Method and device for classifying network packets

Abstract

The present invention provides a network packet classification method and device, wherein the method includes: using a cyclic grouping method to group the initial rule set to generate a preset number of sub-rule sets, and the cyclic grouping method includes: selecting from the rule set set to be grouped The target rule set with the highest overlap rate of rule sets is segmented according to the segmentation point to obtain two sub-rule sets, and the rule set overlap rate of one sub-rule set in the two sub-rule sets is smaller than that of the other sub-rule set. The rule set overlap rate of the rule set; put the two sub-rule sets into the rule set set, and continue to split the sub-rule sets in the rule set set until the number of sub-rule sets in the rule set reaches The preset number; each sub-rule set is constructed separately to obtain a decision tree corresponding to the sub-rule set, and the decision tree is used to classify and process network packets. The invention improves the generation efficiency of the decision tree.

Description

technical field [0001] The invention relates to network technology, in particular to a network packet classification method and device. Background technique [0002] Network packet classification can be roughly understood as processing the values ​​of different fields in the network packet header according to the configured classification rules, obtaining the matching classification rules, and executing the operation actions configured by the rules. Many network devices provide functions such as access control, flow control, load balancing, and intrusion detection that require network packet classification. A commonly used network packet classification method in the related art is a network packet classification based on a decision tree. A decision tree is a data structure that describes the network packet classification process generated according to a preset rule set (the rule set includes many classification rules). When a network device receives a network packet, it wil...

AI Technical Summary

Problems solved by technology

[0003] The current problem is that rule duplication may occur in the process of generating the above decision tree, that is, a certain classification rule is divided into two because it covers the split point, resulting in too many nodes in the decision tree, and the scale of the decision tree is too large. Large; the memory used to store the decision tree cannot support such a large amount of information, which limits the size of the rule set corresponding to the decision tree; and the larger decision tree also makes the generation time of the decision tree too long, the efficiency is too low, and the decision tree generation Slowness also reduces the efficiency of the corresponding network packet classification

Images