Hierarchical Traffic Analysis System for High-Speed Network Packet Classification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing traffic flow analysis systems face challenges in efficiently processing and classifying high-speed network traffic due to increasing data volume and speed, requiring powerful and reliable methods to handle complex protocol analysis and packet classification, especially in heavily trafficked networks where the number of simultaneous flows and throughput are both increasing.
Innovation Solution
A hierarchical traffic analyzing system with multiple analyzer circuits connected by links with lower data rates, performing successive levels of analysis, where information from each level is forwarded to subsequent levels, allowing for explicit and implicit protocol recognition and sharing a common memory for state information, enabling efficient classification and processing of packets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If a single analyzer processes all traffic at high speed, then measurement precision is improved, but productivity deteriorates due to processing bottlenecks
Solution Approach 1:
The patent divides the traffic analysis function into multiple analyzer circuits, each handling a portion of the traffic flow. This segmentation allows parallel processing of traffic packets, increasing overall throughput while maintaining analysis accuracy. Each analyzer circuit processes packets independently and contributes to the collective classification result.
Solution Approach 2:
The patent combines multiple analyzer circuits into a unified traffic analysis system where individual analysis results are merged to form a comprehensive classification. The classifiers in each analyzer circuit work together to achieve accurate traffic flow classification while distributing the processing load across multiple units.
2Measurement precision
If more processing power is allocated to each packet, then measurement precision is improved, but use of energy worsens due to increased processing requirements
Solution Approach 1:
The patent segments the intensive processing task across multiple analyzer circuits, distributing the energy consumption burden. Each circuit performs classification with moderate processing power, and the collective result achieves high accuracy without requiring any single unit to consume excessive energy.
Solution Approach 2:
Each analyzer circuit is equipped with its own classifier and processing capabilities, allowing independent operation. This self-service approach enables parallel processing where each unit handles packets autonomously, reducing the need for centralized high-power processing and lowering overall energy consumption.
3Adaptability or versatility
If the number of simultaneous flows N increases, then adaptability is improved, but device complexity worsens due to memory requirements
Solution Approach 1:
The patent divides the memory management burden across multiple analyzer circuits, each handling a subset of flow contexts. This segmentation allows the system to support a larger number of simultaneous flows without requiring any single memory unit to become overly complex or large.
Solution Approach 2:
The patent introduces a spatial dimension by distributing flow context storage across multiple analyzer circuits rather than concentrating it in a single memory unit. This dimensional distribution enables the system to scale to higher numbers of simultaneous flows while maintaining manageable complexity at each individual circuit level.
Data Source
AI summary
The present invention provides a traffic analyzing system on a communications link having analyzer circuits connected to each other by a number of links, where each analyzer circuit has a data rate lower than the data rate of the communications link, and are adapted to perform respective different levels of analysis on packets. The information extracted from the packets analyzed at a first level of analysis by a first analyzer circuit is forwarded to a second level of analysis performed at a second analyzer circuit, where the additional analysis performed by the second analyzer circuit depends on the analysis performed by the first analyzer circuit. Such a system and associated method allows for an efficient, practical, and improved traffic flow analyses for computer networks to evaluate high-speed and heavy traffic flow, as well as for improved protocol analysis for emerging technologies.