Inventor 姬乃军李锋伟刘朝辉纪奎邵宗有
Owner DAWNING INFORMATION IND BEIJING
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap