Communication device with forwarding database having a trie search facility
    21.
    发明授权
    Communication device with forwarding database having a trie search facility 失效
    具有转发数据库的通信设备具有特里搜索设备

    公开(公告)号:US06804230B1

    公开(公告)日:2004-10-12

    申请号:US09432591

    申请日:1999-11-03

    IPC分类号: G06F1730

    摘要: A communication device which includes a hardware trie search facility. At least part of a memory is divided into memory blocks, each of said blocks consisting of a multiplicity of locations, at least some of said locations each providing when accessed a pointer to another block and an indication of the size of the block. A shift register holds an address key, and a trie block is accessed using an address composed of a number of bits related to said indication of the size of the block. The key is shifted by said number of bits prior to a subsequent stage of the search. Part of the memory comprises an associated data table which includes entries of data enabling a packet to be forwarded and at least some locations in said blocks provide when accessed a pointer to an entry in the associated data table.

    摘要翻译: 一种包括硬件特里搜索设备的通信设备。 存储器的至少一部分被分成存储器块,每个所述块由多个位置组成,当访问指向另一个块的指针时,至少一些所述位置中的每个提供,并且指示块的大小。 移位寄存器保存地址密钥,并且使用由与块的大小的所述指示相关的多个位组成的地址访问特里块。 密钥在搜索的后续阶段之前移位所述比特数。 存储器的一部分包括相关联的数据表,其包括能够转发分组的数据的条目,并且当访问到所述相关联的数据表中的条目的指针时,所述块中的至少一些位置提供。

    Stacked communication devices and method for port mirroring using modified protocol
    22.
    发明授权
    Stacked communication devices and method for port mirroring using modified protocol 失效
    使用修改协议的堆叠通信设备和端口镜像方法

    公开(公告)号:US06425015B1

    公开(公告)日:2002-07-23

    申请号:US09201345

    申请日:1998-11-30

    IPC分类号: G06F1517

    CPC分类号: H04L43/00

    摘要: Port mirroring is achieved between ports on separate devices in a stack of communication devices by establishing a protocol for communications within a cascade connection forming the stack in which an indication is given of whether the communication is being sent to the mirror port in addition to its intended destination. This avoids increasing the volume of traffic in the cascade connection as would be the case if the original and mirror copy were sent separately.

    摘要翻译: 在通信设备的堆叠中的单独设备上的端口之间实现端口镜像,通过建立用于形成堆栈的级联连接中的通信协议,其中给出除了其预期之外是否将通信发送到镜像端口的指示 目的地。 这样可以避免增加级联连接中的流量,就像分开发送原始和镜像副本的情况一样。

    Content addressable memory organized to share entries between different entities such as ports of a network unit
    23.
    发明授权
    Content addressable memory organized to share entries between different entities such as ports of a network unit 有权
    内容可寻址存储器被组织以在诸如网络单元的端口的不同实体之间共享条目

    公开(公告)号:US07480300B2

    公开(公告)日:2009-01-20

    申请号:US11064258

    申请日:2005-02-22

    IPC分类号: H04L12/28 G06F7/04

    摘要: A content addressable memory stores entries each comprising a rule and as part of the entry a mask identifying all the entities to which the rule is applicable. A search pattern of data and a bit mask identifying the actual entity (or entities) associated with the data is applied as a search word along with a comparison mask that excludes all the other entities from the comparison of the search word with the entry. The CAM can thereby store efficiently in a single entry a rule that may be applicable to some but not all of a multiplicity of entities such as possible ingress ports of a network unit.

    摘要翻译: 内容可寻址存储器存储每个包括规则的条目,并且作为该条目的一部分,掩码标识规则所适用的所有实体。 将与数据相关联的实际实体(或实体)的搜索模式和位掩码应用为搜索词,以及将搜索词与条目的比较排除所有其他实体的比较掩码。 因此,CAM可以在单个条目中有效地存储可适用于多个实体中的一些而不是全部的规则,例如网络单元的可能入口端口。

    SIGNATURE CHECKING USING DETERMINISTIC FINITE STATE MACHINES
    24.
    发明申请
    SIGNATURE CHECKING USING DETERMINISTIC FINITE STATE MACHINES 有权
    使用确定性有限状态机器进行签名检查

    公开(公告)号:US20080101371A1

    公开(公告)日:2008-05-01

    申请号:US11923869

    申请日:2007-10-25

    IPC分类号: H04L12/56

    摘要: The occurrence of false positives and the post-processing of digital streams subjected to examination by a deterministic finite state machine for character strings are reduced by combining location-based pattern matching, e.g. on packet headers, and content-based pattern matching, e.g. on payloads of packets. One scheme allows automatic transition from a header match state into an initial state of a content matching machine. Another scheme is based on a rules graph defining strings of match states and the examination of a list of match states (rather than characters) which have been previously determined, for example by means of header matching and content matching. The latter is also capable of comparing offset and depth values associated with the match states with offset and depth criteria.

    摘要翻译: 通过组合基于位置的模式匹配,例如,通过组合基于位置的模式匹配来减少误报的发生和经过用于字符串的确定性有限状态机检查的数字流的后处理。 分组报头和基于内容的模式匹配,例如, 在包的有效载荷上。 一种方案允许从头匹配状态自动转换到内容匹配机器的初始状态。 另一种方案是基于定义匹配状态串的规则图,并且例如通过标题匹配和内容匹配来检查先前确定的匹配状态(而不是字符)的列表。 后者还能够将与匹配状态相关联的偏移和深度值与偏移和深度标准进行比较。

    Content addressable memory organized to share entries between different entities such as ports of a network unit
    25.
    发明申请
    Content addressable memory organized to share entries between different entities such as ports of a network unit 有权
    内容可寻址存储器被组织以在诸如网络单元的端口的不同实体之间共享条目

    公开(公告)号:US20060120373A1

    公开(公告)日:2006-06-08

    申请号:US11064258

    申请日:2005-02-22

    IPC分类号: H04L12/28

    摘要: A content addressable memory stores entries each comprising a rule and as part of the entry a mask identifying all the entities to which the rule is applicable. A search pattern of data and a bit mask identifying the actual entity (or entities) associated with the data is applied as a search word along with a comparison mask that excludes all the other entities from the comparison of the search word with the entry. The CAM can thereby store efficiently in a single entry a rule that may be applicable to some but not all of a multiplicity of entities such as possible ingress ports of a network unit

    摘要翻译: 内容可寻址存储器存储每个包括规则的条目,并且作为该条目的一部分,掩码标识规则所适用的所有实体。 将与数据相关联的实际实体(或实体)的搜索模式和位掩码应用为搜索词,以及将搜索词与条目的比较排除所有其他实体的比较掩码。 因此,CAM可以在单个条目中有效地存储可适用于一些但不是全部多个实体的规则,例如网络单元的可能入口端口

    Signature checking using deterministic finite state machines
    26.
    发明授权
    Signature checking using deterministic finite state machines 有权
    使用确定性有限状态机进行签名检查

    公开(公告)号:US08331404B2

    公开(公告)日:2012-12-11

    申请号:US11923869

    申请日:2007-10-25

    IPC分类号: H04J1/02

    摘要: The occurrence of false positives and the post-processing of digital streams subjected to examination by a deterministic finite state machine for character strings are reduced by combining location-based pattern matching, e.g. on packet headers, and content-based pattern matching, e.g. on payloads of packets. One scheme allows automatic transition from a header match state into an initial state of a content matching machine. Another scheme is based on a rules graph defining strings of match states and the examination of a list of match states (rather than characters) which have been previously determined, for example by means of header matching and content matching. The latter is also capable of comparing offset and depth values associated with the match states with offset and depth criteria.

    摘要翻译: 通过组合基于位置的模式匹配,例如,通过组合基于位置的模式匹配来减少误报的发生和经过用于字符串的确定性有限状态机检查的数字流的后处理。 分组报头和基于内容的模式匹配,例如, 在包的有效载荷上。 一种方案允许从头匹配状态自动转换到内容匹配机器的初始状态。 另一种方案是基于定义匹配状态串的规则图,并且例如通过标题匹配和内容匹配来检查先前确定的匹配状态(而不是字符)的列表。 后者还能够将与匹配状态相关联的偏移和深度值与偏移和深度标准进行比较。

    Network switch with truncated trie look-up facility
    27.
    发明授权
    Network switch with truncated trie look-up facility 失效
    网络切换与截断的特里查询设备

    公开(公告)号:US06337862B1

    公开(公告)日:2002-01-08

    申请号:US09573821

    申请日:2000-05-18

    IPC分类号: H04L1228

    CPC分类号: H04L45/00 H04L45/742

    摘要: A network switch including a multiplicity of ports for the reception and forwarding of addressed data packets including network destination data and network source address data, and a forwarding database having a trie search facility organised in blocks of pointers, which are accessed by respective segments of a search key and identify in a last stage of a search forwarding data identifying each port from which a packet should be forwarded and in any stage of the search prior to the last stage a block of pointers, the switch including a device operable before the trie search facility is utilised for a given packet to compare a network destination address of the given packet with at least one stored address and when the network destination address matches the stored address to access the network source address data of the given packet for use as the search key.

    摘要翻译: 包括用于接收和转发包括网络目的地数据和网络源地址数据的寻址数据分组的多个端口的网络交换机,以及具有组织在指针块中的特里搜索设备的转发数据库,​​该转发数据库由 搜索关键字并且在最后阶段识别识别要在其中转发数据包的每个端口的数据的最后阶段,并且在最后阶段之前的任何阶段中的指针块,所述交换机包括在特里搜索之前可操作的设备 用于给定分组的设施用于将给定分组的网络目的地地址与至少一个存储的地址进行比较,并且当网络目的地地址与存储的地址匹配时,访问给定分组的网络源地址数据以用作搜索关键字 。