公开(公告)号：US07551567B2

公开(公告)日：2009-06-23

申请号：US11031106

申请日：2005-01-05

申请人： Tefcros Anthias ,  Sunil Potti ,  Subramanian Srinivasan ,  Nitesh Trikha

发明人： Tefcros Anthias ,  Sunil Potti ,  Subramanian Srinivasan ,  Nitesh Trikha

IPC分类号： H04L12/26 ,  H04L12/56

CPC分类号： H04L69/22 ,  H04L41/0266 ,  H04L41/0893 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0263 ,  H04L67/00 ,  H04L69/16 ,  H04L69/329

摘要： A method is disclosed for interpreting an application message at a network element using sampling and heuristics. Using this method, a network element such as a router can determine, based solely on a data packet's packet headers, whether the network element ought to invest the time and processing power required to inspect and interpret the data packet's payload portion, or whether the network element can send the data packet toward the data packet's destination without inspecting and interpreting the data packet's payload portion. According to one aspect, while in a sampling state, the network element determines shared packet header characteristics possessed by packet headers of all data packets that require application layer message inspection. While in a processing state, the network element forgoes application layer message inspection relative to data packets whose packet headers do not possess the shared packet header characteristics. The network element alternates between the states.

摘要翻译： 公开了一种用于使用采样和启发式在网络元件处解释应用消息的方法。 使用这种方法，诸如路由器的网络元件可以仅基于数据分组的分组报头来确定网络元件是否应该投入检查和解释数据分组的有效载荷部分所需的时间和处理能力，或者网络 元素可以向数据分组的目的地发送数据分组，而不检查和解释数据分组的有效载荷部分。 根据一个方面，在采样状态下，网络单元确定需要应用层消息检查的所有数据分组的分组报头所拥有的共享分组报头特性。 在处理状态下，网络元件相对于其分组报头不具有共享分组报头特性的数据分组来放弃应用层消息检查。 网络元素在状态之间交替。

公开(公告)号：US20060146879A1

公开(公告)日：2006-07-06

申请号：US11031106

申请日：2005-01-05

申请人： Tefcros Anthias ,  Sunil Potti ,  Subramanian Srinivasan ,  Nitesh Trikha

发明人： Tefcros Anthias ,  Sunil Potti ,  Subramanian Srinivasan ,  Nitesh Trikha

IPC分类号： H04J3/16

CPC分类号： H04L69/22 ,  H04L41/0266 ,  H04L41/0893 ,  H04L63/0236 ,  H04L63/0245 ,  H04L63/0263 ,  H04L67/00 ,  H04L69/16 ,  H04L69/329

摘要： A method is disclosed for interpreting an application message at a network element using sampling and heuristics. Using this method, a network element such as a router can determine, based solely on a data packet's packet headers, whether the network element ought to invest the time and processing power required to inspect and interpret the data packet's payload portion, or whether the network element can send the data packet toward the data packet's destination without inspecting and interpreting the data packet's payload portion. According to one aspect, while in a sampling state, the network element determines shared packet header characteristics possessed by packet headers of all data packets that require application layer message inspection. While in a processing state, the network element forgoes application layer message inspection relative to data packets whose packet headers do not possess the shared packet header characteristics. The network element alternates between the states.