Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Abstract

A multi-protocol, multi-stage, real-time frame classifier is disclosed. A preliminary multi-protocol frame composition analyzer is provided for performing preliminary multi-protocol frame classification for incoming frames. A parsing instruction generator is provided for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions. A multi-stage parsing engine provides multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame. An advanced level of data extraction is provided across various frame protocols without imposing a performance penalty. Longest prefix match searches and / or direct lookup searches are supported. Moreover, conditional extractions, instruction branching, multi-stage processing are all performed in real time.

Description

CROSS-REFERENCE TO OTHER PATENT APPLICATIONS [0001] The following co-pending patent applications of common assignee contains some common disclosure: [0002]“System And Method For Providing Transformation Of Multi-Protocol Packets In A Data Stream,” Attorney Docket No. 1305.1-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety; [0003]“System And Method For Policing Multiple Data Flows And Multi-Protocol Data Flows,” Attorney Docket No. 1305.6-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety; [0004]“System And Method For Hierarchical Policing Of Flows And Subflows Of A Data Stream,” Attorney Docket No. 1305.10-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety.BACKGROUND OF THE INVENTION [0005] 1. Field of the Invention [0006] This invention relates in general to a method and apparatus for handling packets, and more particularly to a method and apparatus for...

AI Technical Summary

Benefits of technology

[0033] Another aspect of the present invention is that the providing multi-stage parsing of the incoming frame further includes reprocessing the search results to generate refined parsing instructions and parsing of the incoming frame according to the refined parsing instructions to generate refined search results, the refined search results providing greater information about the incoming frame.

[0056] Another aspect of the present invention is that the multi-protocol, multi-stage, real-time frame classifier further includes a feedback path for allowing the search results to be reprocessed to generate refined parsing instructions that are used by the parsing engine to generate refined search results, the refined search results providing greater information about the incoming frame.

Problems solved by technology

At transfer rates above 100 Mbps, providing the processing power required by a packet switch interconnecting a group of networks becomes economically challenging for the performance levels desired.

This difficulty in economically “scaling up” performance is beginning to cause restrictions in some user's planned network expansions.

Also, today's data networks do not provide network managers with enough control over bandwidth allocation and user access.

As can be seen, the technological convergence of computer and communication networks has led to more complex transmission of data, voice, images etc.

Furthermore, these operations consume a considerable amount of time in the protocol processing, in particular when dealing with many connections, e.g., in a server, or when processing multimedia data streams.

The result of this is cumbersome and conventional filtering applied to the high-speed networks leads to network degradation.

In addition to the above-mentioned problems, another problem associated with using a CAM to match connection information in the header.

However, as search words are built, the amount of memory required explodes exponentially.

The processing of protocol headers and the recognition of different protocol types in real time is a very complicated and difficult undertaking.

In almost all network systems, header processing is still a major CPU-cycle (Central Processor Unit) consuming activity.

Images