Title:
ステートフルなパケット内容マッチング機構
Document Type and Number:
Japanese Patent JP4598127
Kind Code:
B2
Abstract:
Methods and apparatus for performing content inspection across packet boundaries using stateful packet content matching mechanisms. Pattern data structures are employed to facilitate string search algorithm machines. Incoming packets are classified to flows, and stored in corresponding flow queues. Flow table entries are used to identify the pattern data structure for a given flow. During content inspection, the algorithm machine updates state information to identify partial or full matches. When a partial match is detected towards the end of an earlier packet state information in the flow table is updated to reflect the state such that content inspection of a following packet begins at that state. As a result, content inspection across packet boundaries is supported. The techniques may further be employed in a packet processing context pipeline stage.
Inventors:
Balakrishnan, Santos
Ramakrishna, Venkatraman
Ramakrishna, Venkatraman
Application Number:
JP2008519707A
Publication Date:
December 15, 2010
Filing Date:
June 30, 2006
Export Citation:
Assignee:
Intel Corporation
International Classes:
H04L12/56
Domestic Patent References:
| JP2002024293A | ||||
| JP2001168911A | ||||
| JP2002325091A | ||||
| JP11161677A |
Foreign References:
| WO2005010723A1 | ||||
| WO2001056327A1 |
Attorney, Agent or Firm:
Tadahiko Ito
Shinsuke Onuki
Tadashige Ito
Shinsuke Onuki
Tadashige Ito