Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Abstract

A multi-protocol, multi-stage, real-time frame classifier is disclosed. A preliminary multi-protocol frame composition analyzer is provided for performing preliminary multi-protocol frame classification for incoming frames. A parsing instruction generator is provided for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions. A multi-stage parsing engine provides multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame. An advanced level of data extraction is provided across various frame protocols without imposing a performance penalty. Longest prefix match searches and / or direct lookup searches are supported. Moreover, conditional extractions, instruction branching, multi-stage processing are all performed in real time.

Description

CROSS-REFERENCE TO OTHER PATENT APPLICATIONS [0001] The following co-pending patent applications of common assignee contains some common disclosure: [0002]“System And Method For Providing Transformation Of Multi-Protocol Packets In A Data Stream,” Attorney Docket No. 1305.1-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety; [0003]“System And Method For Policing Multiple Data Flows And Multi-Protocol Data Flows,” Attorney Docket No. 1305.6-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety; [0004]“System And Method For Hierarchical Policing Of Flows And Subflows Of A Data Stream,” Attorney Docket No. 1305.10-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety.BACKGROUND OF THE INVENTION [0005] 1. Field of the Invention [0006] This invention relates in general to a method and apparatus for handling packets, and more particularly to a method and apparatus for...

AI Technical Summary

Benefits of technology

The present invention provides a method and apparatus for real-time frame classification in a multi-protocol, multi-stage manner. This allows for advanced data extraction and analysis of frames across various protocols. The invention includes a preliminary multi-protocol frame classification, processing of the incoming frame and preliminary classification to provide parsed instructions, and multi-stage parsing of the incoming frame to generate search results. The invention also includes conditional extraction, forwarding of frame and search results, and content addressable memory for searching frame data. The technical effects of the invention include improved data extraction and analysis, improved real-time frame classification, and improved search results.

Problems solved by technology

At transfer rates above 100 Mbps, providing the processing power required by a packet switch interconnecting a group of networks becomes economically challenging for the performance levels desired.

This difficulty in economically “scaling up” performance is beginning to cause restrictions in some user's planned network expansions.

Also, today's data networks do not provide network managers with enough control over bandwidth allocation and user access.

As can be seen, the technological convergence of computer and communication networks has led to more complex transmission of data, voice, images etc.

Furthermore, these operations consume a considerable amount of time in the protocol processing, in particular when dealing with many connections, e.g., in a server, or when processing multimedia data streams.

The result of this is cumbersome and conventional filtering applied to the high-speed networks leads to network degradation.

In addition to the above-mentioned problems, another problem associated with using a CAM to match connection information in the header.

However, as search words are built, the amount of memory required explodes exponentially.

The processing of protocol headers and the recognition of different protocol types in real time is a very complicated and difficult undertaking.

In almost all network systems, header processing is still a major CPU-cycle (Central Processor Unit) consuming activity.

Images