Network Switch Abnormity Detection with Threshold-Based Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network switches frequently perform abnormity processing procedures, reducing processor utilization due to immediate response to abnormity events.
Innovation Solution
A network switch with a memory configured to filter packet data using an access control list and perform abnormity detection, incrementing a counting value when abnormity events occur, and sending a notification to the processor only when the counting value reaches a threshold, triggering abnormity processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the network switch immediately performs abnormity processing procedure when an abnormity event occurs, then the response speed is improved, but the processor utilization deteriorates due to frequent processing
Solution Approach 1:
The patent applies preliminary action by pre-configuring abnormity detecting programs and access control lists in the memory, enabling the system to automatically detect and count abnormity events without immediate processor intervention. The processor only needs to perform processing when the counting threshold is reached, rather than responding to every single abnormity event.
Solution Approach 2:
The patent introduces a counting mechanism as an intermediary between abnormity detection and processor processing. The memory counts the number of abnormity events and only triggers processor processing when the count reaches a predetermined threshold, thereby reducing the frequency of processor intervention while maintaining system responsiveness.
2Reliability
If the network switch performs abnormity processing procedure frequently, then the reliability of abnormity detection is improved, but the processor becomes overloaded
Solution Approach 1:
The patent applies partial action by performing complete processor-based abnormity processing only when necessary (when counting threshold is reached), rather than processing every abnormity event. For events below the threshold, the system uses lighter-weight memory-based counting and filtering, reducing overall processor load while maintaining detection reliability.
Data Source
AI summary
A network switch is configured to receive packet data. The network switch includes a memory and a processor. The memory is configured to store an access control list and an abnormity detecting program, filter the packet data according to the access control list, and perform an abnormity detecting procedure on the packet data according to the abnormity detecting program. When at least one abnormity event occurs in one of a plurality of time intervals, a counting value increases. When the counting value reaches a counting threshold value, the memory sends an abnormity notification to the processor and the processor performs an abnormity processing procedure on the packet data.