Unlock instant, AI-driven research and patent intelligence for your innovation.

Rapid matching classification method for data packets

A classification method and data packet technology, applied in the direction of electrical components, transmission systems, etc., can solve problems such as performance degradation, and achieve the effect of speeding up matching filtering, effective forwarding effect and efficiency

Inactive Publication Date: 2015-11-18
SHANDONG CHAOYUE DATA CONTROL ELECTRONICS CO LTD
View PDF4 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

For packet filtering technology, when there are only a few or dozens of rules in the rule base, it has little impact on network transmission performance, but when the number of rules exceeds 1000, the performance will be greatly reduced

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Rapid matching classification method for data packets

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0023] Such as figure 1 As shown, a method for fast matching and classification of data packets, first classifies the existing rule base according to the set classification rules, compares the priority of the rules of the same class, and deletes the previous rules according to the principle of repeated rules; Then, in the same type of rules, the method of sequential matching and priority collection is used for rule matching; finally, according to the matching rules, corresponding commands are executed.

Embodiment 2

[0025] On the basis of Embodiment 1, the classification rules described in this embodiment divide the rules into four categories: MAC address, IP address, port, and protocol according to the 8-tuple. In classes, the priority follows the rules;

[0026] For example, if a rule is if {*, *, 192.168.137.23, 192.168.137.73, *, *, ICMP, 100}, then discard, then the rule can be an ip address rule or a protocol rule; if If it is an ip address rule, it is if {*, *, 192.168.137.23, 192.168.137.73, *, *, *, 100}, then discarded; if it is a protocol rule, it is if {*, *, *, *, *, *, ICMP, 100}, then drop;

[0027] The priority is divided into 1-255, the priority value is an integer, the bigger the better;

[0028] For rules with the same size priority, according to the time priority, the later priority is greater, and the later rule replaces the previous rule;

[0029] If multiple rules have different priorities, the rule with higher priority will be selected.

Embodiment 3

[0031] On the basis of embodiment 1 or 2, the specific operation steps of the method described in this embodiment are as follows:

[0032] 1) Divide the continuously enriched filtering rule base into 4 categories according to the classification rules, and arrange them in order to make the filtering rules orderly;

[0033] 2) Match each filter rule according to the sequential matching strategy, compare its priority, and select the appropriate matching rule;

[0034] 3) According to the obtained matching rules, the data packets are passed and discarded.

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a rapid matching classification method for data packets. The method comprises the following steps: firstly, classifying existing rule libraries according to a set classification rule, performing priority comparison on rules of the same types, and deleting previous rules in repeated rules in order of departure; secondly, performing rule matching on the rules of the same types through sequence matching and priority sets; and lastly, executing corresponding commands according to the matched rules. Through adoption of the method, the matched filtering of the data packets can be accelerated with an existing matching mechanism and algorithm, and the forwarding effect and efficiency of the data packets can be improved.

Description

technical field [0001] The invention relates to the technical field of data packet matching and filtering in the direction of network technology, in particular to a method for fast matching and classification of data packets, and mainly provides a data packet matching algorithm based on a rule base. The algorithm combines a classification method and a sequence priority matching mechanism, Effectively improve the efficiency of data packet matching and filtering, and greatly improve the efficiency of data forwarding. Background technique [0002] Packet filtering technology is the basic technology of a firewall, and almost all routers have this function embedded. The basic principle is to check the source address, destination address, source port number, destination port number, protocol type, and connection status of each data packet in the data flow according to the pre-set access rule list in the system, and use this to determine whether to allow the packet to pass. For t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L29/06
CPCH04L63/0236H04L63/0263
Inventor 吴登勇钟超群孙超
Owner SHANDONG CHAOYUE DATA CONTROL ELECTRONICS CO LTD