Network flow classifying, state tracking and message processing device and method

A technology for packet processing and network flow, which is applied in data exchange networks, digital transmission systems, electrical components, etc. It can solve the problem that static flow classification methods cannot establish flow correlations, static flow classification methods limit the number of rules, and incremental update of rules, etc. Scalability, inability to meet, etc.

Inactive Publication Date: 2009-02-04
PEKING UNIV
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The static flow classification method does not record the context status information of the flow, and needs to be searched for each packet, so it is often complicated and has a large load
A service flow usually includes traffic in two directions, and the static flow classification method cannot establish the correlation between the traffic in these two directions, and cannot meet the needs of some applications (such as intrusion detection)
In addition, the static flow classification method also has scalability issues such as the limitation of the number of rules (usually up to tens of thousands), incremental update of rules, etc., which has certain limitations

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Network flow classifying, state tracking and message processing device and method
  • Network flow classifying, state tracking and message processing device and method
  • Network flow classifying, state tracking and message processing device and method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0050] DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS OF THE INVENTION The following describes in more detail with reference to the accompanying drawings of the invention.

[0051] The invention is a device and method for classifying, state tracking and message processing of network flows.

[0052] see figure 1 , the network flow table of the present invention is used to record network flow information, organized in a hash table manner, and the length of the hash table is L. A linked list method is used to solve hash collisions, and each hash table entry contains a head pointer of a flow record linked list. Since the network flow contains traffic in both forward and reverse directions, each flow record entry belongs to two flow record linked lists of the network flow table, and these two linked lists correspond to the forward key value and reverse key value of the flow record respectively .

[0053] The structure of the network flow table hash table entry is shown in the fol...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a classifying, status tracking and message processing device and method for network, implementing finely granular flow control by dynamic flow classification method based on IP quinary group or other specific tags, implementing high speed parallel flow processing by plural parallel devices and inside-device multiple process / thread mechanisms, avoiding large number of exclusive and synchronous operations caused by parallel processing by the measures of slitting network flow table, setting unique writer of flow recording list, strictly stipulating write instruction sequence in list insert and delete operating processes to keep list integrity, etc, and thus further raising processing efficiency. And it is applied to various parallel processing environments, such as network processor, ASIC, FPGA, multikernel processor, symmetrical multiprocessor (SMP), and software process / thread, having good inter-platform compatibility, extendibility and practicality.

Description

technical field [0001] The invention belongs to the technical field of computer network and data communication, and specifically relates to a device and method for classifying, state tracking and message processing of network flows, which can be used for routers, security gateways, traffic monitoring and auditing, network billing, load Among network devices and software such as balancer, it realizes fine-grained control of traffic and improves the efficiency of packet processing. Background technique [0002] With the increasing demand for emerging applications such as VoIP (Voice over IP), mobile data services, and P2P (Peer-to-Peer), network applications are showing a rapid development trend. At the same time, network bandwidth is also increasing rapidly. QoS (Quality of Service), attack / intrusion detection and defense, traffic monitoring and auditing, network billing, load balancing and other key business functions of network facilities are facing new and greater challeng...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/56H04L45/74
Inventor 张建宇韦韬邹维
Owner PEKING UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products