Unlock instant, AI-driven research and patent intelligence for your innovation.

Packet processing method and device

A message processing and message technology, applied in the field of communication, can solve the problems of unusable OSPF functions and inability to process OSPF messages, etc.

Active Publication Date: 2018-11-02
NEW H3C TECH CO LTD
View PDF9 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Network devices cannot process normal OSPF packets due to processing these forged OSPF packets, resulting in the failure of normal OSPF functions

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Packet processing method and device
  • Packet processing method and device
  • Packet processing method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0027] Hereinafter, some terms used in this application are explained to facilitate the understanding of those skilled in the art.

[0028] "OSFP neighbor state machine": see figure 1 As shown, in the process of OSPF neighbor establishment, the local router has to go through several states before reaching a complete adjacency relationship with the neighbor router. These states are defined in OSPF RFC (Request For Comments, Request For Comments Protocol) 2328, which are respectively Down , Attempt, Init, 2-Way, Exstart, Exchange, Loading and Full, the meanings of each state are as follows:

[0029] Down: This is the first OSPF neighbor state. In this state, the local router has not received any information (including hello packets) from the neighbor router. However, in this state, the local router can actively send hello packets to its neighbor routers. When the routers are in the Full state, if no hello packets are received from the neighbor router within the Router DeadInte...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a packet processing method and a packet processing device. The method is applied to a local router that enables OSPF and comprises: receiving a first OSPF packet sent by a neighboring router; when the first OSPF packet triggers to switch the locally established neighbor state machine from the first state to the second state, recording the source IP address and the OSPF protocol number of the first OSPF packet, and recording the IP address of the interface that receives the OSPF packet; adding the recorded source IP address, the OSPF protocol number and the IP address ofthe interface to the whitelist as a whitelist entry; and processing the received second OSPF packet according to the whitelist. This method adopts the way that the OSPF neighbor state machine recordsthe whitelist, so that the neighbor flapping caused by the OSPF DDoS attack may be avoided when the interface that runs the OSPF service is attacked by the OSFP DDoS.

Description

technical field [0001] The present application relates to the technical field of communications, and in particular to a message processing method and device. Background technique [0002] OSPF (Open Shortest Path First, Open Shortest Path First) is an interior gateway protocol used for routing decisions within a single AS (Autonomous System, autonomous system). In the same routing domain, routers running the OSPF protocol each maintain the same LSDB (Link State Database, link state database) by exchanging and flooding LSA (Link State Advertisement, link state advertisement). [0003] At present, an attack source can forge a large number of OSPF packets, and send these forged OSPF packets to network devices, and carry out DDoS (Distributed Denial of Service, Distributed Denial of Service) attacks on network devices. Network devices cannot process normal OSPF packets due to the processing of these forged OSPF packets, and normal OSPF functions cannot be used. Contents of th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/741H04L12/721H04L12/751H04L29/06H04L45/74H04L45/02
CPCH04L45/02H04L45/32H04L45/74H04L63/1458H04L45/12
Inventor 武伟
Owner NEW H3C TECH CO LTD