公开(公告)号：US08176413B2

公开(公告)日：2012-05-08

申请号：US12059913

申请日：2008-03-31

申请人： Glenn A. Marcy ,  Jan Van Lunteren ,  Marcel Waldvogel

发明人： Glenn A. Marcy ,  Jan Van Lunteren ,  Marcel Waldvogel

IPC分类号： G06F17/27 ,  G06F11/00

CPC分类号： G06F17/2247 ,  G06F17/2725

摘要： A data processing method comprises receiving an electronically parseable document, scanning the document according to at least one predefined rule to determine if the document is suspicious, and, if the document is determined not to be suspicious, parsing the document with a first parser, and, if the document is determined to be suspicious, parsing the document with a second parser.

摘要翻译： 数据处理方法包括接收电子可解析文档，根据至少一个预定义规则扫描文档以确定文档是否可疑，以及如果文档被确定为不可疑，则用第一解析器解析文档，以及 如果文档被确定为可疑，则使用第二个解析器解析文档。

公开(公告)号：US07844422B2

公开(公告)日：2010-11-30

申请号：US11740558

申请日：2007-04-26

申请人： Rolf Fritz ,  Markus Kaltenbach ,  Ulrich Mayer ,  Thomas Pflueger ,  Cordt Starke ,  Jan Van Lunteren

发明人： Rolf Fritz ,  Markus Kaltenbach ,  Ulrich Mayer ,  Thomas Pflueger ,  Cordt Starke ,  Jan Van Lunteren

IPC分类号： G06F17/10

CPC分类号： G06F17/2247

摘要： The invention relates to a method of optimizing a state transition function specification for a state machine engine based on a probability distribution for the state transitions. For the preferred embodiment of the invention, a B-FSM state machine engine accesses a transition rule memory using a processor cache. The invention allows improving the cache hit rate by exploiting the probability distribution. The N transition rules that comprise a hash table entry will be loaded in a burst mode from the main memory, from which the N transition rules are transferred to the processor cache. Because the comparison of the actual state and input values against each of the transition rules can immediately start after each of these rules has been received, the overall performance is improved as the transition rule that is most likely to be selected is the first to be transferred as part of the burst access.

摘要翻译： 本发明涉及一种基于状态转换的概率分布优化状态机引擎的状态转换功能规范的方法。 对于本发明的优选实施例，B-FSM状态机引擎使用处理器高速缓存来访问转换规则存储器。 本发明允许通过利用概率分布来提高缓存命中率。 构成哈希表条目的N个转换规则将以从主存储器的突发模式加载，N个转换规则从该存储器传送到处理器高速缓存。 因为实际状态和输入值与每个转换规则的比较可以在接收到每个这些规则之后立即开始，因为最有可能选择的转换规则是首先被转移的整体性能得到改善 作为突发访问的一部分。

公开(公告)号：US07508985B2

公开(公告)日：2009-03-24

申请号：US10970798

申请日：2004-10-21

申请人： Jan Van Lunteren

发明人： Jan Van Lunteren

IPC分类号： G06K9/00 ,  G06F17/30

CPC分类号： G06F17/30985 ,  Y10S707/99936

摘要： An XML parsing system includes a pattern-matching system 1 that receives an input stream 2 of characters corresponding to the XML document to be parsed, and provides an output 3 for subsequent processing in software by a processor 4. The pattern matching system 1 includes two main components, a controller in the form of a programmable state machine 5, which is programmed with an appropriate state transition diagram 6, and a character processing unit 7 in the form of a token and character handler. The programmable state machine 5 controls the character processing unit 7 to, e.g., compare characters in the input character stream 2 with other received or stored characters. The character processing unit 7 then provides feedback to the programmable state machine controller 5, e.g., as to whether the compared characters match, so that the programmable state machine controller 5 can then parse the received document accordingly.

摘要翻译： XML解析系统包括模式匹配系统1，其接收与要解析的XML文档相对应的字符的输入流2，并且通过处理器4提供用于后续处理的输出3。模式匹配系统1包括两个 主要组件，以可编程状态机5的形式的控制器，其由适当的状态转换图6编程，以及以令牌和字符处理器的形式的字符处理单元7。 可编程状态机5控制字符处理单元7，例如将输入字符流2中的字符与其他接收或存储的字符进行比较。 字符处理单元7然后向可编程状态机控制器5提供例如关于所比较的字符是否匹配的反馈，使得可编程状态机控制器5然后可以相应地解析所接收的文档。

公开(公告)号：US07193997B2

公开(公告)日：2007-03-20

申请号：US10090592

申请日：2002-02-28

申请人： Jan Van Lunteren ,  Antonius Engbersen

发明人： Jan Van Lunteren ,  Antonius Engbersen

IPC分类号： H04L12/28

CPC分类号： H04L47/10 ,  H04L29/06 ,  H04L45/742 ,  H04L45/7453 ,  H04L47/20 ,  H04L69/22

摘要： Methods and apparatus are provided for classifying data packets in data processing systems. A first packet classification method determines which of a plurality of predefined processing rules applies to a data packet, where each rule is associated with a range of possible data values in each of a plurality of dimensions (X,Y) corresponding to respective data items in the packet format. For each dimension (X,Y), it is determined which of a set of predefined basic ranges contains the corresponding data value (I1, I2) from the packet, where the basic ranges correspond to respective non-overlapping value ranges between successive rule range boundaries in the dimension. For the basic range so determined for each dimension, a corresponding basic range identifier is selected from a set of predefined basic range identifiers corresponding to respective basic ranges in that dimension. For each of at least two dimensions (X,Y), the basic range identifiers comprise respective pD-bit strings generated independently for that dimension by a process of deriving a primitive range hierarchy based on the rule ranges in that dimension. The resulting basic range identifiers, one for each dimension, are then combined to produce a search key which is supplied to a ternary content-addressable memory (5). In the memory (5), the search key is compared with a set of ternary rule vectors, each associated with a particular rule and derived for that rule from the aforementioned hierarchies, to identify at least one rule which applies to the data packet. A second method classifies data packets according to the values in respective data packets of a single, predetermined data item (DA) in the data packet format, where a plurality of classification results are predefined for respective ranges of values of the data item (DA). Here the data item (DA) in the packet is first segmented. The resulting segments are then equated to different dimensions (X,Y) of a multidimensional packet classification problem and are processed in a similar manner to identify a classification result for the packet.

公开(公告)号：US20050132342A1

公开(公告)日：2005-06-16

申请号：US10970798

申请日：2004-10-21

申请人： Jan Van Lunteren

发明人： Jan Van Lunteren

IPC分类号： G06F9/45 ,  G06F17/30

CPC分类号： G06F17/30985 ,  Y10S707/99936

摘要： An XML parsing system includes a pattern-matching system 1 that receives an input stream 2 of characters corresponding to the XML document to be parsed, and provides an output 3 for subsequent processing in software by a processor 4. The pattern matching system 1 includes two main components, a controller in the form of a programmable state machine 5, which is programmed with an appropriate state transition diagram 6, and a character processing unit 7 in the form of a token and character handler. The programmable state machine 5 controls the character processing unit 7 to, e.g., compare characters in the input character stream 2 with other received or stored characters. The character processing unit 7 then provides feedback to the programmable state machine controller 5, e.g., as to whether the compared characters match, so that the programmable state machine controller 5 can then parse the received document accordingly.

摘要翻译： XML解析系统包括模式匹配系统1，其接收与要解析的XML文档相对应的字符的输入流2，并且通过处理器4提供用于后续处理的输出3。模式匹配系统1包括两个 主要组件，以可编程状态机5的形式的控制器，其由适当的状态转换图6编程，以及以令牌和字符处理器的形式的字符处理单元7。 可编程状态机5控制字符处理单元7，例如将输入字符流2中的字符与其他接收或存储的字符进行比较。 字符处理单元7然后向可编程状态机控制器5提供例如关于所比较的字符是否匹配的反馈，使得可编程状态机控制器5然后可以相应地解析所接收的文档。

公开(公告)号：US06782382B2

公开(公告)日：2004-08-24

申请号：US09801026

申请日：2001-03-07

申请人： Jan Van Lunteren

发明人： Jan Van Lunteren

IPC分类号： G06F1730

CPC分类号： G06F17/30985 ,  Y10S707/99931 ,  Y10S707/99933

摘要： The invention relates to a system in which given search keys are evaluated, segment by segment, to search through tree-structured tables for finding an output information corresponding to the longest matching prefix. For at least one of the segments, only selected bits of the search key segment are used as index for accessing an associated table where test values are stored which are to be compared to the respective search key segment. The bits to be selected are determined by an index mask, reflecting the distribution of the valid test values in the table entries (and valid search key segment values). This allows table compression for minimizing storage requirements and search time. A procedure is disclosed for generating an optimum index mask in response to the set of valid test values.

摘要翻译： 本发明涉及一种系统，其中逐段评估给定的搜索关键字，以搜索通过树形结构的表以找到对应于最长匹配前缀的输出信息。 对于至少一个段，仅将搜索关键字段的选定位用作访问相关表的索引，其中存储测试值将与相应搜索关键段进行比较。 要选择的位由索引掩码确定，反映表条目中的有效测试值的分布（以及有效的搜索关键段值）。 这允许表压缩最小化存储要求和搜索时间。 公开了用于响应于一组有效测试值来生成最佳索引掩码的过程。

公开(公告)号：US20120242369A1

公开(公告)日：2012-09-27

申请号：US13070864

申请日：2011-03-24

申请人： Jan Van Lunteren

发明人： Jan Van Lunteren

IPC分类号： H03K19/173

CPC分类号： H03K19/1737

摘要： A system includes a register, a first logical function portion, the first logical function portion operative to receive a first numerical value from the register, perform a first logical function with the first numerical value, and output a second numerical value, a second logical function portion, the second logical function portion operative to receive the first numerical value from the register, perform a second logical function with the first numerical value, and output a third numerical value, and a control logic portion, the control logic portion operative to receive the first numerical value from the register, determine whether the first numerical value includes a code associated with either the first logical function or the second logical function, and responsive to determining that the code is associated with the first logical function, and direct the output of the second numerical value to an input of the register.

摘要翻译： 一种系统包括寄存器，第一逻辑功能部分，第一逻辑功能部分，用于从寄存器接收第一数值，执行具有第一数值的第一逻辑函数，并输出第二数值，第二逻辑函数 所述第二逻辑功能部分用于从所述寄存器接收所述第一数值，执行具有所述第一数值的第二逻辑功能，并输出第三数值，以及控制逻辑部分，所述控制逻辑部分用于接收所述第一数值， 确定所述第一数值是否包括与所述第一逻辑功能或所述第二逻辑功能相关联的代码，并且响应于确定所述代码与所述第一逻辑功能相关联，并且指示所述第一逻辑功能的输出 第二数值到寄存器的输入。

公开(公告)号：US07957387B2

公开(公告)日：2011-06-07

申请号：US12480280

申请日：2009-06-08

申请人： Antonius Engbersen ,  Jan Van Lunteren

发明人： Antonius Engbersen ,  Jan Van Lunteren

IPC分类号： H04L12/56 ,  G06F17/30

CPC分类号： H04L47/10 ,  H04L47/20 ,  H04L47/2433 ,  H04L63/0263 ,  H04L63/0272 ,  Y10S707/99933

摘要： An apparatus for classifying a data packet includes an interface for receiving the data packet; a classification controller for parsing the data packet to identify a plurality of data items required for classifying the data packet; memory for storing a set of range identifiers for each data item in the data packet corresponding to a rule range defined in the rule sets; and a controller for performing a preliminary test of at least one of the data items to determine whether any of the data item's values match known frequently-occurring values for that data item.

摘要翻译： 一种用于分类数据分组的装置包括用于接收数据分组的接口; 分类控制器，用于解析数据分组以识别用于对数据分组进行分类所需的多个数据项; 存储器，用于存储对应于在规则集中定义的规则范围的数据包中的每个数据项的一组范围标识符; 以及控制器，用于对所述数据项中的至少一个执行初步测试，以确定所述数据项中的任何值是否与所述数据项的已知频繁出现值相匹配。

公开(公告)号：US20100085891A1

公开(公告)日：2010-04-08

申请号：US12520114

申请日：2007-11-02

申请人： Andreas Kind ,  Jan Van Lunteren

发明人： Andreas Kind ,  Jan Van Lunteren

IPC分类号： H04L12/26

CPC分类号： H04L43/08 ,  H04L43/026 ,  H04L63/1425

摘要： The invention relates to an apparatus for analysing a network flow, comprising—a parser for extracting flow identification information from the network flow, —a flow metering unit for metering the network flow, —a programmable controller for controlling the flow metering unit and the parser.

摘要翻译： 本发明涉及一种用于分析网络流的装置，包括：用于从网络流提取流量识别信息的解析器， - 用于计量网络流量的流量计量单元， - 用于控制流量计量单元和解析器的可编程控制器 。

公开(公告)号：US20090310504A1

公开(公告)日：2009-12-17

申请号：US12480280

申请日：2009-06-08

申请人： Antonius Engbersen ,  Jan Van Lunteren

发明人： Antonius Engbersen ,  Jan Van Lunteren

IPC分类号： H04J1/16 ,  H04L12/56

CPC分类号： H04L47/10 ,  H04L47/20 ,  H04L47/2433 ,  H04L63/0263 ,  H04L63/0272 ,  Y10S707/99933

摘要： An apparatus for classifying a data packet includes an interface for receiving the data packet; a classification controller for parsing the data packet to identify a plurality of data items required for classifying the data packet; memory for storing a set of range identifiers for each data item in the data packet corresponding to a rule range defined in the rule sets; and a controller for performing a preliminary test of at least one of the data items to determine whether any of the data item's values match known frequently-occurring values for that data item.

摘要翻译： 一种用于分类数据分组的装置包括用于接收数据分组的接口; 分类控制器，用于解析数据分组以识别用于对数据分组进行分类所需的多个数据项; 存储器，用于存储对应于在规则集中定义的规则范围的数据包中的每个数据项的一组范围标识符; 以及控制器，用于对所述数据项中的至少一个执行初步测试，以确定所述数据项中的任何值是否与所述数据项的已知频繁出现值相匹配。