Packet processing with re-insertion into network interface circuitry
    1.
    发明授权
    Packet processing with re-insertion into network interface circuitry 有权
    分组处理,重新插入网络接口电路

    公开(公告)号:US07974209B1

    公开(公告)日:2011-07-05

    申请号:US11956284

    申请日:2007-12-13

    IPC分类号: G01R31/08 H04L12/28

    摘要: Method and apparatus for packet processing by re-insertion into network interface circuitry. A method for handling a burst of packets sent to network interface circuitry includes checking for a connection table entry for received packets, and responsive to non-existence of the connection table entry for the received packets, sending the packets to network interface software for processing. The network interface software processing includes: building the connection table entry; processing the packets; and sending the packets as processed to the network interface circuitry. Additionally, a method for re-inserting a packet responsive to an active audit mode is described.

    摘要翻译: 通过重新插入网络接口电路来进行数据包处理的方法和装置。 一种用于处理发送到网络接口电路的分组的突发的方法包括:检查所接收分组的连接表条目,并且响应于接收到的分组的连接表条目的不存在,将分组发送到网络接口软件进行处理。 网络接口软件处理包括:建立连接表条目; 处理数据包; 并将处理的数据包发送到网络接口电路。 此外,描述了响应于主动审核模式重新插入分组的方法。

    Data structures and state tracking for network protocol processing
    2.
    发明授权
    Data structures and state tracking for network protocol processing 有权
    网络协议处理的数据结构和状态跟踪

    公开(公告)号:US08190767B1

    公开(公告)日:2012-05-29

    申请号:US11949715

    申请日:2007-12-03

    IPC分类号: G01R31/08 H04L12/28

    摘要: Described are data structures, and methodology for forming same, for network protocol processing. A method for creating data structures for firewalling and network address translating is described. A method for creating data structures for physical layer addressing is described. A method for security protocol support using a data structure is described. A method for creating at least one data structure sized responsive to whether a firewall is activated is described. A data structure for routing packets is described. A method of forming hashing table chains is described. Additionally, method and apparatus for tracking packet states is described. More particularly, Transmission Control Protocol (“TCP”) tracking of states for packets is described. In an embodiment, a division between software states and hardware states is made as a packet is processed by both software and hardware. Additionally, method and apparatus for network protocol processing are described. For example, a packet for network address translation having a media access control header is obtained, from which information, including the media access control header, is obtained. The information is parsed into one or more data structures. It is determined whether a network processing unit is in a first round processing mode, or a second round pass-through mode.

    摘要翻译: 描述了用于网络协议处理的数据结构及其形成方法。 描述了一种创建用于防火墙和网络地址转换的数据结构的方法。 描述了一种用于创建物理层寻址的数据结构的方法。 描述了使用数据结构的安全协议支持的方法。 描述了一种用于创建响应于是否激活防火墙的至少一个数据结构的方法。 描述用于路由分组的数据结构。 描述了形成散列表链的方法。 另外,描述了用于跟踪分组状态的方法和装置。 更具体地,描述了用于分组的状态的传输控制协议(“TCP”)跟踪。 在一个实施例中,软件状态和硬件状态之间的划分是由软件和硬件两者处理的数据包进行的。 另外,描述了用于网络协议处理的方法和装置。 例如,获得具有媒体访问控制头的用于网络地址转换的分组,从中获得包括媒体访问控制头的信息。 信息被解析为一个或多个数据结构。 确定网络处理单元是处于第一轮处理模式还是第二轮直通模式。

    Data structures and state tracking for network protocol processing
    6.
    发明授权
    Data structures and state tracking for network protocol processing 有权
    网络协议处理的数据结构和状态跟踪

    公开(公告)号:US08738800B1

    公开(公告)日:2014-05-27

    申请号:US11949735

    申请日:2007-12-03

    IPC分类号: G06F15/173

    摘要: Described are data structures, and methodology for forming same, for network protocol processing. A method for creating data structures for firewalling and network address translating is described. A method for creating data structures for physical layer addressing is described. A method for security protocol support using a data structure is described. A method for creating at least one data structure sized responsive to whether a firewall is activated is described. A data structure for routing packets is described. A method of forming hashing table chains is described. Additionally, method and apparatus for tracking packet states is described. More particularly, Transmission Control Protocol (“TCP”) tracking of states for packets is described. In an embodiment, a division between software states and hardware states is made as a packet is processed by both software and hardware. Additionally, method and apparatus for network protocol processing are described. For example, a packet for network address translation having a media access control header is obtained, from which information, including the media access control header, is obtained. The information is parsed into one or more data structures. It is determined whether a network processing unit is in a first round processing mode, or a second round pass-through mode.

    摘要翻译: 描述了用于网络协议处理的数据结构及其形成方法。 描述了一种创建用于防火墙和网络地址转换的数据结构的方法。 描述了一种用于创建物理层寻址的数据结构的方法。 描述了使用数据结构的安全协议支持的方法。 描述了一种用于创建响应于是否激活防火墙的至少一个数据结构的方法。 描述用于路由分组的数据结构。 描述了形成散列表链的方法。 另外,描述了用于跟踪分组状态的方法和装置。 更具体地,描述了用于分组的状态的传输控制协议(“TCP”)跟踪。 在一个实施例中,软件状态和硬件状态之间的划分是由软件和硬件两者处理的数据包进行的。 另外,描述了用于网络协议处理的方法和装置。 例如,获得具有媒体访问控制头的用于网络地址转换的分组,从中获得包括媒体访问控制头的信息。 信息被解析为一个或多个数据结构。 确定网络处理单元是处于第一轮处理模式还是第二轮直通模式。

    Packet processing with re-insertion into network interface circuitry
    10.
    发明授权
    Packet processing with re-insertion into network interface circuitry 有权
    分组处理,重新插入网络接口电路

    公开(公告)号:US07620070B1

    公开(公告)日:2009-11-17

    申请号:US10603792

    申请日:2003-06-24

    IPC分类号: H04J3/24

    摘要: Method and apparatus for packet processing by re-insertion into network interface circuitry. A method for handling a burst of packets sent to network interface circuitry includes checking for a connection table entry for received packets, and responsive to non-existence of the connection table entry for the received packets, sending the packets to network interface software for processing. The network interface software processing includes: building the connection table entry; processing the packets; and sending the packets as processed to the network interface circuitry. Additionally, a method for re-inserting a packet responsive to an active audit mode is described.

    摘要翻译: 通过重新插入网络接口电路来进行数据包处理的方法和装置。 一种用于处理发送到网络接口电路的分组的突发的方法包括:检查所接收分组的连接表条目,并且响应于接收到的分组的连接表条目的不存在,将分组发送到网络接口软件进行处理。 网络接口软件处理包括:建立连接表条目; 处理数据包; 并将处理的数据包发送到网络接口电路。 此外,描述了响应于主动审核模式重新插入分组的方法。