Message matching method, state machine compiling method and equipment

Abstract

The embodiment of the invention provides a message matching method, a state machine compiling method and equipment. The matching method includes the steps of carrying out matching on each protocol field in a received message according to a state machine and outputting at least one result of a field analysis result and a field recognition result. The state machine comprises a keyword submachine, a position submachine and a field value submachine. The position submachine is used for carrying out field analysis and / or field recognition on position sensitive fields. The keyword submachine is used for carrying out matching on keyword sensitive fields and skipping to the corresponding field value submachine when specific keywords exist. The field value submachine is used for searching for whether the certain modes that a user is interested in exist in specific keyword field values, and if the certain modes that the user is interested in exist, the field analysis result and / or the field recognition result is outputted. According to the technical scheme, field analysis and recognition on the message can be achieved through one engine, occupation of logical resources is reduced, and integrity flexibility is improved.

Description

technical field [0001] The embodiments of the present invention relate to communication technologies, and in particular to a message matching method, a state machine compiling method and equipment. Background technique [0002] The format of messages in the network is becoming more and more complex, and more and more protocols are carried on the Hypertext Transfer Protocol (HTTP). The field identification for traditional HTTP messages can no longer meet the needs of products, and the fields Parsing is also increasingly important. [0003] The matching process for traditional HTTP packets includes two independent processes of field parsing and field identification. Specifically, compile the field parsing rules to obtain a state machine for the field parsing process, and compile the field identification rules to obtain a state machine for the field identification process, and then load the two state machines into the memory of the hardware (Memory), after the field parsing e...

AI Technical Summary

Problems solved by technology

In the existing technology, the field parsing engine and the field recognition engine cannot be reused, occupying more logic resources, especially when integrated, the flexibility is poor

Images