RULE MATCHING METHOD AND APPARATUS
    1.
    发明申请
    RULE MATCHING METHOD AND APPARATUS 有权
    规则匹配方法和装置

    公开(公告)号:US20150081612A1

    公开(公告)日:2015-03-19

    申请号:US14552052

    申请日:2014-11-24

    CPC classification number: G06N5/027 G06F2221/2101 H04L43/028 H04L69/12

    Abstract: The present invention discloses a rule matching method including: receiving a packet; detecting feature information in content of the packet, and determining whether the detected feature information in the packet conforms to a classification characteristic of one rule group among a plurality of preset rule groups; if yes, determining a state machine corresponding to the one rule group as a first state machine; and determining whether the first state machine is stored in an on-chip memory, and if yes, using the first state machine to match the packet to obtain a matching result; and if no, when an off-chip memory stores the first state machine, loading the first state machine from the off-chip memory into the on-chip memory, and using the first state machine to match the packet to obtain a matching result. Embodiments of the present invention enable a product to achieve better performance.

    Abstract translation: 本发明公开了一种规则匹配方法,包括:接收分组; 检测分组内容中的特征信息,并且确定分组中检测到的特征信息是否符合多个预设规则组中的一个规则组的分类特征; 如果是,则将与所述一个规则组对应的状态机确定为第一状态机; 以及确定所述第一状态机是否存储在片上存储器中,并且如果是,则使用所述第一状态机来匹配所述分组以获得匹配结果; 如果不是,当片外存储器存储第一状态机时,将来自片外存储器的第一状态机加载到片上存储器中,并且使用第一状态机来匹配分组以获得匹配结果。 本发明的实施例使得产品能够实现更好的性能。

    Rule matching method and apparatus for deep packet inspection

    公开(公告)号:US09811777B2

    公开(公告)日:2017-11-07

    申请号:US14552052

    申请日:2014-11-24

    CPC classification number: G06N5/027 G06F2221/2101 H04L43/028 H04L69/12

    Abstract: The present invention discloses a rule matching method including: receiving a packet; detecting feature information in content of the packet, and determining whether the detected feature information in the packet conforms to a classification characteristic of one rule group among a plurality of preset rule groups; if yes, determining a state machine corresponding to the one rule group as a first state machine; and determining whether the first state machine is stored in an on-chip memory, and if yes, using the first state machine to match the packet to obtain a matching result; and if no, when an off-chip memory stores the first state machine, loading the first state machine from the off-chip memory into the on-chip memory, and using the first state machine to match the packet to obtain a matching result. Embodiments of the present invention enable a product to achieve better performance.

Patent Agency Ranking