CN1801781A - Exchange equipment and its message processing method for preventing flow attack - Google Patents
Exchange equipment and its message processing method for preventing flow attack Download PDFInfo
- Publication number
- CN1801781A CN1801781A CNA2006100003946A CN200610000394A CN1801781A CN 1801781 A CN1801781 A CN 1801781A CN A2006100003946 A CNA2006100003946 A CN A2006100003946A CN 200610000394 A CN200610000394 A CN 200610000394A CN 1801781 A CN1801781 A CN 1801781A
- Authority
- CN
- China
- Prior art keywords
- message
- processing unit
- send
- unit
- list item
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
Present invention discloses message processing method for preventing flow rate impulsion. It includes setting retransmission unit to transmit message with preset Characteristic to processing unit, after processing unit receiving message setting retransmission unit directly transmitting message instead of up delivering to processing unit. Said invention also discloses exchange equipment using above-mentioned method. Said invention prevents flow rate impulsion to processing unit and relieves retransmission unit load.
Description
Technical field
The present invention relates to the network security technology field, relate in particular to a kind of message processing method that prevents flow attack.
Background technology
Switching equipment is a kind of network equipment that is most widely used in various networking structures, and along with three layers, the application and the development of four layer switch, switching equipment is being born more and more crucial task in network operation.Simultaneously, increase at the malicious attack of switching equipment is also corresponding.
When the switching equipment operate as normal, the message of reception is at first handled by forwarding chip.Forwarding chip carries out following two kinds to the message that receives according to the running parameter of setting usually and handles operation: most of messages are transmitted by forwarding chip; Other messages are by the processing unit CPU (Central Process Unit, central processing unit) that delivers on the forwarding chip in the exchange device, by CPU according to the agreement of message carry out correlation computations and to message carry out branch with and encapsulation etc.
When switching equipment received the message that needs the CPU processing in a large number, CPU was in hard service, can influence the transmission of normal message in the network, even important protocol massages is dropped because of overtime, causes the paralysis of network.
In the network shown in fig. 1, the port 2 of the port one of three-tier switch 121 and three-tier switch is connected with multicast source 110 respectively; The port 3 of switch 121, the port of switch 122 4 are connected a shared network segment with multicast member 130.Switch 121 and 122 operation PIM (Protocol IndependentMulticast, Protocol Independent Multicast) agreements.
When multicast source 110 sent multicast message, in some cases, multicast message can be forwarded on the shared network segment at multicast member 130 places simultaneously from switch 121 and 122, and this moment, multicast member 130 will receive two parts of same multicast data flows.For fear of such situation occurring, in the PIM agreement, adopt Assert (statement) mechanism to avoid repeating forwarding multicasting stream to a network segment.When multicast message when port 3 enters switch 121, forwarding chip identifies the multicast message that this message receives for the outgoing interface from the multicast forwarding list item, with this message as RPF (Reverse Path Forwarding, reverse path is transmitted) check that error message is forwarded to CPU, by the Assert message of CPU assembling PIM agreement and be sent to switch 122 and other have the equipment of multicast routing function, thereby three layers of forwarding unit selecting appointment are transmitted this multicast data flow.Like this, when another three layers of forwarding units were not supported Assert mechanism or had malicious attacker to send multicast data flow constantly when the multicast message flow is big or in the network, CPU just had to handle a large amount of multicast messages.
Similarly, in the prior art, whether the needs transmitted to CPU is judged to message according to imposing a condition by forwarding chip, and can be the messages transmitted to CPU that is with all judged results, when the message flow that needs transmitted to CPU is big, will impact, influence the normal operation of network CPU.
Summary of the invention
What the present invention will solve is that the message that send on the passive reception forwarding chip of CPU in the prior art causes being easy to suffer the problem of flow attack.
Prevent the message processing method of flow attack in the switching equipment of the present invention, may further comprise the steps:
Retransmission unit is set will have the message up sending of predetermined characteristic to processing unit;
After receiving message at processing unit, retransmission unit is set directly transmits and have the message of described feature and send processing unit not with described feature.
Preferably, described method also comprises: processing unit carries out protocol processes to the message with described feature that receives.
Preferably, the message up sending processing unit of described retransmission unit with described feature is set to carry out with the predetermined detection cycle.
Preferably, describedly the message up sending processing unit that retransmission unit will have described feature is set is specially: the forwarding-table item of processing unit deletion and described characteristic matching;
The described retransmission unit that is provided with is directly transmitted and is had the message of described feature and send processing unit to be specially not: processing unit according to described feature in retransmission unit, generates mate forwarding and not on send the list item of processing unit.
Preferably, describedly the message up sending processing unit that retransmission unit will have described feature be set be specially: with on send the passage of processing unit to add in the outgoing interface set with the forwarding-table item of described characteristic matching;
The described retransmission unit that is provided with is directly transmitted and is had the message of described feature and send processing unit to be specially not: with the outgoing interface set of the forwarding-table item of described characteristic matching in send the passage of processing unit in the deletion.
Prevent in the another kind of switching equipment provided by the invention that the message processing method of flow attack from may further comprise the steps:
A) processing unit receives the message with predetermined characteristic that send on the retransmission unit;
B) processing unit generates corresponding direct forwarding-table item according to described feature, transmits the message with same characteristic features according to this for retransmission unit;
C) when satisfying setting deletion condition, delete the list item of described feature correspondence; Change step a).
Preferably, described method also comprises: processing unit carries out protocol processes to the message that receives;
Described satisfied setting deletion condition is meant the predetermined detection cycle that reaches.
A kind of switching equipment provided by the invention comprises processing unit and retransmission unit, wherein:
Processing unit is used for being provided with the message up sending that retransmission unit will have predetermined characteristic; After receiving message, retransmission unit is set directly transmits and send message not with described feature with described feature;
Retransmission unit be used for carrying out message direct forwarding and on send operation.
Preferably, described retransmission unit comprises business module and list item memory module, the list item that business module is used for receiving the storage of message and list item memory module carries out characteristic matching, transmit operation according to corresponding list item when the match is successful, when coupling is unsuccessful with the message up sending processing unit and broadcast.
Preferably, described processing unit by predetermined characteristic correspondence in the remove entries memory module list item or in the outgoing interface set of the list item of predetermined characteristic correspondence, add on send the passage of processing unit that the message up sending that retransmission unit will have predetermined characteristic is set;
Described processing unit by in the list item memory module, adding the predetermined characteristic correspondence direct forwarding-table item or in the outgoing interface set of the list item of predetermined characteristic correspondence, send the passage of processing unit that retransmission unit is set in the deletion and directly transmit and send not message with predetermined characteristic.
The present invention is to having the message of predetermined characteristic, whether on it, send by processing unit control retransmission unit, the message that has this feature is on a small quantity carried out protocol processes, all have the message of same characteristic features thereby avoided necessary processing, when normally finishing function of exchange, prevented flow attack, and alleviated the live load of retransmission unit processing unit.
Description of drawings
Fig. 1 is a kind of network configuration example that may cause flow attack;
Fig. 2 is the flow chart of the method for the invention embodiment one;
Fig. 3 is the flow chart of the method for the invention embodiment two;
Fig. 4 is the structural representation of the switching equipment of the method for the invention application.
Embodiment
In the prior art, may cause the situation of flow attack normally in a period of time, to continue to send certain type message to processing unit to switching equipment, such message can carry out relevant treatment by processing unit according to the agreement that message adopted by sending processing unit on the forwarding chip.The speed of message being carried out protocol processes because of processing unit often is lower than the forwarding speed of forwarding chip, causes the impact to processing unit.
The something in common of these situations comprises: the message that impacts has same feature; Processing unit on the message that send carry out same reprocessing, and reprocessing has identical effect with single treatment.As seen, these are had the number of processes of the message of same characteristic features, can under situation the about function of switching equipment and network not being impacted, avoid processing unit is caused flow attack as long as reduce processing unit.The key that reduces the processing unit processes number of times is to control the message up sending processing unit that retransmission unit only will have same feature on a small quantity.
Prevent among the present invention flow attack message processing method embodiment one flow process as shown in Figure 2.At step S210, the message up sending processing unit that retransmission unit will have predetermined characteristic is set.Being provided with usually of retransmission unit undertaken by processing unit, like this can so that processing unit message up sending is controlled.
In switching equipment, after retransmission unit receives message, search the list item that whether has with the characteristic matching that receives message in the worksheet in retransmission unit earlier, if having, then carry out corresponding forwarding operation according to the coupling list item; Otherwise with the message up sending processing unit and broadcast.Thereby, can by deletion and the list item setting that increases the predetermined characteristic correspondence have the message up sending of this feature and not on send processing unit.When increasing the list item of predetermined characteristic correspondence, this list item is direct forwarding-table item, i.e. do not comprise the passage that send processing unit in the outgoing interface of this list item set.
The worksheet of retransmission unit comprises ACL (Access Control List, access control list) tabulation, MAC (Media Access Control, medium access control system) address table and/or IP (Internet Protocol, Internet protocol) FDB (Forwarding Database, transmit) table etc., the forwarding operation of carrying out according to list item in these tables comprises that two layers of exchange are transmitted, three layers of exchange forwarding, dropping packets etc.
Except that increase and the deletion list item corresponding with predetermined characteristic, can also by other modes control retransmission unit will have the message up sending of predetermined characteristic or not on send processing unit.For example, can in the set of the outgoing interface of the list item corresponding, increase with predetermined characteristic and deletion on send the passage setting of processing unit have the message up sending of predetermined characteristic and not on send processing unit.Send the passage of processing unit on increasing in the outgoing interface set of list item after, retransmission unit also can carry out conventional treatment to message according to original list item in the message up sending processing unit.
At step S220, after the message with predetermined characteristic entered retransmission unit, processing unit received this message that send on the retransmission unit.
At step S230, receive the message that send on the retransmission unit at processing unit with predetermined characteristic after, retransmission unit is set the message with feature is directly transmitted, and send processing unit not.
Described in step S210, the message up sending processing unit that retransmission unit will not have predetermined characteristic is set has multiple mode to realize.For example, increase the working items of the retransmission unit of predetermined characteristic correspondence, send the passage of processing unit etc. in the outgoing interface set of the list item of predetermined characteristic correspondence, increasing.
At step S240, processing unit carries out protocol processes to the message with predetermined characteristic that receives.Identical in the mode that processing unit carries out protocol processes in this step to message and the prior art, repeat no more herein.
Can set a predetermined detection cycle, the message up sending processing unit that the cycle then will have predetermined characteristic carries out protocol processes by processing unit to it.Like this, processing unit is reacted with the ruuning situation to network in real time with the message that the monitoring of predetermined detection cycle has predetermined characteristic.
Figure 3 shows that the flow process that prevents the method embodiment two of flow attack of the present invention.At step S301, processing unit receives the message with predetermined characteristic that send on the retransmission unit.
At step S302, processing unit according on the deliver newspaper feature of literary composition generate corresponding list item, be issued to retransmission unit, this list item is direct forwarding-table item, i.e. do not comprise the passage that send processing unit in the outgoing interface of this list item set.
At step S303, processing unit carries out protocol processes to the literary composition of delivering newspaper on receiving.
At step S304, retransmission unit is transmitted operation according to the list item that processing unit generates to the message with predetermined characteristic.With identical among the embodiment one, retransmission unit to message forwarding operation comprise that two layers of exchange are transmitted, three layers of exchange forwarding, dropping packets etc.
At step S305, judge whether to satisfy the deletion condition of setting, if, execution in step S306; Otherwise change step S304.
At step S306, the list item of deletion predetermined characteristic correspondence; Change step S301.
Setting the deletion condition is the condition that processing unit detects the message with predetermined characteristic, can be provided with according to the needs of practical application by the user, and for example it is set to the predetermined detection cycle.
Figure 4 shows that the structural representation of the switching equipment of using above-mentioned message processing method, processing unit 410 is connected with retransmission unit 420, retransmission unit 420 comprises interconnective business module 421 and list item memory module 422, and these two modules all are connected to processing unit 410.
Whether 410 pairs of retransmission units of processing unit 420 will receive the message up sending with predetermined characteristic is controlled.After the message up sending that retransmission unit 420 will have this feature was set, in a single day processing unit 410 received the message with this feature, retransmission unit 420 promptly is set directly transmits and have the message of this feature and will not send processing unit 410 on it.
In the switching equipment of two embodiment of the present invention and application thereof, the predetermined characteristic of message can be source and destination MAC Address, IP address, multicast message etc., as long as can carry out the list item coupling by retransmission unit.
Be example still below, application of the present invention is described with network configuration shown in Figure 1.The present invention can be applied on switch 121 and 122 simultaneously, and predetermined characteristic is set at multicast mac address; The predetermined detection cycle is set to 5 seconds.
Forwarding chip is to the judgement of rpf check error message in the cancellation prior art, allow forwarding chip with the multicast data flow L 2 broadcast to CPU.After CPU receives multicast message, in forwarding chip, generate corresponding multicast MAC address entries at once, this MAC address entries does not comprise cpu port, thereby allows the multicast message of follow-up reception mate by forwarding chip that this MAC address entries is transmitted and not with messages transmitted to CPU.
CPU handles the multicast message that receives according to the PIM agreement, judge whether outgoing interface according to its vlan information that carries, if then this message is the rpf check error message from the multicast forwarding list item, trigger PIM statement mechanism, also send by CPU assembling Assert message.
The multicast MAC address entries that generates for CPU is provided with one with 5 seconds predetermined detection cycles ageing timer regularly, and the time then deletes this MAC address entries or allows the outgoing interface set of this MAC address entries comprise cpu port.After being timed to, forwarding chip will be delivered to CPU again on the multicast message, and then said process repeats, and cpu cycle property multicast message is detected, and sees the situation whether the rpf check mistake takes place.
After using the present invention, establishing multicast source 110 transmission group addresss is the multicast data flow of 224.1.1.1, is transmitted simultaneously by two switches 121 and 122, and then switch 121 is received phase multicast message on the same group from the outgoing interface port 3 of multicast message.This multicast message is by transmitted to CPU, and CPU receives and generates source MAC at once in forwarding chip behind the multicast message is the MAC Address list item of 0x01005e010101, and this list item does not comprise cpu port.CPU performs an analysis to the multicast message that has received, find the shared network segment of this message,, find that the outgoing interface of the shared network segment is a port 3 by checking the multicast forwarding list item from port 3 places, illustrate that then this message is the rpf check error message, thereby trigger PIM statement mechanism.
Like this, CPU at most only needs the predetermined detection at 5 seconds to receive and handle a spot of multicast message in the cycle, remaining multicast message is handled by forwarding chip, no matter the multicast message flow is big, still other three layers of forwarding units are not supported Assert mechanism in the network, or have malicious attacker to send multicast data flow constantly, can not impact to CPU.
As seen, behind application the present invention, for a large amount of messages of the same type, CPU need handle a small amount of message wherein, avoids it that CPU is impacted; Simultaneously, whether the present invention does not need forwarding chip to need transmitted to CPU to judge to message, alleviates the processing burden of forwarding chip; And the present invention does not relate to the change to standard agreement, has favorable compatibility.
Above-described embodiment of the present invention does not constitute the qualification to protection range of the present invention.Any any modification of being done within the spirit and principles in the present invention, be equal to and replace and improvement etc., all should be included within the claim protection range of the present invention.
Claims (10)
1. prevent the message processing method of flow attack in the switching equipment, it is characterized in that, may further comprise the steps:
Retransmission unit is set will have the message up sending of predetermined characteristic to processing unit;
After receiving message at processing unit, retransmission unit is set directly transmits and have the message of described feature and send processing unit not with described feature.
2. prevent the message processing method of flow attack according to claim 1 in the switching equipment, it is characterized in that described method also comprises: processing unit carries out protocol processes to the message with described feature that receives.
3. prevent the message processing method of flow attack according to claim 1 in the switching equipment, it is characterized in that: the message up sending processing unit that described retransmission unit has described feature is set to carry out with the predetermined detection cycle.
4. as preventing the message processing method of flow attack in the switching equipment as described in any one of the claim 1 to 3, it is characterized in that, describedly the message up sending processing unit that retransmission unit will have described feature is set is specially: the forwarding-table item of processing unit deletion and described characteristic matching;
The described retransmission unit that is provided with is directly transmitted and is had the message of described feature and send processing unit to be specially not: processing unit according to described feature in retransmission unit, generates mate forwarding and not on send the list item of processing unit.
5. as preventing the message processing method of flow attack in the switching equipment as described in any one of the claim 1 to 3, it is characterized in that, describedly the message up sending processing unit that retransmission unit will have described feature is set is specially: with on send the passage of processing unit to add in the outgoing interface set with the forwarding-table item of described characteristic matching;
The described retransmission unit that is provided with is directly transmitted and is had the message of described feature and send processing unit to be specially not: with the outgoing interface set of the forwarding-table item of described characteristic matching in send the passage of processing unit in the deletion.
6. prevent the message processing method of flow attack in the switching equipment, it is characterized in that, may further comprise the steps:
A) processing unit receives the message with predetermined characteristic that send on the retransmission unit;
B) processing unit generates corresponding direct forwarding-table item according to described feature, transmits the message with same characteristic features according to this for retransmission unit;
C) when satisfying setting deletion condition, delete the list item of described feature correspondence; Change step a).
7. as preventing the message processing method of flow attack in the switching equipment as described in the claim 6, it is characterized in that described method also comprises: processing unit carries out protocol processes to the message that receives;
Described satisfied setting deletion condition is meant the predetermined detection cycle that reaches.
8. a switching equipment is characterized in that, comprises processing unit and retransmission unit, wherein:
Processing unit is used for being provided with the message up sending that retransmission unit will have predetermined characteristic; After receiving message, retransmission unit is set directly transmits and send message not with described feature with described feature;
Retransmission unit be used for carrying out message direct forwarding and on send operation.
9. switching equipment as claimed in claim 8, it is characterized in that: described retransmission unit comprises business module and list item memory module, the list item that business module is used for receiving the storage of message and list item memory module carries out characteristic matching, transmit operation according to corresponding list item when the match is successful, when coupling is unsuccessful with the message up sending processing unit and broadcast.
10. switching equipment as claimed in claim 9 is characterized in that: described processing unit by predetermined characteristic correspondence in the remove entries memory module list item or in the outgoing interface set of the list item of predetermined characteristic correspondence, add on send the passage of processing unit that the message up sending that retransmission unit will have predetermined characteristic is set;
Described processing unit by in the list item memory module, adding the predetermined characteristic correspondence direct forwarding-table item or in the outgoing interface set of the list item of predetermined characteristic correspondence, send the passage of processing unit that retransmission unit is set in the deletion and directly transmit and send not message with predetermined characteristic.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB2006100003946A CN100499587C (en) | 2006-01-10 | 2006-01-10 | Exchange equipment and its message processing method for preventing flow attack |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB2006100003946A CN100499587C (en) | 2006-01-10 | 2006-01-10 | Exchange equipment and its message processing method for preventing flow attack |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1801781A true CN1801781A (en) | 2006-07-12 |
| CN100499587C CN100499587C (en) | 2009-06-10 |
Family
ID=36811545
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB2006100003946A Active CN100499587C (en) | 2006-01-10 | 2006-01-10 | Exchange equipment and its message processing method for preventing flow attack |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN100499587C (en) |
Cited By (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101867518A (en) * | 2010-05-24 | 2010-10-20 | 北京星网锐捷网络技术有限公司 | Message forwarding processing method, processing device and equipment for two-layer switching equipment |
| CN101127707B (en) * | 2007-09-21 | 2010-10-27 | 杭州华三通信技术有限公司 | Data forwarding method and access point device |
| CN101426014B (en) * | 2008-12-02 | 2013-04-03 | 中兴通讯股份有限公司 | Method and system for multicast source attack prevention |
| CN103428092A (en) * | 2012-05-21 | 2013-12-04 | 中兴通讯股份有限公司 | Distributed equipment multicast message media access control address learning method and device |
| CN104901891A (en) * | 2014-03-07 | 2015-09-09 | 中兴通讯股份有限公司 | Method and device for forwarding multicast message |
| CN105227465A (en) * | 2014-06-23 | 2016-01-06 | 杭州迪普科技有限公司 | A kind of CPU Proxy Method and the network equipment |
| CN105490961A (en) * | 2014-09-19 | 2016-04-13 | 杭州迪普科技有限公司 | Message processing method, and device and network device |
| CN105959242A (en) * | 2015-08-21 | 2016-09-21 | 杭州迪普科技有限公司 | Message sending method and device |
| WO2020103574A1 (en) * | 2018-11-23 | 2020-05-28 | 中兴通讯股份有限公司 | Message processing method and device, and storage medium |
| CN111884871A (en) * | 2020-06-30 | 2020-11-03 | 苏州浪潮智能科技有限公司 | Method and equipment for detecting discarded message of switch |
| CN112702236A (en) * | 2020-12-23 | 2021-04-23 | 锐捷网络股份有限公司 | Method and processor for realizing packet loss detection |
-
2006
- 2006-01-10 CN CNB2006100003946A patent/CN100499587C/en active Active
Cited By (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101127707B (en) * | 2007-09-21 | 2010-10-27 | 杭州华三通信技术有限公司 | Data forwarding method and access point device |
| CN101426014B (en) * | 2008-12-02 | 2013-04-03 | 中兴通讯股份有限公司 | Method and system for multicast source attack prevention |
| CN101867518A (en) * | 2010-05-24 | 2010-10-20 | 北京星网锐捷网络技术有限公司 | Message forwarding processing method, processing device and equipment for two-layer switching equipment |
| CN103428092B (en) * | 2012-05-21 | 2016-09-28 | 中兴通讯股份有限公司 | Distributed apparatus multicast message medium access control address learning method and device |
| CN103428092A (en) * | 2012-05-21 | 2013-12-04 | 中兴通讯股份有限公司 | Distributed equipment multicast message media access control address learning method and device |
| CN104901891A (en) * | 2014-03-07 | 2015-09-09 | 中兴通讯股份有限公司 | Method and device for forwarding multicast message |
| CN105227465B (en) * | 2014-06-23 | 2018-09-04 | 杭州迪普科技股份有限公司 | A kind of CPU agent method and the network equipment |
| CN105227465A (en) * | 2014-06-23 | 2016-01-06 | 杭州迪普科技有限公司 | A kind of CPU Proxy Method and the network equipment |
| CN105490961A (en) * | 2014-09-19 | 2016-04-13 | 杭州迪普科技有限公司 | Message processing method, and device and network device |
| CN105959242A (en) * | 2015-08-21 | 2016-09-21 | 杭州迪普科技有限公司 | Message sending method and device |
| CN105959242B (en) * | 2015-08-21 | 2019-03-15 | 杭州迪普科技股份有限公司 | A kind of file transmitting method and device |
| WO2020103574A1 (en) * | 2018-11-23 | 2020-05-28 | 中兴通讯股份有限公司 | Message processing method and device, and storage medium |
| CN111884871A (en) * | 2020-06-30 | 2020-11-03 | 苏州浪潮智能科技有限公司 | Method and equipment for detecting discarded message of switch |
| CN112702236A (en) * | 2020-12-23 | 2021-04-23 | 锐捷网络股份有限公司 | Method and processor for realizing packet loss detection |
Also Published As
| Publication number | Publication date |
|---|---|
| CN100499587C (en) | 2009-06-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1801781A (en) | Exchange equipment and its message processing method for preventing flow attack | |
| CN102111394B (en) | Network attack protection method, equipment and system | |
| CN101420433B (en) | Method and device for domain name system cheating attack defense | |
| CN101068229A (en) | Content filtering gateway realizing method based on network filter | |
| CN101123614B (en) | A method and communication device for processing address parsing protocol packet | |
| CN101056306A (en) | Network device and its access control method | |
| CN101035058A (en) | Transfer method and device of the virtual router redundancy protocol message | |
| CN1787489A (en) | Method for average distributing interface flow at multi network processor engines | |
| CN101030947A (en) | Method and apparatus for transmitting message | |
| CN1925452A (en) | Data transferring system, method and network transferring apparatus | |
| CN1809032A (en) | Method of dynamically learning address on MAC layer | |
| CN100466606C (en) | Unknown multicasting message processing method | |
| CN1855929A (en) | Method for preventing from wild ARP attacks | |
| US20080062960A1 (en) | Systems and methods for packet forward control | |
| CN100393069C (en) | Method of differentiating multiple services for anti IP data stream in multicast to impact communication system | |
| CN1152517C (en) | Method of guarding network attack | |
| CN101043442A (en) | Method for realizing URPF on Ethernet switch | |
| CN101312400A (en) | Method realizing IGMP interception function on modem device with 4 ethernet interfaces | |
| CN1845531A (en) | Data forwarding controlling method and apparatus | |
| CN101141396B (en) | Packet processing method and network appliance | |
| CN1287549C (en) | Broadcasting type communication data announcing apparatus and broadcasting type communication system | |
| CN1567900A (en) | A method for implementing message forwarding control in routing equipment | |
| CN101345678B (en) | Multicast communication method, system and multicast communication equipment | |
| CN1388683A (en) | Data network node with enhanced safety character | |
| CN101043392A (en) | Apparatus and base station equipment for transmitting IP packet in WiMAX network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CP03 | Change of name, title or address |
Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No. Patentee after: NEW H3C TECHNOLOGIES Co.,Ltd. Address before: 310053 Hangzhou hi tech Industrial Development Zone, Zhejiang province science and Technology Industrial Park, No. 310 and No. six road, HUAWEI, Hangzhou production base Patentee before: HANGZHOU H3C TECHNOLOGIES Co.,Ltd. |
|
| CP03 | Change of name, title or address | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20230821 Address after: Texas, USA Patentee after: HEWLETT PACKARD ENTERPRISE DEVELOPMENT L.P. Address before: 310052 Changhe Road, Binjiang District, Hangzhou, Zhejiang Province, No. 466 Patentee before: NEW H3C TECHNOLOGIES Co.,Ltd. |
|
| TR01 | Transfer of patent right |