New! View global litigation for patent families

US20060039372A1 - Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification - Google Patents

Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification Download PDF

Info

Publication number
US20060039372A1
US20060039372A1 US11146415 US14641505A US2006039372A1 US 20060039372 A1 US20060039372 A1 US 20060039372A1 US 11146415 US11146415 US 11146415 US 14641505 A US14641505 A US 14641505A US 2006039372 A1 US2006039372 A1 US 2006039372A1
Authority
US
Grant status
Application
Patent type
Prior art keywords
frame
parsing
instructions
data
multi
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US11146415
Inventor
Scott Sarkinen
Gregg Sarkinen
Hemant Trivedi
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
RPX Corp
Original Assignee
SLT Logic LLC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q11/00Selecting arrangements for multiplex systems
    • H04Q11/04Selecting arrangements for multiplex systems for time-division multiplexing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Application independent communication protocol aspects or techniques in packet data networks
    • H04L69/18Multi-protocol handler, e.g. single device capable of handling multiple protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/1302Relay switches
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13039Asymmetrical two-way transmission, e.g. ADSL, HDSL
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/1304Coordinate switches, crossbar, 4/2 with relays, coupling field
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13103Memory
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13106Microprocessor, CPU
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13166Fault prevention
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13174Data transmission, file transfer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13196Connection circuit/link/trunk/junction, bridge, router, gateway
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13204Protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13215Code checking, CRC
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13216Code signals, frame structure
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/1324Conference call
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13248Multimedia
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/1329Asynchronous transfer mode, ATM
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13292Time division multiplexing, TDM
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/1332Logic circuits
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13349Network management
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13352Self-routing networks, real-time routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13376Information service, downloading of information, 0800/0900 services
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04QSELECTING
    • H04Q2213/00Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/13389LAN, internet

Abstract

A multi-protocol, multi-stage, real-time frame classifier is disclosed. A preliminary multi-protocol frame composition analyzer is provided for performing preliminary multi-protocol frame classification for incoming frames. A parsing instruction generator is provided for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions. A multi-stage parsing engine provides multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame. An advanced level of data extraction is provided across various frame protocols without imposing a performance penalty. Longest prefix match searches and/or direct lookup searches are supported. Moreover, conditional extractions, instruction branching, multi-stage processing are all performed in real time.

Description

    CROSS-REFERENCE TO OTHER PATENT APPLICATIONS
  • [0001]
    The following co-pending patent applications of common assignee contains some common disclosure:
  • [0002]
    “System And Method For Providing Transformation Of Multi-Protocol Packets In A Data Stream,” Attorney Docket No. 1305.1-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety;
  • [0003]
    “System And Method For Policing Multiple Data Flows And Multi-Protocol Data Flows,” Attorney Docket No. 1305.6-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety;
  • [0004]
    “System And Method For Hierarchical Policing Of Flows And Subflows Of A Data Stream,” Attorney Docket No. 1305.10-US-01, filed concurrently herewith, which is incorporated herein by reference in its entirety.
  • BACKGROUND OF THE INVENTION
  • [0005]
    1. Field of the Invention
  • [0006]
    This invention relates in general to a method and apparatus for handling packets, and more particularly to a method and apparatus for providing multi-protocol, multi-stage, real-time frame classification.
  • [0007]
    2. Description of Related Art
  • [0008]
    Standards-based LAN systems work reasonably well at transfer rates up to about 100 Mbps. At transfer rates above 100 Mbps, providing the processing power required by a packet switch interconnecting a group of networks becomes economically challenging for the performance levels desired. This difficulty in economically “scaling up” performance is beginning to cause restrictions in some user's planned network expansions. Also, today's data networks do not provide network managers with enough control over bandwidth allocation and user access.
  • [0009]
    Next generation networks are expected to support “multimedia” applications with their much greater bandwidth and real-time delivery requirements. The next generation networks should also have the ability to dynamically adjust the network so that it can guarantee a predetermined amount of bandwidth for the requested service level agreement. Additionally, it is desirable to provide access, performance, fault tolerance and security between any specified set of end systems as directed by the network's manager.
  • [0010]
    One of the biggest opportunities for service providers today is to provide IP-based internetworking services to meet the exponential growth in demand from both business and residential customers. For example, voice and video based multimedia applications are expected to become a significant portion of the Internet. However, support for multimedia applications in the current Internet is at its initial stages. To fulfill the promise of remote work styles and B2C (Business-to-Consumer) e-commerce, broadband access for small offices, home offices and residences is critical. In today's information-based society, many individuals desire remote data connectivity to an office or remote data site. Remote individuals desire remote and transparent connectivity to the corporate office or a remote data site, including connectivity to the corporate office local area network (LAN).
  • [0011]
    Broadband systems are being developed and implemented to provide higher capacities, more efficient use of bandwidth, and the ability to integrate voice, data, and video communications. The number and type of communication services has also been rapidly expanding, including the above-mentioned “multimedia” services such as video teleconferencing, video/movies on demand and the like.
  • [0012]
    While broadband access is becoming more common, there are many competing technologies for delivering broadband access. For example, there are a number of standards used in digital telecommunications, including TCP/IP, Ethernet, HDLC, ISDN, ATM, X.25, Frame Relay, Digital Data Service, FDDI (Fiber Distributed Data Interface), T1, xDSL, Wireless, Cable Modems, and Satellite among others. Many of these standards employ different packet and/or frame formats. The term “frame” generally refers to encapsulated data at OSI layer 2, including a destination address, control bits for flow control, the data or payload, and CRC (cyclic redundancy check) data for error checking. The term “packet” generally refers to encapsulated data at OSI layer 3. However, in the present application, the term packet and frame and cell will be used interchangeably.
  • [0013]
    In general, a packet format or frame format refers to how data is encapsulated with various fields and headers for transmission across a network. For example, a data packet typically includes an address destination field, a length field, an error correcting code (ECC) field or cyclic redundancy check (CRC) field, as well as headers and trailers to identify the beginning and end of the packet. The terms “packet format” and “frame format”, also referred to as “cell format”, are generally synonymous.
  • [0014]
    In order for a router or gateway to be able to interface between communication systems employing different packet or frame formats, the node element, such as the router or gateway, is required to perform a packet conversion to convert the data from a first packet format used by the first communication system to a second packet format used by the second communication system. As the number of possible packet formats or types increases, the amount of logic required to convert between these different packet formats also increases.
  • [0015]
    Furthermore, the emergence of high speed networking technologies, e.g., ATM cell-based technology, xDSL, cable modem technology and Gigabit Ethernet, makes possible the integration of multiple types of traffic like speech, video and data over the same communication network. The communication circuits which may be shared in such network include transmission lines, program controlled processors, nodes or links, and data or packet buffers. An access node in such network should thus be designed for supporting the access of the user existing communication equipment with their corresponding protocols as well as for accommodating new equipment. Accordingly, it is essential to know the different requirements of each traffic in order to optimize the different processes.
  • [0016]
    Real-time traffic has more constraining requirements than non-real-time ones, i.e., end-to-end delay and jitter. It is necessary to be able to give priority to the real-time packets in order to minimize these delays. Meanwhile, the packet loss must be guaranteed both for real-time and non-real-time applications that have reserved bandwidth in the network while it is not mandatory for non-reserved type of traffic.
  • [0017]
    Therefore, it is important to provide the network components (i.e. nodes or links) with mechanisms that control the priority of the packets and process them so that the desired quality of service (QOS) to their corresponding connections is guaranteed. It is also important to offer the same service to connections having the same QOS requirements by providing them with a fair share of the network transmission capacities.
  • [0018]
    As can be seen, the technological convergence of computer and communication networks has led to more complex transmission of data, voice, images etc. Depending on the network, various protocols are hierarchically ordered, resulting in a vertical stack of protocols. Each of these protocols interact with the adjacent ones to organize the information exchange and transmission between remote systems, such as host computers. If an application program, for example, which runs on a first system requires the use of data of a second system, an exchange of information takes place. When the second system receives a request to send specific information, this information has to be transmitted from the highest protocol level, e.g., the application layer, down through all lower protocol levels prior to being sent along the physical link. Each protocol layer adds its own layer-specific connection information to data packets containing the request information that are received from the higher layer.
  • [0019]
    Thus, a communication connection between two systems is defined in a packet header, hereinafter referred to as protocol header, by the aggregate of fields carrying connection information of the vertical protocol stack. Nevertheless, when receiving a data stream made up of data packets at a receiver site, prior to forwarding, routing, multiplexing or compressing the data packets, the protocol header has to be scanned to extract information to at least identify the connection information.
  • [0020]
    A fundamental function in processing packets in networking communications is filtering. Filtering is the process of applying a set of rules to an incoming packet in order to determine its forwarding characteristics. Advanced frame identification and/or marking may be used to identify the entire frame composition layer by layer. The rules that are applied to perform the filtering can vary. For example, plural criteria may be used in a given table lookup. Another example uses the results of a one table lookup with certain packet protocol criteria to generate subsequent table lookups. Current methods used to obtain this type of filtering are implemented in software and thereby do not scale with the bandwidth in today's networks. Furthermore, these operations consume a considerable amount of time in the protocol processing, in particular when dealing with many connections, e.g., in a server, or when processing multimedia data streams. The result of this is cumbersome and conventional filtering applied to the high-speed networks leads to network degradation.
  • [0021]
    Hardware implementation of a routing table for the translation of packet identifiers into an appropriate physical output link has been described in “Putting Routing Tables in Silicon”, T.-B. Pei and C. Zukowski, IEEE Network Magazine, January 1992, pp. 42-50. This approach is mainly characterized in that a Content Addressable Memory (CAM) is employed to match connection information in the header of a single protocol. In addition, the advantages and disadvantages of CAMs versus conventional Random Access Memories (RAM), used to store routing information, have been evaluated by Pei and Zukowski.
  • [0022]
    In addition to the above-mentioned problems, another problem associated with using a CAM to match connection information in the header. To make filtering decisions, a CAM table is built. The CAM table contains search words. The table may contain fields for the IP source, the type of service, the TCP source port, etc. However, as search words are built, the amount of memory required explodes exponentially.
  • [0023]
    Neither of the two systems above, both of them relating to the solution of sub-problems, nor the known software approaches allow fast processing of multiple protocols. A wide variety of communication protocols exist, but all tend to fall into one of the following groups: LAN protocols, WAN protocols, network protocols, and routing protocols. LAN protocols operate at the network and data link layers of the OSI model and define communication over the various LAN media. WAN protocols operate at the lowest three layers of the OSI model and define communication over the various wide-area media. Routing protocols are network-layer protocols that are responsible for path determination and traffic switching. Finally, network protocols are the various upper-layer protocols that exist in a given protocol suite. The processing of protocol headers and the recognition of different protocol types in real time is a very complicated and difficult undertaking. In almost all network systems, header processing is still a major CPU-cycle (Central Processor Unit) consuming activity. It can be seen that there is a need for a method and apparatus for providing multi-protocol, multi-stage, real-time frame classification.
  • SUMMARY OF THE INVENTION
  • [0024]
    To overcome the limitations in the prior art described above, and to overcome other limitations that will become apparent upon reading and understanding the present specification, the present invention discloses a method and apparatus for providing multi-protocol, multi-stage, real-time frame classification.
  • [0025]
    The present invention solves the above-described problems by providing an advanced level of data extraction across various frame protocols. Longest prefix match searches and/or direct lookup searches are supported. Moreover, conditional extractions, instruction branching, and multi-stage processing are all performed in real time.
  • [0026]
    A method in accordance with the principles of the present invention includes performing preliminary multi-protocol frame classification for incoming frames, processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions, and providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0027]
    Other embodiments of a method in accordance with the principles of the invention may include alternative or optional additional aspects. One such aspect of the present invention is that the performing preliminary multi-protocol frame classification further includes resolving a composition for the incoming frame.
  • [0028]
    Another aspect of the present invention is that the processing further includes storing an incoming frame in a frame buffer, generating the parsing instructions for the incoming frame based upon the multi-protocol frame classification and aligning the generated parsing instructions with a frame selected from the incoming frames stored in the frame buffer.
  • [0029]
    Another aspect of the present invention is that the providing multi-stage parsing of the incoming frame further includes reading at least a portion of the incoming frame from a frame buffer, interpreting the parsing instructions and executing macros for performing parsing functions on at least the portion of the incoming frame using the interpreted parsing instructions.
  • [0030]
    Another aspect of the present invention is that the providing multi-stage parsing of the incoming frame further includes generating extraction instructions in response to the at least incoming frame and the preliminary multi-protocol frame classification, using the extraction instructions to produce search queries, and applying the search queries against a memory to produce the search results.
  • [0031]
    Another aspect of the present invention is that the using the extraction instructions further comprises conditional extraction.
  • [0032]
    Another aspect of the present invention is that conditional extraction comprises determining whether extracted bits of data from the packet meet a predetermined criteria.
  • [0033]
    Another aspect of the present invention is that the providing multi-stage parsing of the incoming frame further includes reprocessing the search results to generate refined parsing instructions and parsing of the incoming frame according to the refined parsing instructions to generate refined search results, the refined search results providing greater information about the incoming frame.
  • [0034]
    Another aspect of the present invention is that the processing at least the incoming frame and the preliminary multi-protocol frame classification further includes processing the search results, the incoming frame and the preliminary multi-protocol frame classification to provide refined parsing instructions.
  • [0035]
    Another aspect of the present invention is that the parsing instructions includes a location identifier and an associated instruction to be applied to the frame at the position identified by the location identifier.
  • [0036]
    Another aspect of the present invention is that the frame includes one of a plurality of frame protocols, the performing preliminary multi-protocol frame classification further including classifying a protocol identity.
  • [0037]
    Another aspect of the present invention is that the performing preliminary multi-protocol frame classification further includes identifying each layer protocol and writing the frame into memory along with a protocol layer code.
  • [0038]
    Another aspect of the present invention is that providing multi-stage parsing of the incoming frame further includes using the protocol layer code as a start vector into an instruction memory, the instruction memory containing instructions for parsing the frame and pointers to access selected words of the frame in a frame buffer.
  • [0039]
    Another aspect of the present invention is that the performing preliminary multi-protocol frame classification further includes identifying each layer protocol and writing the frame into memory along with a protocol layer code, the method further including processing the instructions from the instruction memory, resolving the pointers according to the protocol layer table and aligning the frame data with the instruction words.
  • [0040]
    Another aspect of the present invention is that the search results are fed back to an instruction controller to be used as data that a parsing engine can parse through a data pipe.
  • [0041]
    Another aspect of the present invention is that the memory includes a content addressable memory and the search queries are used to search the content addressable memory.
  • [0042]
    Another aspect of the present invention is that the memory includes a static random access memory and the search queries are indexed directly to a static random access memory.
  • [0043]
    Another aspect of the present invention is that the method further includes providing a parser instruction set in the instruction memory to define microcode used for generating the parser instructions.
  • [0044]
    Another aspect of the present invention is that the method further includes forwarding the frame and the search results.
  • [0045]
    Another aspect of the present invention is that the search results include the frame classification.
  • [0046]
    Another aspect of the present invention is that the search results are fed back to an instruction controller to be used as a start vector for subsequent processing stages.
  • [0047]
    Another aspect of the present invention is that providing multi-stage parsing of the incoming frame further comprises performing conditional branching, the conditional branching allowing specific instructions to be performed based upon satisfaction of a predetermined criteria.
  • [0048]
    In another embodiment of the present invention, a multi-protocol, multi-stage, real-time frame classifier is provided. The multi-protocol, multi-stage, real-time frame classifier includes a preliminary multi-protocol frame composition analyzer for performing preliminary multi-protocol frame classification for incoming frames, a parsing instruction generator for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions and a multi-stage parsing engine for providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0049]
    Another aspect of the present invention is that the preliminary multi-protocol frame classifier resolves a composition for the incoming frame.
  • [0050]
    Another aspect of the present invention is that the parsing instructions generator processing further includes a frame buffer for storing an incoming frame, an instruction generator for creating the parsing instructions for the incoming frame based upon the multi-protocol frame classification and a data pipe for aligning the generated parsing instructions with a frame selected from the incoming frames stored in the frame buffer.
  • [0051]
    Another aspect of the present invention is that the multi-stage parsing engine reads at least a portion of the incoming frame from a frame buffer, interprets the parsing instructions and executes macros for performing parsing functions on at least the portion of the incoming frame using the interpreted parsing instructions.
  • [0052]
    Another aspect of the present invention is that the multi-stage parsing engine generating extractions instructions in response to the at least incoming frame and the preliminary multi-protocol frame classification.
  • [0053]
    Another aspect of the present invention is that the multi-stage parsing engine performs conditional extractions using the extraction instructions.
  • [0054]
    Another aspect of the present invention is that conditional extraction comprises determining whether extracted bits of data from the packet meet a predetermined criteria.
  • [0055]
    Another aspect of the present invention is that the multi-stage parsing engine further includes an extractor for using the extraction instructions to produce search queries and a memory for applying the search queries against to produce the search results.
  • [0056]
    Another aspect of the present invention is that the multi-protocol, multi-stage, real-time frame classifier further includes a feedback path for allowing the search results to be reprocessed to generate refined parsing instructions that are used by the parsing engine to generate refined search results, the refined search results providing greater information about the incoming frame.
  • [0057]
    Another aspect of the present invention is that the parsing instructions generator processes the search results, the incoming frame and the preliminary multi-protocol frame classification to provide refined parsing instructions.
  • [0058]
    Another aspect of the present invention is that the parsing instructions include a location identifier and an associated instruction to be applied to the frame at the position identified by the location identifier.
  • [0059]
    Another aspect of the present invention is that the frame includes one of a plurality of frame protocols, the preliminary multi-protocol frame classifier classifying the incoming frame to identify a protocol identity.
  • [0060]
    Another aspect of the present invention is that the preliminary multi-protocol frame classifier identifies each layer protocol and writes the frame into memory along with a protocol layer code.
  • [0061]
    Another aspect of the present invention is that the multi-stage parsing engine uses the protocol layer code as a start vector for an instruction memory, the instruction memory containing instructions for parsing the frame and pointers to access selected words of the frame in a frame buffer.
  • [0062]
    Another aspect of the present invention is that the parsing instructions generator identifies each layer protocol and writes the frame into memory along with a protocol layer code and wherein the multi-stage parsing engine processes the instructions from the instruction memory, resolves the pointers according to the protocol layer table and aligns the frame data with the instruction words.
  • [0063]
    Another aspect of the present invention is that the search results are fed back to the parsing instructions generator to be used as data that a parsing engine can parse through a data pipe.
  • [0064]
    Another aspect of the present invention is that the memory includes a content addressable memory and the search queries are used to search the content addressable memory.
  • [0065]
    Another aspect of the present invention is that the memory includes a static random access memory and the search queries are indexed directly to a static random access memory.
  • [0066]
    Another aspect of the present invention is that the parsing instructions generator provides a parser instruction set in an instruction memory to define microcode used for generating the parser instructions.
  • [0067]
    Another aspect of the present invention is that the multi-stage parsing engine forwards the frame and the search results.
  • [0068]
    Another aspect of the present invention is that the search results include the frame classification.
  • [0069]
    Another aspect of the present invention is that the parsing instructions generator further includes an instruction controller and wherein the search results are fed back to the instruction controller to be used as a start vector for subsequent processing stages.
  • [0070]
    Another aspect of the present invention is that the multi-stage parsing engine performs conditional branching, the conditional branching allowing specific instructions to be performed based upon satisfaction of a predetermined criteria.
  • [0071]
    In another embodiment of the present invention, an article of manufacture comprising a program storage medium readable by a computer is provided. The medium tangibly embodies one or more programs of instructions executable by the computer to perform a method for parsing frames in a network flow, wherein the method includes performing preliminary multi-protocol frame classification for incoming frames, processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions and providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0072]
    In another embodiment of the present invention, another method for handling packets is provided. The method including performing preliminary multi-protocol frame classification for incoming frames, processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions and providing parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0073]
    In another embodiment of the present invention, another method for handling packets is provided. The method includes processing at least the incoming frame to provide parsing instructions and providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0074]
    In another embodiment of the present invention, another article of manufacture comprising a program storage medium readable by a computer is provided. The medium tangibly embodies one or more programs of instructions executable by the computer to perform a method for parsing frames in a network flow, wherein the method includes performing preliminary multi-protocol frame classification for incoming frames, processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions and providing parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0075]
    In another embodiment of the present invention, another article of manufacture comprising a program storage medium readable by a computer is provided. The medium tangibly embodies one or more programs of instructions executable by the computer to perform a method for parsing frames in a network flow, wherein the method includes processing at least the incoming frame to provide parsing instructions and providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0076]
    In another embodiment of the present invention, another multi-protocol, multi-stage, real-time frame classifier is provided. The multi-protocol, multi-stage, real-time frame classifier including a preliminary multi-protocol frame composition analyzer for performing preliminary multi-protocol frame classification for incoming frames, a parsing instruction generator for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions and a parsing engine for providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0077]
    In another embodiment of the present invention, another multi-protocol, multi-stage, real-time frame classifier is provided. The multi-protocol, multi-stage, real-time frame classifier includes a parsing instruction generator for processing an incoming frame to provide parsing instructions and a multi-stage parsing engine for providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.
  • [0078]
    These and various other advantages and features of novelty which characterize the invention are pointed out with particularity in the claims annexed hereto and form a part hereof. However, for a better understanding of the invention, its advantages, and the objects obtained by its use, reference should be made to the drawings which form a further part hereof, and to accompanying descriptive matter, in which there are illustrated and described specific examples of an apparatus in accordance with the invention.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • [0079]
    Referring now to the drawings in which like reference numbers represent corresponding parts throughout:
  • [0080]
    FIG. 1 illustrates a block diagram for a network device that includes a multi-protocol route/flow classifier with sophisticated policing engines and packet transformation capability;
  • [0081]
    FIG. 2 is a block diagram of an input frame device according to the present invention;
  • [0082]
    FIG. 3 illustrates a block diagram of an apparatus for providing multi-protocol, multi-stage, real-time frame classification according to the present invention;
  • [0083]
    FIG. 4 illustrates a detailed block diagram of an apparatus for providing multi-protocol, multi-stage, real-time frame classification according to the present invention;
  • [0084]
    FIG. 5 illustrates a flow chart representing the processes performed by the apparatus for providing multi-protocol, multi-stage, real-time frame classification;
  • [0085]
    FIG. 6 illustrates the arrangement of the dual port frame buffer; and
  • [0086]
    FIG. 7 illustrates a flow chart showing the processes of the detailed block diagram of the apparatus for providing multi-protocol, multi-stage, real-time frame classification with reference to FIG. 4 according to the present invention.
  • DETAILED DESCRIPTION OF THE INVENTION
  • [0087]
    In the following description of the exemplary embodiment, reference is made to the accompanying drawings which form a part hereof, and in which is shown by way of illustration the specific embodiment in which the invention may be practiced. It is to be understood that other embodiments may be utilized as changes may be made without departing from the scope of the present invention.
  • [0088]
    The present invention provides a method and apparatus for providing multi-protocol, multi-stage, real-time frame classification. Advanced level of data extraction is provided across various frame protocols without imposing a performance penalty. Longest prefix match searches and/or direct lookup searches are supported. Moreover, conditional extractions, instruction branching, and multi-stage processing are all performed in real time.
  • [0089]
    FIG. 1 illustrates a block diagram for a network device 100 that includes a multi-protocol route/flow classifier with sophisticated policing engines and packet editing capability. The network device 100 provides advanced services at 10 Gbps, at least, by tightly coupling parsing, policing, and packet editing. This coupling allows the device to perform dynamic packet editing for QoS based on the current flow state and also effectively handles dynamic header processing such as required by MPLS routers. A physical layer interface 110 provides access to a framer 112 on the ingress. A input frame device 120 includes a parsing engine for handling differentiated services and providing packet analysis, a rate policing engine, and editor functionality. Tightly coupled parsing, policing, and packet editing allows the collective device to perform dynamic packet editing for quality of service based on the current flow state and also effectively handles dynamic header processing such as required by MPLS routers. A session or flow is defined as a series of IP datagrams that share a common destination IP address and traffic-engineering characteristics.
  • [0090]
    The input frame device 120 provides differentiated services, routing, and policing and provides them to a switch fabric and interface 130. On the egress side, the egress frame device 140 provides differentiated services traffic management. The egress frames are then provided to the framer 112 and then onto the physical layer interface 110. A processor 150 controls at least the input 120 and egress 140 frame devices.
  • [0091]
    FIG. 2 is a block diagram of an input frame device 200 according to the present invention. In FIG. 2, the input frame device includes a classifier 210 that receives incoming frames 212. The classifier builds queries (search words) to be search against either a CAM 214 or indexed directly to a SRAM 216. A policer 220 is provided to ensure flow conformance to a maximum allowed peak rate and a contractually obliged committed rate for flows, e.g., DiffServ IP and MPLS. The policer 220 includes an SRAM 222 for storing a drop policy for each connection. An editor 230 performs the last operations to the packet before being forwarded as outgoing frames 232. The editor 230 may fetch editor instructions and support policing results. An external SRAM 234 is provided for storing editor instructions. A processor interface allows for control of the classifier 210, policer 220 and editor 230 via the processor 242. In addition, a memory 244 may be provided to the processor interface 240 also.
  • [0092]
    FIG. 3 illustrates a block diagram 300 of an apparatus for providing multi-protocol, multi-stage, real-time frame classification according to the present invention. In FIG. 3, a preliminary frame composition analyzer 310 is provided to produce the preliminary multi-protocol frame classification 312 for incoming frames 314. A parsing instructions generator 320 is provided for processing at least the incoming frame 314 and the preliminary multi-protocol frame classification 312 to provide parsing instructions 322. A multistage parsing engine 330 receives at least a portion of the incoming frame 314 and the parsing instructions 322 to produce the search results 332.
  • [0093]
    The task of packet parsing involves identification of the fields in the packet. Field identification does not present a problem in the case of Layer 2/Layer 3/Layer 4 applications where the field offsets are known either with respect to the start of the packet or are dependent on the contents of another field. However, content-aware classification rules often require fields located within the data packet payload. In this case, the off-sets of fields may not be known apriori and the rule must encode the parsing and classification information.
  • [0094]
    The multistage parsing engine 330 provides multi-stage parsing of the incoming frame 314 according to the parsing instructions 322 to generate search results that presents information about the incoming frame 314. The search results 332 may be fedback 350 to the parsing instructions generator 320 for reprocessing of the search results 332 to generate parsing instructions 322 that are refined. Then, the multistage parsing engine 330 parses at least a portion of the incoming frame according to the refined parsing instructions 322 to generate search results 330 that are refined. The refined search results 330 provided greater information about the incoming frame 314.
  • [0095]
    Accordingly, the parsing engine 330 performs layer classification and tagging via a search/lookup engine. The parser 330 includes bitwise extraction from layer and offset and limited operators and masks. The entire frame is available for parsing and extraction. The parser generates, for example, up to four 72-bit search keys that can be concatenated for up to 288 bit searches and is capable, for example, of 2 stage lookup. For example, the parsing engine 330 may perform 512 programmed extractions on the first search and 512 for second stage extractions.
  • [0096]
    A microcode controlled programmable sequencer implementation drives the parsing engine. The parsing engine 330 is programmable to build search words. The incoming frame 314 is parsed to flexibly generate the search words from data anywhere within the frame or cell. The microcode instruction set contains specialized instructions defined to perform powerful and flexible operations such as EXTRACT, MASK, NOT, AND, OR, XOR, and Range. The instructions and associated data are executed from a dynamically loadable code space.
  • [0097]
    To prevent table explosion, a bit may be set as a key to indicate whether a field in a packet is within a predetermined range. For example, when a packet is analyzed, if the TCP source port is within a predetermined range, a bit is set to represent the TCP source port rather than building a search word having the typical 16 bits for the TCP source port. Accordingly, the CAM is used more effectively because less memory is needed to build the search words. The results of the CAM search are applied to the SRAM and returned to the result buffer. The parser 330 builds a search word by extracting bits of data from the packet and prepending bits representing the search type.
  • [0098]
    The parsing engine 330 parses the incoming frame 314 by extracting data into search words having various combinations of bits, e.g., 32, 64, 128, or 256 bits. Multiple searches may be performed, e.g., up to four searches may be issued to the CAM for Longest Prefix Matching or Direct SRAM Lookup (SRAM). For the Direct SRAM Lookup searches, the upper bits are truncated to match the width of the SRAM address space. The two words within the search word also have a corresponding eight bit search type. Given a specified extraction criteria, the appropriate microcode for the parser is provided. The protocol layer, extract data start offset, bits to be extracted, search word and location for extracted bits, N Bits of search type and SRAM or CAM Lookup parameters must be specified before the appropriate microcode can be generated. Optional parameters include data operations, e.g., greater than, less than, equal, NOT, AND, OR, XOR, and Range, that returns a single true/false bit that can be inserted into the search word. The true/false bit can also be used as a conditional branch, as will be explained with reference to FIG. 4. Optional parameters also includes a bit mask and operand(s) and branch instructions. Multiple microcode instructions can be concatenated into the same search words. The last instruction of a multiple instruction operation must indicate the extraction is complete.
  • [0099]
    The parsing engine 330 supports at least Longest Prefix Matching (LPM) lookups for forwarding table entries, MPLS label-based routing using direct lookup SRAM tables, ATM cell Virtual Path Identifier(VPI)Vertical Connector Identifier (VCI) mapping using direct lookup SRAM tables and Layer 3 lookups of source address (SA), destination address (DA), and type-of-service (TOS) fields. The parsing engine 330 may perform accesses to CAM or direct lookup SRAM. The parsing engine 330 supports a multi-stage memory lookup where the Connection ID resulting from one lookup is utilized to create the query word for a subsequent lookup.
  • [0100]
    FIG. 4 illustrates a detailed block diagram 400 of an apparatus for providing multi-protocol, multi-stage, real-time frame classification according to the present invention. A preprocessor 410 classifies the type of frame 412 received. The preprocessor 410 may be programmed to identify any protocol in any OSI layer. The preprocessor 410 identifies each layer protocol using a multistage algorithm coupled with a CAM/SRAM 414 for resolving protocols, etc.
  • [0101]
    FIG. 6 a illustrates the arrangement of the dual port memory buffer 600. In FIG. 6 a, the memory buffer contains a first frame 610 and 2-N frames 620. The first frame 610 is shown having several segments. The first segment is the protocol header 632 followed by the Layer 2 header 634, the Layer 2.5 header 636, the layer 3 header 638 and the layer 4 header 640. The layer address table 650 in FIG. 6 b provides the layer base addresses 653 which provide an indication of the address for each layer along with the search results 656, the end-of-frame 654, and other programming 658.
  • [0102]
    Referring again to FIG. 4, the frame is then written into the dual port memory buffer 416 along with the result of the preprocessor, the protocol layer code. The protocol layer code and layer 653 are stored in the protocol header 632. The dual port memory buffer 416 includes port A 418 and port B 420. Each layer boundary is marked as to where it resides, e.g., an N-bit code is stored with the frame. A parser instruction start vector 422 is provided from the frame memory controller 424 to the instruction memory controller 460. The instruction memory controller 460 controls the instruction memory based upon the frame data from the frame memory controller 424.
  • [0103]
    The instruction memory 430 contains both instructions for the parsing engine 440 and layer offsets to access selected words in the dual port memory buffer 416. Each protocol layer within each frame is identified and its location in the memory buffer is stored in a table. The layer offset is added to the layer base address resulting in a memory pointer 426 which selects frame data 434 used for parsing. As each instruction from the instruction memory 430 is processed, the pointers are resolved by linking the layer address table 650 and layer offsets. The instruction pipe 432 and data pipe 434 serve to align the frame data with the instruction words.
  • [0104]
    The parsing engine 440 receives the instruction 436 and data 438 and performs the functions, e.g., relative compare 482, fixed compare 484, mask 486, register 488, and ALU 490, selected by the opcode in the parser instruction 436. The parser instruction set 436 defines the microcode used by the parsing engine 440. Branching 474 is provided to allow the instruction memory controller 460 to instruct the instruction memory 430 to generate instructions for the parsing engine 440 and layer offsets to access selected words in the dual port memory buffer 416. The branching 474 may be conditional branching, wherein a field in a packet is analyzed and instructions are executed based upon whether the field meets a predetermined condition.
  • [0105]
    The results 442 of the functions are passed to the extractor 444 which builds queries (search words) 446 to be search against either the CAM 448 or indexed directly to the SRAM 450. These results contain the frame classification or can be fed back to the instruction memory controller 460 to be used as either the start vector for subsequent processing stages or as data the parsing engine 440 can parse through the data pipe 434. When processing is complete, the frame is read out 470 and forwarded with the CAM/SRAM data, i.e., the search results 472. The search results 472 are provided as an output, for example, as a start instruction pointer for the editor, as a connection ID for policing, or as a different type of instruction for the editor such as for filtering.
  • [0106]
    The parsing engine 440 may also provide an update 480 to the search results 472, for example, to provide a pointer and other bits that the editor can interpret, to perform custom bit modifications, or to provide for a more dynamic configuration. The parsing engine 440 executes a new instruction each clock cycle. Because of the preprocessing by the preprocessor 410, the blueprint of the frame is known before execution of parsing instructions is initiated.
  • [0107]
    In addition, the detailed block diagram 400 may be concatenated to process the incoming frame/packet input 412 to provide scalability of multi-protocol, multi-stage, real-time frame classification. The outputs 470, 472 are interleaved and are not all valid at the same time. By concatenating the block diagram 400, the bandwidth provided may be scaled to meet the needs of the network.
  • [0108]
    FIG. 5 illustrates a flow chart 500 representing the processes performed by the apparatus for providing multi-protocol, multi-stage, real-time frame classification. First a frame is received as input 510. The frame is provided to the preprocessor for classification 512. The frame is then stored in the memory buffer 514 as described above. The protocol layer code is used as a start vector into the instruction memory 516. Extraction instructions are provided for building search queries 520. A decision is made whether there are additional searches to perform 522. If yes 524, then additional extraction instructions are provided for building search queries. If not 526, then the processing continues. A search latency is provided 530. A decision is made whether multi-stage parsing is to be performed 540. If yes 542, then the search results are fed back to the instruction controller to be used as the start vector for subsequent processing stages. If not 544, the frame and the search results are provided as an output 550.
  • [0109]
    FIG. 7 illustrates a flow chart 700 showing the processes of the detailed block diagram of the apparatus for providing multi-protocol, multi-stage, real-time frame classification with reference to FIG. 4 according to the present invention. First, preliminary multi-protocol frame classification for incoming frames is performed by resolving a composition for the incoming frame 710. Then, at least the incoming frame and the preliminary multi-protocol frame classification is processed to provide parsing instructions by storing an incoming frame in a memory buffer, generating the parsing instructions for the incoming frame based upon the multi-protocol frame classification and aligning the generated parsing instructions with a frame selected from the incoming frames stored in the memory buffer 712. At least a portion of the incoming frame is read from the memory buffer 714. The parsing instructions are interpreted 716. Macros are executed for performing parsing functions on at least the portion of the incoming frame using the interpreted parsing instructions 718. The parsing instructions may use conditional branching. Conditional branching involves analyzing a field in a packet and executing instructions based upon whether the field meets a predetermined condition. For example, if a field in the packet meets a predetermined criteria, a first instruction is performed. Otherwise, a second instruction is performed.
  • [0110]
    Extractions instructions are generated in response to the at least incoming frame and the preliminary multi-protocol frame classification 722. The extraction instructions may invoke conditional extractions. The extraction instructions are used to produce search queries 724. The search queries are applied against a memory to produce the search results 726. The search results may be used by the instruction memory controller 460 and/or frame memory controller 424 to generated further refined parsing instructions 740. The refined parsing instructions provide greater information about the incoming frame.
  • [0111]
    The process illustrated with reference to FIG. 7 may be tangibly embodied in a computer-readable medium or carrier, e.g. one or more of the fixed and/or removable data storage devices 260 illustrated in FIG. 2, or other data storage or data communications devices. The computer program 262 may be loaded into the classifier 210 or into the memory 244 to configure the classifier 210 of FIG. 2, for execution. The computer program 262 comprise instructions which, when read and executed by the classifier 210 of FIG. 2, causes the classifier 210 to perform the steps necessary to execute the steps or elements of the present invention.
  • [0112]
    The foregoing description of the exemplary embodiment of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of the above teaching. It is intended that the scope of the invention be limited not with this detailed description, but rather by the claims appended hereto.

Claims (40)

  1. 1-75. (canceled)
  2. 76. A system for adaptively parsing received frames that include data units having multiple field values formatted according to at least one of a set of network protocols used in a communication network, the system comprising:
    a memory storing information suited to resolve the at least one of the set of network protocols;
    a preprocessor configured to interact with the memory to provide a type classification for a first frame and generate a layer code based upon said type classification wherein said layer code delineates selected field values in said first frame corresponding to a protocol format of a resolved one of the set of network protocols;
    a dual-port memory coupled to said preprocessor and operative to concurrently receive said first frame and said layer code;
    an instruction memory operatively coupled to said dual-port memory, said instruction memory storing layer offsets associated with said selected field values delineated by said layer code and at least one instruction that is selected based upon the type classification of said first frame;
    a parsing engine communicatively coupled to said instruction memory and said dual-port memory in a feed-forward data flow connection and a feed-back dataflow connection, the feed-forward dataflow connection operative to provide said parsing engine with the at least one instruction and with said layer offsets for accessing the selected field values in said first frame, said parsing engine being adapted to parse said first frame according to said at least one instruction and generate an output indicative of a classification of said first frame, said feed-back dataflow connection affecting communication between said parsing engine and at least one of said instruction memory and said dual-port memory by forwarding at least a portion of said output to said instruction memory for use in refining of said at least one instruction targeted for execution on and to said dual-port memory for re-inputting to said parsing engine through said feed-forward dataflow connection.
  3. 77. The system of claim 76 wherein said feed-back dataflow connection includes an extractor coupled to said parsing engine for receiving said output and constructing search words, said search words suitable for application against a contents-addressable memory (CAM) for obtaining search results embodying information about the first frame.
  4. 78. The system of claim 76 wherein said parsing engine is coupled to one or more of a mask unit, a compare unit, a register file and a arithmetic logic unit (ALU), wherein said mask unit is configured to mask a first portion of said first frame to provide masked frame data, said compare unit is adapted to compare the at least one selected field value in said masked frame data to a predetermined value to generate at least a partial identity of the protocol format of the resolved one of the set of network protocols, said ALU is adapted to process one or more of the at least one selected field, said partial identity of said protocol format to provide updated output indicative of the classification of said first frame.
  5. 79. The system of claim 76 wherein said parsing engine is provided with a data pipe and a instruction pipe disposed in said feed-forward dataflow connection in data communication with said dual-port memory and said instruction memory respectively that maintain said first frame and said at least one instruction substantially aligned with each other.
  6. 80. The system of claim 79 wherein said data units correspond to two or more frames and arrive in an interleaved sequence with said data pipe and said instruction pipe is operative to align said data units from the first frame with said at least one instruction that is selected responsive to the type classification of said first frame.
  7. 81. The system of claim 76 wherein said at least one instruction that is selected based upon the type classification of said first frame includes a first sequence of instructions having at least one branch instruction that enables said instruction memory to select a second sequence of instructions targeted for execution by said parsing engine, said second sequence of instructions being based on at least a partial parsing of the first frame using one or more of said first sequence of instructions.
  8. 82. The system of claim 76 wherein said at least one instruction comprises instructions drawn from the group consisting of EXTRACT, MASK, NOT, AND, OR, XOR, and Range.
  9. 83. A method for classifying a frame composed of data-fields formatted according to protocol layers used in a communication network, the method comprising:
    storing predetermined data in a first memory wherein said predetermined data enables at least a partial resolution of said protocol layers;
    operating a preprocessor in interactive communication with the first memory to correlate at least a portion of the predetermined data with one or more data-fields to obtain class information for the frame, said class information including indicia pointing to boundaries between said protocol layers;
    concurrently transferring said data-fields and said class information to be stored in a second memory;
    selectively loading an instruction memory with a sequence of program instructions for subsequent processing of said frame responsive to said data-fields and said class information;
    parsing said frame by operating on said data-fields, pointed to by said indicia, using said sequence of program instructions to output a first set of search words indicative of an identification of said data-fields at a first resolution;
    iteratively refining said sequence of program instructions responsive to said first set of search words and causing said refined sequence of program instructions to operate on one or more of said data-fields and said first set of search words to generate a second set of search words indicative of the identification of said data-fields at a second resolution greater than said first resolution; and
    outputting said data-fields and said second set of search words when said second resolution meets predefined criteria.
  10. 84. The method of claim 83 further including aligning said data-fields with the sequence of program instructions before said program instructions operate on said data-fields.
  11. 85. The method of claim 84 wherein said data-fields include two or more sets of data-fields corresponding to two or more arriving frames with each set of data-fields embodying differing protocol layers, said step of aligning said data-fields with the sequence of program instructions including aligning said a first set of data-fields with an associated first sequence of program instructions and a second set of data-fields with an associated second sequence of program instructions.
  12. 86. The method of claim 85 wherein said step of parsing said frame includes interleaving operation of both said first sequence of program instructions on said first data-fields and said second sequence of program instructions on said second data-fields during a single time span.
  13. 87. The method of claim 83 wherein said frame ingresses at a first bit-rate and egresses at a second bit-rate that is substantially equal to said first bit-rate.
  14. 88. The method of claim 83 wherein said predefined criteria corresponds to identification of all protocol layers for said frame.
  15. 89. The method of claim 83 wherein said step of outputting said first set of search results further includes:
    using an extractor with an output of said parsing engine to build search keys; and
    applying said search keys against a contents-addressable memory (CAM) to generate said first set of search results that contain a frame classification.
  16. 90. The method of claim 83 wherein parsing said frame includes the steps of:
    receiving predetermined data corresponding to at least one protocol layer;
    extracting said frame into a plurality of bit fragments of varying length using at least one data mask;
    comparing said predetermined data with at least one bit fragment to generate at least one comparison result;
    storing said at least one comparison result in a first register;
    concatenating said comparison results from said register to obtain a search key; and
    indexing a memory using said search key to generate a classification of said frame.
  17. 91. The method of claim 90 further comprising the steps of:
    providing a content-addressable memory (CAM);
    storing a plurality of instructions for handling said frame in said CAM;
    receiving said search key at said CAM and outputting a set of instructions from said stored plurality of instructions responsive to said search key; and
    reparsing said frame using said outputted set of instructions.
  18. 92. A method of filtering data packets in a network device, said method comprising:
    receiving an incoming packet from a port; extracting packet fields of the incoming packet; classifying the incoming packet and generating action instructions based on values contained in the extracted packet fields; and modifying the incoming packet based on the action instructions and a predetermined criteria set for the network device.
  19. 93. A data filter for data packets in a network device, said data filter comprising:
    receiving means for receiving an incoming packet from a port; extracting means for extracting packet fields of the incoming packet; classifying means for classifying the incoming packet and generating action instructions based on values contained in the extracted packet fields; and modifying means for modifying the incoming packet based on the action instructions and a predetermined criteria set for the network device.
  20. 94. A data filter as recited in claim 93, wherein said network device comprises one of a switch and a router and the modifying means comprises processing means for discarding the incoming packet, forwarding the incoming packet, modifying the incoming packet or modifying a forwarding control message for the incoming packet.
  21. 95. A data filter as recited in claim 93, wherein said network device comprises a network co-processor and the classifying means comprises classifying means for classifying the incoming packet based on protocol type and data payload of the incoming packet.
  22. 96. A data filter as recited in claim 93, wherein said network device comprises a network interface controller and the classifying means comprises classifying means for classifying the incoming packet based on one of a flow identification for packets having a particular source and a particular destination and a flow identification parameter.
  23. 97. A fast flexible filter processor for data packets in a network device, said fast flexible filter processor comprising: an inspection engine, configured to receive an incoming data packet and extract selected packet fields from the incoming data packet; a classification engine communicating with the inspection engine, configured to receive the extracted selected packet fields and generate action instructions based on the values contained in the extracted packet fields; a packet processing engine communicating with the classification engine, configured to receive the action instructions and the incoming data packet, modify the incoming packet and output the modified incoming data packet.
  24. 98. A network device for network communications, said network device comprising: a data port interface supporting at least one data port; a programmable interface, said programmable interface configured to communicate with a CPU or a programming source; a memory, said memory communicating with said data port interface; and a fast flexible filtering processor configured to receive packets coming into the data port interface, extract packet fields from said packets, determine action instructions from values contained in the extracted packet fields and take selective filter action based upon the action instructions and a predetermined criteria set for the network device.
  25. 99. A network switch as recited in claim 98, wherein said fast flexible filtering processor is configured to be programmable by inputs from the CPU or the programming source through the programmable interface.
  26. 100. A network switch as recited in claim 98, wherein said data port interface, said programmable interface, said memory, and said fast flexible filtering processor are implemented on a common semiconductor substrate.
  27. 101. A network switch as recited in claim 98, wherein the fast flexible filtering processor filters the packets independent of the programmable interface, and therefore without communicating with the CPU or the programming source.
  28. 102. A method for searching network messages for pre-defined regular expressions, the method comprising the steps of: storing a plurality of pre-defined regular expressions in a content-addressable memory (CAM); inputting a network message or selected portion thereof to the CAM for comparison with all of the regular expressions stored therein, the comparison with all CAM entries being done at the same time; returning an output from the CAM; and identifying, in response to the output, an action to be applied to the given network message or portion thereof that corresponds to a CAM entry matching the inputted network message or selected portion thereof.
  29. 103. The method of claim 102, further comprising: storing the pre-defined regular expressions in a memory storage device, and also storing one or more actions that are to be applied to network messages matching the respective regular expressions in the memory storage device; and operating the memory storage device in interaction with the CAM.
  30. 104. The method of claim 102, further comprising: using as the CAM a ternary content addressable memory (TCAM); storing the pre-defined regular expressions in a random access memory (RAM); and storing one or more actions that are to be applied to network messages matching the respective regular expressions in the random access memory (RAM).
  31. 105. The method of claim 102, further comprising: configuring a logic circuit to extract one or more selected fields from network messages and to append those selected fields to the respective network messages prior to inputting the messages to the CAM.
  32. 106. A pattern matching engine apparatus for use in searching network messages for pre-defined regular expressions, comprising: a content-addressable memory (CAM) having a plurality of entries containing the pre-defined regular expressions; a decoder circuit configured to control an input to the CAM, the input including a given network message or selected portion thereof for comparison with the regular expressions contained within the CAM; and an output from the CAM, and in response to the output from the CAM, identifying an action to be applied to the given network message or portion thereof, and the CAM configured such that each network message or portion thereof input to the CAM is compared against all CAM entries at the same time, allowing high-speed pattern matching of network messages.
  33. 107. The apparatus of claim 106, further comprising: a memory storage device to store the pre-defined regular expressions, and also to store one or more actions that are to be applied to network messages matching the respective regular expressions; and operating the memory storage device in interaction with the CAM.
  34. 108. A computer readable media, comprising: said computer readable media containing instructions for execution on a processor for the practice of a method for searching network messages for pre-defined regular expressions, the method having the steps of, storing a plurality of pre-defined regular expressions in a content-addressable memory (CAM); inputting a network message or selected portion thereof to the CAM for comparison with all of the regular expressions stored therein, the comparison with all CAM entries being done at the same time; returning an output from the CAM; and identifying, in response to the output, an action to be applied to the given network message or portion thereof that corresponds to a CAM entry matching the inputted network message or selected portion thereof.
  35. 109. Electromagnetic signals propagating on a computer network, comprising: said electromagnetic signals carrying instructions for execution on a processor for the practice of a method for searching network messages for pre-defined regular expressions, the method having the steps of, storing a plurality of pre-defined regular expressions in a content-addressable memory (CAM); inputting a network message or selected portion thereof to the CAM for comparison with all of the regular expressions stored therein, the comparison with all CAM entries being done at the same time; returning an output from the CAM; and identifying, in response to the output, an action to be applied to the given network message or portion thereof that corresponds to a CAM entry matching the inputted network message or selected portion thereof.
  36. 110. A processor configured to process contents of packets passing through a connection point on a computer network, the processor comprising: (a) a buffer for receiving at least some of the contents of each packet passing through the connection point; (b) a memory containing one or more instructions of an instruction set for the state processor; (c) an arithmetic logic unit (ALU) coupled to the buffer; (d) a control block coupled to the ALU and to the instruction memory for decoding instructions; and (e) a program counter coupled to the instruction memory and to the ALU for indicating the next state processor instruction in the memory to process, wherein the ALU includes a searching apparatus comprising one or more comparators for searching for a reference string in the contents of a packet.
  37. 111. In a packet switching network for relaying information in frames among nodes, a node comprising a combination of receiving means for acquiring incoming information frames including header portions designating format information, frame alteration commands for designating changes to data in a frame, and packets containing information data; alteration means responsive to said header portions for modifying information contained in said frames; and output means for relaying altered frames to another node.
  38. 112. The packet switching network of claim 111 further including offset means for determining locations of data to be transformed; pointer means for indicating locations of data passing through said node; comparator means for indicating locations from the offset means and the pointer means are equal; and means responsive to equality signals from said comparator means for controlling insertion and passage of data to the output means.
  39. 113. The combination of claim 111 further including deletion means responsive to the decoder means for inhibiting passage of data to said output means.
  40. 114. The combination in claim 111 further including storage means for storing predetermined data patterns; selection means coupled to said storage means for selecting a desired predetermined data pattern; and application means responsive to the selection means for coupling a selected predetermined data pattern to the alteration means.
US11146415 2001-05-04 2005-06-06 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification Abandoned US20060039372A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US09849913 US6904057B2 (en) 2001-05-04 2001-05-04 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification
US11146415 US20060039372A1 (en) 2001-05-04 2005-06-06 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US11146415 US20060039372A1 (en) 2001-05-04 2005-06-06 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification
US11950651 US7835375B2 (en) 2001-05-04 2007-12-05 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Publications (1)

Publication Number Publication Date
US20060039372A1 true true US20060039372A1 (en) 2006-02-23

Family

ID=25306819

Family Applications (3)

Application Number Title Priority Date Filing Date
US09849913 Active 2023-11-29 US6904057B2 (en) 2001-05-04 2001-05-04 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification
US11146415 Abandoned US20060039372A1 (en) 2001-05-04 2005-06-06 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification
US11950651 Active 2021-11-06 US7835375B2 (en) 2001-05-04 2007-12-05 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US09849913 Active 2023-11-29 US6904057B2 (en) 2001-05-04 2001-05-04 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Family Applications After (1)

Application Number Title Priority Date Filing Date
US11950651 Active 2021-11-06 US7835375B2 (en) 2001-05-04 2007-12-05 Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

Country Status (1)

Country Link
US (3) US6904057B2 (en)

Cited By (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030118022A1 (en) * 2001-12-21 2003-06-26 Chip Engines Reconfigurable data packet header processor
US20060031555A1 (en) * 2004-08-05 2006-02-09 Somsubhra Sikdar Data context switching in a semantic processor
US20060159019A1 (en) * 2001-05-04 2006-07-20 Slt Logic Llc System and method for policing multiple data flows and multi-protocol data flows
US20060280178A1 (en) * 2005-06-14 2006-12-14 Microsoft Corporation Script-based parser
US20070047457A1 (en) * 2005-08-29 2007-03-01 Harijono Indra G Method and system for reassembling packets prior to searching
WO2008049270A1 (en) * 2006-10-25 2008-05-02 Thomson Licensing Method and system for frame classification
US7496035B1 (en) * 2003-01-31 2009-02-24 Cisco Technology, Inc. Methods and apparatus for defining flow types and instances thereof such as for identifying packets corresponding to instances of the flow types
US20090213856A1 (en) * 2001-05-04 2009-08-27 Slt Logic Llc System and Method for Providing Transformation of Multi-Protocol Packets in a Data Stream
US20120039332A1 (en) * 2010-08-12 2012-02-16 Steve Jackowski Systems and methods for multi-level quality of service classification in an intermediary device
US20120203718A1 (en) * 2011-02-08 2012-08-09 International Business Machines Corporation Algorithm engine for use in a pattern matching accelerator
US20130016729A1 (en) * 2007-07-11 2013-01-17 Commex Technologies, Ltd. Systems and Methods For Efficient Handling of Data Traffic and Processing Within a Processing Device
US8638795B2 (en) 2010-08-12 2014-01-28 Citrix Systems, Inc. Systems and methods for quality of service of encrypted network traffic
US20140081699A1 (en) * 2004-02-13 2014-03-20 Fis Financial Compliance Solutions, Llc Systems and methods for monitoring and detecting fraudulent uses of business applications
CN103957139A (en) * 2014-05-09 2014-07-30 天津市德力电子仪器有限公司 Ten-Gigabit Ethernet frame analyzing method based on FPGA
US8990380B2 (en) 2010-08-12 2015-03-24 Citrix Systems, Inc. Systems and methods for quality of service of ICA published applications
US20150189046A1 (en) * 2013-12-31 2015-07-02 Cavium, Inc. Multi-rule approach to encoding a group of rules
US20150373165A1 (en) * 2014-06-19 2015-12-24 Xpliant, Inc. Method of handling large protocol layers for configurable extraction of layer information and an apparatus thereof
US9275336B2 (en) 2013-12-31 2016-03-01 Cavium, Inc. Method and system for skipping over group(s) of rules based on skip group rule
US9344366B2 (en) 2011-08-02 2016-05-17 Cavium, Inc. System and method for rule matching in a processor
US9438703B2 (en) 2014-06-19 2016-09-06 Cavium, Inc. Method of forming a hash input from packet contents and an apparatus thereof
US9473601B2 (en) 2014-06-19 2016-10-18 Cavium, Inc. Method of representing a generic format header using continuous bytes and an apparatus thereof
US9497294B2 (en) 2014-06-19 2016-11-15 Cavium, Inc. Method of using a unique packet identifier to identify structure of a packet and an apparatus thereof
US9516145B2 (en) 2014-06-19 2016-12-06 Cavium, Inc. Method of extracting data from packets and an apparatus thereof
US9531849B2 (en) 2014-06-19 2016-12-27 Cavium, Inc. Method of splitting a packet into individual layers for modification and intelligently stitching layers back together after modification and an apparatus thereof
US9531848B2 (en) 2014-06-19 2016-12-27 Cavium, Inc. Method of using generic modification instructions to enable flexible modifications of packets and an apparatus thereof
US9606781B2 (en) 2014-11-14 2017-03-28 Cavium, Inc. Parser engine programming tool for programmable network devices
US20170104852A1 (en) * 2013-09-16 2017-04-13 Amazon Technologies, Inc. Configurable parser and a method for parsing information units
US9628385B2 (en) 2014-06-19 2017-04-18 Cavium, Inc. Method of identifying internal destinations of networks packets and an apparatus thereof
US9635146B2 (en) 2014-06-19 2017-04-25 Cavium, Inc. Method of using bit vectors to allow expansion and collapse of header layers within packets for enabling flexible modifications and an apparatus thereof
US9667446B2 (en) 2014-01-08 2017-05-30 Cavium, Inc. Condition code approach for comparing rule and packet data that are provided in portions
US9742694B2 (en) 2014-06-19 2017-08-22 Cavium, Inc. Method of dynamically renumbering ports and an apparatus thereof
US9825884B2 (en) 2013-12-30 2017-11-21 Cavium, Inc. Protocol independent programmable switch (PIPS) software defined data center networks

Families Citing this family (108)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010032278A1 (en) 1997-10-07 2001-10-18 Brown Stephen J. Remote generation and distribution of command programs for programmable devices
FR2823042B1 (en) * 2001-03-29 2003-07-04 Cit Alcatel Method for bidirectional transmission Synchronized packet
US6904057B2 (en) * 2001-05-04 2005-06-07 Slt Logic Llc Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification
US6732228B1 (en) * 2001-07-19 2004-05-04 Network Elements, Inc. Multi-protocol data classification using on-chip CAM
US7133409B1 (en) 2001-07-19 2006-11-07 Richard Willardson Programmable packet filtering in a prioritized chain
US20030031178A1 (en) * 2001-08-07 2003-02-13 Amplify.Net, Inc. Method for ascertaining network bandwidth allocation policy associated with network address
US7065083B1 (en) * 2001-10-04 2006-06-20 Cisco Technology, Inc. Method and apparatus for dynamically generating lookup words for content-addressable memories
US7580408B2 (en) * 2001-11-21 2009-08-25 Alcatel Lucent Configurable packet processor
US7236492B2 (en) * 2001-11-21 2007-06-26 Alcatel-Lucent Canada Inc. Configurable packet processor
US7307986B2 (en) * 2002-02-04 2007-12-11 Intel Corporation State record processing
US7227840B1 (en) * 2002-03-18 2007-06-05 Juniper Networks, Inc. High performance probabilistic rate policer
US20030185220A1 (en) * 2002-03-27 2003-10-02 Moshe Valenci Dynamically loading parsing capabilities
US7187694B1 (en) * 2002-03-29 2007-03-06 Pmc-Sierra, Inc. Generic packet parser
US7899924B2 (en) * 2002-04-19 2011-03-01 Oesterreicher Richard T Flexible streaming hardware
US7486696B2 (en) * 2002-06-25 2009-02-03 Avaya, Inc. System and method for providing bandwidth management for VPNs
US20040004956A1 (en) * 2002-07-03 2004-01-08 Agilent Technologies, Inc. Apparatus and method for routing information from a telecommunications network
US7724740B1 (en) * 2002-08-27 2010-05-25 3Com Corporation Computer system and network interface supporting class of service queues
US7894480B1 (en) * 2002-08-27 2011-02-22 Hewlett-Packard Company Computer system and network interface with hardware based rule checking for embedded firewall
US20040141356A1 (en) * 2002-08-29 2004-07-22 Maria Gabrani Data communications method and apparatus
GB0221464D0 (en) 2002-09-16 2002-10-23 Cambridge Internetworking Ltd Network interface and protocol
KR100458373B1 (en) * 2002-09-18 2004-11-26 전자부품연구원 Method and apparatus for integration processing of different network protocols and multimedia traffics
US20050080761A1 (en) * 2002-10-18 2005-04-14 Neoscale Systems Data path media security system and method in a storage area network
US7610440B2 (en) * 2002-10-23 2009-10-27 Husby Donald E Content addressable memory with automated learning
US20040100908A1 (en) * 2002-11-27 2004-05-27 Khosravi Hormuzd M. Method and apparatus to provide IP QoS in a router having a non-monolithic design
US7616666B1 (en) * 2002-12-09 2009-11-10 Sprint Communications Company L.P. Method and system for customizing update-string processing in network elements
GB0229647D0 (en) * 2002-12-19 2003-01-22 Zarlink Semiconductor Ltd Packet classifer
CA2415018C (en) * 2002-12-23 2006-09-19 Mark D. Leitch Adaptive parallel data clustering when loading a data structure containing data clustered along one or more dimensions
US20050281281A1 (en) * 2003-01-24 2005-12-22 Rajesh Nair Port input buffer architecture
US7415596B2 (en) * 2003-01-24 2008-08-19 Gigafin Networks, Inc. Parser table/production rule table configuration using CAM and SRAM
GB0304807D0 (en) 2003-03-03 2003-04-09 Cambridge Internetworking Ltd Data protocol
US7466687B2 (en) * 2003-04-28 2008-12-16 International Business Machines Corporation Packet classification using modified range labels
US7362753B2 (en) 2003-06-17 2008-04-22 International Business Machines Corporation Method and hardware apparatus for implementing frame alteration commands
US8027349B2 (en) 2003-09-25 2011-09-27 Roy-G-Biv Corporation Database event driven motion systems
US20060064503A1 (en) * 2003-09-25 2006-03-23 Brown David W Data routing systems and methods
US7617241B2 (en) * 2003-11-07 2009-11-10 Rmi Corporation Method and apparatus for enhanced hashing
US7787471B2 (en) * 2003-11-10 2010-08-31 Broadcom Corporation Field processor for a network device
US7751440B2 (en) * 2003-12-04 2010-07-06 Intel Corporation Reconfigurable frame parser
US7317723B1 (en) * 2004-02-03 2008-01-08 Cisco Technology, Inc. Action based termination of multidimensional lookup
US7251707B1 (en) * 2004-02-06 2007-07-31 Netlogic Microsystems, Inc. Content based content addressable memory block enabling using search key
GB0404696D0 (en) 2004-03-02 2004-04-07 Level 5 Networks Ltd Dual driver interface
US7769045B2 (en) * 2004-03-10 2010-08-03 Motorola, Inc. Method and apparatus for processing header bits and payload bits
US8161270B1 (en) 2004-03-30 2012-04-17 Extreme Networks, Inc. Packet data modification processor
US7292591B2 (en) * 2004-03-30 2007-11-06 Extreme Networks, Inc. Packet processing system architecture and method
US7385984B2 (en) * 2004-03-30 2008-06-10 Extreme Networks, Inc. Packet processing system architecture and method
US7304996B1 (en) 2004-03-30 2007-12-04 Extreme Networks, Inc. System and method for assembling a data packet
US7505459B2 (en) * 2004-03-30 2009-03-17 Teknovus, Inc. Method and apparatus for switching packets in a passive optical network
GB0408876D0 (en) 2004-04-21 2004-05-26 Level 5 Networks Ltd User-level stack
GB0408868D0 (en) 2004-04-21 2004-05-26 Level 5 Networks Ltd Checking data integrity
US7586851B2 (en) * 2004-04-26 2009-09-08 Cisco Technology, Inc. Programmable packet parsing processor
US7660873B2 (en) * 2004-08-16 2010-02-09 General Electric Company Systems and methods for communicating messages
US7340570B2 (en) * 2004-08-18 2008-03-04 Intel Corporation Engine for comparing a key with rules having high and low values defining a range
US7602731B2 (en) * 2004-12-22 2009-10-13 Intruguard Devices, Inc. System and method for integrated header, state, rate and content anomaly prevention with policy enforcement
US7626940B2 (en) * 2004-12-22 2009-12-01 Intruguard Devices, Inc. System and method for integrated header, state, rate and content anomaly prevention for domain name service
US7266005B2 (en) * 2004-12-29 2007-09-04 Stmicroelectronics Pvt. Ltd. Efficient content addressable memory array for classless inter-domain routing
US8228932B2 (en) * 2005-02-18 2012-07-24 Broadcom Corporation Layout architecture for expandable network device
US20060187919A1 (en) * 2005-02-18 2006-08-24 Broadcom Corporation Two stage parser for a network
WO2006095184B1 (en) 2005-03-10 2007-06-28 Level 5 Networks Inc Data processing system
GB0505297D0 (en) 2005-03-15 2005-04-20 Level 5 Networks Ltd Redirecting instructions
GB0505300D0 (en) 2005-03-15 2005-04-20 Level 5 Networks Ltd Transmitting data
GB0506403D0 (en) 2005-03-30 2005-05-04 Level 5 Networks Ltd Routing tables
US7634584B2 (en) 2005-04-27 2009-12-15 Solarflare Communications, Inc. Packet validation in virtual network interface architecture
US8645558B2 (en) 2005-06-15 2014-02-04 Solarflare Communications, Inc. Reception according to a data transfer protocol of data directed to any of a plurality of destination entities for data extraction
US8050185B2 (en) * 2005-08-24 2011-11-01 Hewlett-Packard Development Company, L.P. Sampling of network traffic based on CAM lookup
US7984180B2 (en) 2005-10-20 2011-07-19 Solarflare Communications, Inc. Hashing algorithm for network receive filtering
US7869411B2 (en) * 2005-11-21 2011-01-11 Broadcom Corporation Compact packet operation device and method
US20070183415A1 (en) * 2006-02-03 2007-08-09 Utstarcom Incorporated Method and system for internal data loop back in a high data rate switch
US8116312B2 (en) 2006-02-08 2012-02-14 Solarflare Communications, Inc. Method and apparatus for multicast packet reception
US9686117B2 (en) 2006-07-10 2017-06-20 Solarflare Communications, Inc. Chimney onload implementation of network protocol stack
WO2008038139A3 (en) 2006-07-10 2008-11-06 Solarflare Comm Inc Network stacks
US7852843B2 (en) * 2006-07-21 2010-12-14 Cortina Systems, Inc. Apparatus and method for layer-2 to layer-7 search engine for high speed network application
GB0621774D0 (en) 2006-11-01 2006-12-13 Level 5 Networks Inc Driver level segmentation
US7822875B1 (en) * 2006-12-22 2010-10-26 Marvell International Ltd. Method for flexible modifications to a packet
US7978700B2 (en) * 2007-03-12 2011-07-12 Marvell Israel (Misl) Ltd. Apparatus for determining locations of fields in a data unit
WO2009018578A3 (en) * 2007-08-02 2009-04-09 Dominique Becq Methods, systems, and computer readable media for collecting data from network traffic traversing high speed internet protocol (ip) communication links
US7557605B2 (en) * 2007-09-14 2009-07-07 Cswitch Corporation Heterogeneous configurable integrated circuit
GB0723422D0 (en) 2007-11-29 2008-01-09 Level 5 Networks Inc Virtualised receive side scaling
GB0802126D0 (en) 2008-02-05 2008-03-12 Level 5 Networks Inc Scalable sockets
GB0823162D0 (en) 2008-12-18 2009-01-28 Solarflare Communications Inc Virtualised Interface Functions
US20110004597A1 (en) * 2009-03-16 2011-01-06 Yehiel Engel System and method for content aware routing of data within a platform hub
US8427952B1 (en) * 2009-03-24 2013-04-23 Packet Plus, Inc. Microcode engine for packet processing
US9256560B2 (en) 2009-07-29 2016-02-09 Solarflare Communications, Inc. Controller integration
US9210140B2 (en) 2009-08-19 2015-12-08 Solarflare Communications, Inc. Remote functionality selection
EP2309680B1 (en) 2009-10-08 2017-07-19 Solarflare Communications Inc Switching API
US8743877B2 (en) 2009-12-21 2014-06-03 Steven L. Pope Header processing engine
US8848746B2 (en) 2010-06-30 2014-09-30 Vitesse Semiconductor Corporation Packet protocol processing with precision timing protocol support
US9674318B2 (en) 2010-12-09 2017-06-06 Solarflare Communications, Inc. TCP processing for devices
US9600429B2 (en) 2010-12-09 2017-03-21 Solarflare Communications, Inc. Encapsulated accelerator
US8996644B2 (en) 2010-12-09 2015-03-31 Solarflare Communications, Inc. Encapsulated accelerator
US9008113B2 (en) 2010-12-20 2015-04-14 Solarflare Communications, Inc. Mapped FIFO buffering
US8605732B2 (en) 2011-02-15 2013-12-10 Extreme Networks, Inc. Method of providing virtual router functionality
US9384071B2 (en) 2011-03-31 2016-07-05 Solarflare Communications, Inc. Epoll optimisations
US9258390B2 (en) 2011-07-29 2016-02-09 Solarflare Communications, Inc. Reducing network latency
US8763018B2 (en) 2011-08-22 2014-06-24 Solarflare Communications, Inc. Modifying application behaviour
EP2574000A3 (en) 2011-09-22 2013-08-14 Solarflare Communication Inc Message acceleration
US9276851B1 (en) 2011-12-20 2016-03-01 Marvell Israel (M.I.S.L.) Ltd. Parser and modifier for processing network packets
US9170952B1 (en) * 2011-12-28 2015-10-27 Altera Corporation Configurable multi-standard device interface
US9282173B2 (en) 2012-02-17 2016-03-08 Viavi Solutions Inc. Reconfigurable packet header parsing
US9438502B2 (en) 2012-02-17 2016-09-06 Viavi Solutions Inc. Controlling generation of filtered result packets
US8693335B2 (en) * 2012-03-22 2014-04-08 Avaya Inc. Method and apparatus for control plane CPU overload protection
US9391840B2 (en) 2012-05-02 2016-07-12 Solarflare Communications, Inc. Avoiding delayed data
US9391841B2 (en) 2012-07-03 2016-07-12 Solarflare Communications, Inc. Fast linkup arbitration
US20140095785A1 (en) * 2012-09-28 2014-04-03 Broadcom Corporation Content Aware Block Power Savings
US9426124B2 (en) 2013-04-08 2016-08-23 Solarflare Communications, Inc. Locked down network interface
EP2809033B1 (en) 2013-05-30 2018-03-21 Solarflare Communications Inc Packet capture in a network
US9172721B2 (en) 2013-07-16 2015-10-27 Fortinet, Inc. Scalable inline behavioral DDOS attack mitigation
CN105794172A (en) * 2013-10-17 2016-07-20 马维尔国际贸易有限公司 Packet parsing and key generation in a network device
US20150195384A1 (en) * 2014-01-08 2015-07-09 Cavium, Inc. Packet parsing engine
US9513926B2 (en) * 2014-01-08 2016-12-06 Cavium, Inc. Floating mask generation for network packet flow

Citations (54)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6335935B1 (en) *
US5172374A (en) * 1989-07-06 1992-12-15 Alcatel Nv Access protocol for ultra-wide coherent optical local network for managing various kinds of traffic
US5452287A (en) * 1993-09-20 1995-09-19 Motorola, Inc. Method of negotiation of protocols, classes, and options in computer and communication networks providing mixed packet, frame, cell, and circuit services
US5497371A (en) * 1993-10-26 1996-03-05 Northern Telecom Limited Digital telecommunication link for efficiently transporting mixed classes of packets
US5511170A (en) * 1993-08-02 1996-04-23 Motorola, Inc. Digital bus data retention
US5541920A (en) * 1995-06-15 1996-07-30 Bay Networks, Inc. Method and apparatus for a delayed replace mechanism for a streaming packet modification engine
US5566170A (en) * 1994-12-29 1996-10-15 Storage Technology Corporation Method and apparatus for accelerated packet forwarding
US5598410A (en) * 1994-12-29 1997-01-28 Storage Technology Corporation Method and apparatus for accelerated packet processing
US5600598A (en) * 1994-12-14 1997-02-04 Mosaid Technologies Incorporated Memory cell and wordline driver for embedded DRAM in ASIC process
US5666353A (en) * 1995-03-21 1997-09-09 Cisco Systems, Inc. Frame based traffic policing for a digital switch
US5748905A (en) * 1996-08-30 1998-05-05 Fujitsu Network Communications, Inc. Frame classification using classification keys
US5764641A (en) * 1995-09-08 1998-06-09 Cisco Systems, Inc. Early and integrated tail packet discard system
US5812476A (en) * 1996-07-30 1998-09-22 Kawasaki Steel Corporation Refresh circuit for DRAM with three-transistor type memory cells
US5828654A (en) * 1992-02-06 1998-10-27 Hitachi, Ltd. ATM cell policing method and apparatus
US5896383A (en) * 1997-05-01 1999-04-20 Advanced Micro Devices, Inc. System and method for encoding instruction fields within data packets
US5901095A (en) * 1997-12-23 1999-05-04 Lsi Logic Corporation Reprogrammable address selector for an embedded DRAM
US5907511A (en) * 1997-12-23 1999-05-25 Lsi Logic Corporation Electrically selectable redundant components for an embedded DRAM
US5918002A (en) * 1997-03-14 1999-06-29 Microsoft Corporation Selective retransmission for efficient and reliable streaming of multimedia packets in a computer network
US5923596A (en) * 1996-12-24 1999-07-13 Mosaid Technologies Incorporated Precharge-enable self boosting word line driver for an embedded DRAM
US5926101A (en) * 1995-11-16 1999-07-20 Philips Electronics North America Corporation Method and apparatus for routing messages in a network of nodes with minimal resources
US5943481A (en) * 1997-05-07 1999-08-24 Advanced Micro Devices, Inc. Computer communication network having a packet processor with subsystems that are variably configured for flexible protocol handling
US5973952A (en) * 1998-03-30 1999-10-26 Lsi Logic Corporation Embedded DRAM with noise protecting shielding conductor
US5995439A (en) * 1996-03-08 1999-11-30 Hitachi, Ltd. Semiconductor IC device having a memory and a logic circuit implemented with a single chip
US6032190A (en) * 1997-10-03 2000-02-29 Ascend Communications, Inc. System and method for processing data packets
US6046979A (en) * 1998-05-04 2000-04-04 Cabletron Systems, Inc. Method and apparatus for controlling the flow of variable-length packets through a multiport switch
US6047002A (en) * 1997-01-16 2000-04-04 Advanced Micro Devices, Inc. Communication traffic circle system and method for performing packet conversion and routing between different packet formats including an instruction field
US6046980A (en) * 1996-12-09 2000-04-04 Packeteer, Inc. System for managing flow bandwidth utilization at network, transport and application layers in store and forward network
US6072989A (en) * 1996-10-23 2000-06-06 Alcatel Method to determine a scheduled rate value to be used in a policing algorithm, and related policing device
US6081524A (en) * 1997-07-03 2000-06-27 At&T Corp. Frame relay switched data service
US6136638A (en) * 1998-11-19 2000-10-24 Taiwan Semiconductor Manufacturing Company Process technology architecture of embedded DRAM
US6141686A (en) * 1998-03-13 2000-10-31 Deterministic Networks, Inc. Client-side application-classifier gathering network-traffic statistics and application and user names using extensible-service provider plugin for policy-based network control
US6166403A (en) * 1997-11-12 2000-12-26 Lsi Logic Corporation Integrated circuit having embedded memory with electromagnetic shield
US6167445A (en) * 1998-10-26 2000-12-26 Cisco Technology, Inc. Method and apparatus for defining and implementing high-level quality of service policies in computer networks
US6175568B1 (en) * 1997-12-16 2001-01-16 Nortel Networks Limited ABR policing method and apparatus
US6259699B1 (en) * 1997-12-30 2001-07-10 Nexabit Networks, Llc System architecture for and method of processing packets and/or cells in a common switch
US20010007560A1 (en) * 2000-01-11 2001-07-12 Michio Masuda Multi-layer class identifying communication apparatus with priority control
US20010033552A1 (en) * 2000-02-24 2001-10-25 Barrack Craig I. Credit-based pacing scheme for heterogeneous speed frame forwarding
US20010048661A1 (en) * 2000-05-24 2001-12-06 David Clear Method and apparatus for multi-protocol redundant router protocol support
US6335935B2 (en) * 1998-07-08 2002-01-01 Broadcom Corporation Network switching architecture with fast filtering processor
US20020075803A1 (en) * 2000-12-18 2002-06-20 John Zaharychuk Method and apparatus for dynamic optimization of a multi-service access device
US20020080780A1 (en) * 2000-08-10 2002-06-27 Mccormick James S. Buffering system for use in a communication switch that includes a multiprocessor control block and method therefore
US20020097677A1 (en) * 2001-01-25 2002-07-25 Hoar Andrew V. Dual use rate policer and re-marking logic
US20020116527A1 (en) * 2000-12-21 2002-08-22 Jin-Ru Chen Lookup engine for network devices
US6453360B1 (en) * 1999-03-01 2002-09-17 Sun Microsystems, Inc. High performance network interface
US20020136230A1 (en) * 2000-12-15 2002-09-26 Dell Martin S. Scheduler for a packet routing and switching system
US20020141427A1 (en) * 2001-03-29 2002-10-03 Mcalpine Gary L. Method and apparatus for a traffic optimizing multi-stage switch fabric network
US20020196796A1 (en) * 1998-07-08 2002-12-26 Shekhar Ambe Fast flexible filter processor based architecture for a network device
US20030021230A1 (en) * 2001-03-09 2003-01-30 Petaswitch Solutions, Inc. Switch fabric with bandwidth efficient flow control
US20030046429A1 (en) * 2001-08-30 2003-03-06 Sonksen Bradley Stephen Static data item processing
US20030112756A1 (en) * 2001-12-17 2003-06-19 Louis Le Gouriellec Conditional bandwidth subscriptions for multiprotocol label switching (MPLS) label switched paths (LSPs)
US20030118029A1 (en) * 2000-08-31 2003-06-26 Maher Robert Daniel Method and apparatus for enforcing service level agreements
US20040125815A1 (en) * 2002-06-24 2004-07-01 Mikio Shimazu Packet transmission apparatus and method thereof, traffic conditioner, priority control mechanism and packet shaper
US20040199630A1 (en) * 1999-06-30 2004-10-07 Sarkissian Haig A. State processor for pattern matching in a network monitor device
US6968554B1 (en) * 2000-10-03 2005-11-22 Network General Technology Multi-layer protocol reassembly that operates independently of underlying protocols, and resulting vector list corresponding thereto

Family Cites Families (75)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5231633A (en) 1990-07-11 1993-07-27 Codex Corporation Method for prioritizing, selectively discarding, and multiplexing differing traffic type fast packets
US5260935A (en) 1991-03-01 1993-11-09 Washington University Data packet resequencer for a high speed data switch
US5231663A (en) 1991-03-18 1993-07-27 Earl Joseph G Image processing system
US5268900A (en) 1991-07-05 1993-12-07 Codex Corporation Device and method for implementing queueing disciplines at high speeds
US5455825A (en) 1994-04-28 1995-10-03 Mitsubishi Electric Research Laboratories Tag-based scheduling system for digital communication switch
DE69430627T2 (en) 1994-06-28 2002-10-17 Hewlett Packard Co Method and apparatus for planning of cells transmitting virtual channels with guaranteed bandwidth
US5629936A (en) 1994-08-01 1997-05-13 University Of Iowa Research Foundation Inc. Control of consecutive packet loss in a packet buffer
US5570360A (en) 1995-03-20 1996-10-29 Stratacom, Inc. Method and apparatus for implementing communication service contract using cell arrival information
US5774067A (en) 1995-06-07 1998-06-30 International Business Machines Corporation Flash-flooding multi-stage interconnection network with parallel path seeking switching elements
US5781531A (en) 1995-12-27 1998-07-14 Digital Equipment Corporation Method and apparatus for hierarchical relative error scheduling
US6130878A (en) 1995-12-27 2000-10-10 Compaq Computer Corporation Method and apparatus for rate-based scheduling using a relative error approach
US5689500A (en) 1996-01-16 1997-11-18 Lucent Technologies, Inc. Multistage network having multicast routing congestion feedback
US5870629A (en) 1996-03-21 1999-02-09 Bay Networks, Inc. System for servicing plurality of queues responsive to queue service policy on a service sequence ordered to provide uniform and minimal queue interservice times
EP0798897A3 (en) 1996-03-26 1999-07-14 Digital Equipment Corporation Method and apparatus for relative error scheduling using discrete rates and proportional rate scaling
US6021116A (en) 1996-03-28 2000-02-01 Lucent Technologies, Inc. Method and apparatus for controlling data transfer rate using virtual queues in asynchronous transfer mode networks
US6018527A (en) 1996-08-13 2000-01-25 Nortel Networks Corporation Queue service interval based cell scheduler with hierarchical queuing configurations
US5923656A (en) 1996-10-22 1999-07-13 Board Of Trustees Of The University Of Illinois Scalable broad band input-queued ATM switch including weight driven cell scheduler
JPH10126419A (en) 1996-10-23 1998-05-15 Nec Corp Atm exchange system
US5870396A (en) 1996-12-31 1999-02-09 Northern Telecom Limited Output queueing in a broadband multi-media satellite and terrestrial communications network
JP2001519120A (en) 1997-04-04 2001-10-16 アセンド コミュニケーションズ インコーポレイテッド Hierarchical Packet scheduling method and apparatus
US5864540A (en) 1997-04-04 1999-01-26 At&T Corp/Csi Zeinet(A Cabletron Co.) Method for integrated traffic shaping in a packet-switched network
US6031835A (en) 1997-04-04 2000-02-29 International Business Machines Corporation Method for deadlock free and and reliable routing in a packet switched network
US6192406B1 (en) 1997-06-13 2001-02-20 At&T Corp. Startup management system and method for networks
US6021132A (en) 1997-06-30 2000-02-01 Sun Microsystems, Inc. Shared memory management in a switched network element
US6006264A (en) 1997-08-01 1999-12-21 Arrowpoint Communications, Inc. Method and system for directing a flow between a client and a server
US6072800A (en) 1997-08-18 2000-06-06 Nec Usa, Inc. Weighted longest queue first adaptive scheduling discipline for ATM networks
US6104700A (en) 1997-08-29 2000-08-15 Extreme Networks Policy based quality of service
US6538989B1 (en) 1997-09-09 2003-03-25 British Telecommunications Public Limited Company Packet network
US6147970A (en) 1997-09-30 2000-11-14 Gte Internetworking Incorporated Quality of service management for aggregated flows in a network system
US5878229A (en) 1997-11-12 1999-03-02 International Business Machines Corporation Maintaining frame sequence in a multiprocessor network device
US6052375A (en) 1997-11-26 2000-04-18 International Business Machines Corporation High speed internetworking traffic scaler and shaper
US6118761A (en) 1997-12-18 2000-09-12 Advanced Micro Devices, Inc. Apparatus and method for generating rate control frames in a workgroup switch based on traffic contribution from a network switch port
US6046002A (en) 1998-01-05 2000-04-04 The Board Of Trustees Of The Leland Stanford Junior University Highly parallel and sensitive method for identifying drugs and drug targets
US6185635B1 (en) 1998-05-30 2001-02-06 Alcatel Networks Corporation Method and circuit for transporting data based on the content of ingress data words and egress data words
US6320864B1 (en) 1998-06-19 2001-11-20 Ascend Communications, Inc. Logical multicasting method and apparatus
US6333917B1 (en) 1998-08-19 2001-12-25 Nortel Networks Limited Method and apparatus for red (random early detection) and enhancements.
KR100333250B1 (en) 1998-10-05 2002-05-17 가나이 쓰토무 Packet forwarding apparatus with a flow detection table
US6141355A (en) 1998-11-06 2000-10-31 Path 1 Network Technologies, Inc. Time-synchronized multi-layer network switch for providing quality of service guarantees in computer networks
US6608816B1 (en) 1998-11-18 2003-08-19 Nortel Networks Limited Method and apparatus for providing differentiated services using a multi-level queuing mechanism
US6286052B1 (en) 1998-12-04 2001-09-04 Cisco Technology, Inc. Method and apparatus for identifying network data traffic flows and for applying quality of service treatments to the flows
US6542490B1 (en) 1999-01-29 2003-04-01 Nortel Networks Limited Data link control proctocol for 3G wireless system
US6721271B1 (en) 1999-02-04 2004-04-13 Nortel Networks Limited Rate-controlled multi-class high-capacity packet switch
DE69926599D1 (en) 1999-02-16 2005-09-15 Alcatel Sa Method and device to regulate the data traffic
JP3766223B2 (en) 1999-02-18 2006-04-12 富士通株式会社 Boundary apparatus and method Connection Setup
US6594268B1 (en) 1999-03-11 2003-07-15 Lucent Technologies Inc. Adaptive routing system and method for QOS packet networks
US6768717B1 (en) 1999-05-28 2004-07-27 Network Equipment Technologies, Inc. Apparatus and method for traffic shaping in a network switch
US6795470B1 (en) 1999-06-09 2004-09-21 Science Applications International Corporation Semiconductor laser light source with photocurrent feedback control for single mode operation
US6449656B1 (en) 1999-07-30 2002-09-10 Intel Corporation Storing a frame header
US6430154B1 (en) 1999-08-13 2002-08-06 Fujitsu Network Communications, Inc. Supporting multiple application traffic types over connection oriented networks
US6606317B1 (en) 1999-09-09 2003-08-12 Harris Corporation Dual key controlled content addressable memory for accessing packet switch data buffer for multicasting data packets
US6728253B1 (en) 1999-09-24 2004-04-27 International Business Machines Corporation Mixed queue scheduler
US6772325B1 (en) 1999-10-01 2004-08-03 Hitachi, Ltd. Processor architecture and operation for exploiting improved branch control instruction
US6757249B1 (en) 1999-10-14 2004-06-29 Nokia Inc. Method and apparatus for output rate regulation and control associated with a packet pipeline
US6934250B1 (en) 1999-10-14 2005-08-23 Nokia, Inc. Method and apparatus for an output packet organizer
US6687247B1 (en) 1999-10-27 2004-02-03 Cisco Technology, Inc. Architecture for high speed class of service enabled linecard
JP3565121B2 (en) 1999-12-15 2004-09-15 日本電気株式会社 Packet switch and a packet switching method
US6798746B1 (en) 1999-12-18 2004-09-28 Cisco Technology, Inc. Method and apparatus for implementing a quality of service policy in a data communications network
US7116680B1 (en) 2000-03-02 2006-10-03 Agere Systems Inc. Processor architecture and a method of processing
EP1361690B1 (en) 2000-03-02 2006-01-11 Matsushita Electric Industrial Co., Ltd. Method and apparatus for retransmitting data packets based on channel conditions
DE60128413D1 (en) 2000-03-02 2007-06-28 Alcatel Lucent Featured priority queue scheduler
US7215637B1 (en) 2000-04-17 2007-05-08 Juniper Networks, Inc. Systems and methods for processing packets
US6826147B1 (en) 2000-07-25 2004-11-30 Nortel Networks Limited Method and apparatus for aggregate flow control in a differentiated services network
WO2002032052A3 (en) 2000-10-10 2002-11-28 Univ California Method for maintaining reservation state in a network router
US7149187B1 (en) 2000-12-28 2006-12-12 Cisco Technology, Inc. Random early detection policer using randomization of packet drops
US6947996B2 (en) 2001-01-29 2005-09-20 Seabridge, Ltd. Method and system for traffic control
US7342942B1 (en) 2001-02-07 2008-03-11 Cortina Systems, Inc. Multi-service segmentation and reassembly device that maintains only one reassembly context per active output port
US6996062B1 (en) 2001-02-28 2006-02-07 3Com Corporation Policy-based weighted random early detection method for avoiding congestion in internet traffic
US7042848B2 (en) 2001-05-04 2006-05-09 Slt Logic Llc System and method for hierarchical policing of flows and subflows of a data stream
US6904057B2 (en) 2001-05-04 2005-06-07 Slt Logic Llc Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification
US6901052B2 (en) 2001-05-04 2005-05-31 Slt Logic Llc System and method for policing multiple data flows and multi-protocol data flows
US6944168B2 (en) 2001-05-04 2005-09-13 Slt Logic Llc System and method for providing transformation of multi-protocol packets in a data stream
US7151744B2 (en) 2001-09-21 2006-12-19 Slt Logic Llc Multi-service queuing method and apparatus that provides exhaustive arbitration, load balancing, and support for rapid port failover
US7099275B2 (en) 2001-09-21 2006-08-29 Slt Logic Llc Programmable multi-service queue scheduler
US6934168B2 (en) * 2003-02-27 2005-08-23 International Rectifier Corporation Single stage PFC and power converter unit
US7272675B1 (en) * 2003-05-08 2007-09-18 Cypress Semiconductor Corporation First-in-first-out (FIFO) memory for buffering packet fragments through use of read and write pointers incremented by a unit access and a fraction of the unit access

Patent Citations (54)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6335935B1 (en) *
US5172374A (en) * 1989-07-06 1992-12-15 Alcatel Nv Access protocol for ultra-wide coherent optical local network for managing various kinds of traffic
US5828654A (en) * 1992-02-06 1998-10-27 Hitachi, Ltd. ATM cell policing method and apparatus
US5511170A (en) * 1993-08-02 1996-04-23 Motorola, Inc. Digital bus data retention
US5452287A (en) * 1993-09-20 1995-09-19 Motorola, Inc. Method of negotiation of protocols, classes, and options in computer and communication networks providing mixed packet, frame, cell, and circuit services
US5497371A (en) * 1993-10-26 1996-03-05 Northern Telecom Limited Digital telecommunication link for efficiently transporting mixed classes of packets
US5600598A (en) * 1994-12-14 1997-02-04 Mosaid Technologies Incorporated Memory cell and wordline driver for embedded DRAM in ASIC process
US5598410A (en) * 1994-12-29 1997-01-28 Storage Technology Corporation Method and apparatus for accelerated packet processing
US5566170A (en) * 1994-12-29 1996-10-15 Storage Technology Corporation Method and apparatus for accelerated packet forwarding
US5666353A (en) * 1995-03-21 1997-09-09 Cisco Systems, Inc. Frame based traffic policing for a digital switch
US5541920A (en) * 1995-06-15 1996-07-30 Bay Networks, Inc. Method and apparatus for a delayed replace mechanism for a streaming packet modification engine
US5764641A (en) * 1995-09-08 1998-06-09 Cisco Systems, Inc. Early and integrated tail packet discard system
US5926101A (en) * 1995-11-16 1999-07-20 Philips Electronics North America Corporation Method and apparatus for routing messages in a network of nodes with minimal resources
US5995439A (en) * 1996-03-08 1999-11-30 Hitachi, Ltd. Semiconductor IC device having a memory and a logic circuit implemented with a single chip
US5812476A (en) * 1996-07-30 1998-09-22 Kawasaki Steel Corporation Refresh circuit for DRAM with three-transistor type memory cells
US5748905A (en) * 1996-08-30 1998-05-05 Fujitsu Network Communications, Inc. Frame classification using classification keys
US6072989A (en) * 1996-10-23 2000-06-06 Alcatel Method to determine a scheduled rate value to be used in a policing algorithm, and related policing device
US6046980A (en) * 1996-12-09 2000-04-04 Packeteer, Inc. System for managing flow bandwidth utilization at network, transport and application layers in store and forward network
US5923596A (en) * 1996-12-24 1999-07-13 Mosaid Technologies Incorporated Precharge-enable self boosting word line driver for an embedded DRAM
US6047002A (en) * 1997-01-16 2000-04-04 Advanced Micro Devices, Inc. Communication traffic circle system and method for performing packet conversion and routing between different packet formats including an instruction field
US5918002A (en) * 1997-03-14 1999-06-29 Microsoft Corporation Selective retransmission for efficient and reliable streaming of multimedia packets in a computer network
US5896383A (en) * 1997-05-01 1999-04-20 Advanced Micro Devices, Inc. System and method for encoding instruction fields within data packets
US5943481A (en) * 1997-05-07 1999-08-24 Advanced Micro Devices, Inc. Computer communication network having a packet processor with subsystems that are variably configured for flexible protocol handling
US6081524A (en) * 1997-07-03 2000-06-27 At&T Corp. Frame relay switched data service
US6032190A (en) * 1997-10-03 2000-02-29 Ascend Communications, Inc. System and method for processing data packets
US6166403A (en) * 1997-11-12 2000-12-26 Lsi Logic Corporation Integrated circuit having embedded memory with electromagnetic shield
US6175568B1 (en) * 1997-12-16 2001-01-16 Nortel Networks Limited ABR policing method and apparatus
US5907511A (en) * 1997-12-23 1999-05-25 Lsi Logic Corporation Electrically selectable redundant components for an embedded DRAM
US5901095A (en) * 1997-12-23 1999-05-04 Lsi Logic Corporation Reprogrammable address selector for an embedded DRAM
US6259699B1 (en) * 1997-12-30 2001-07-10 Nexabit Networks, Llc System architecture for and method of processing packets and/or cells in a common switch
US6141686A (en) * 1998-03-13 2000-10-31 Deterministic Networks, Inc. Client-side application-classifier gathering network-traffic statistics and application and user names using extensible-service provider plugin for policy-based network control
US5973952A (en) * 1998-03-30 1999-10-26 Lsi Logic Corporation Embedded DRAM with noise protecting shielding conductor
US6046979A (en) * 1998-05-04 2000-04-04 Cabletron Systems, Inc. Method and apparatus for controlling the flow of variable-length packets through a multiport switch
US6335935B2 (en) * 1998-07-08 2002-01-01 Broadcom Corporation Network switching architecture with fast filtering processor
US20020196796A1 (en) * 1998-07-08 2002-12-26 Shekhar Ambe Fast flexible filter processor based architecture for a network device
US6167445A (en) * 1998-10-26 2000-12-26 Cisco Technology, Inc. Method and apparatus for defining and implementing high-level quality of service policies in computer networks
US6136638A (en) * 1998-11-19 2000-10-24 Taiwan Semiconductor Manufacturing Company Process technology architecture of embedded DRAM
US6453360B1 (en) * 1999-03-01 2002-09-17 Sun Microsystems, Inc. High performance network interface
US20040199630A1 (en) * 1999-06-30 2004-10-07 Sarkissian Haig A. State processor for pattern matching in a network monitor device
US20010007560A1 (en) * 2000-01-11 2001-07-12 Michio Masuda Multi-layer class identifying communication apparatus with priority control
US20010033552A1 (en) * 2000-02-24 2001-10-25 Barrack Craig I. Credit-based pacing scheme for heterogeneous speed frame forwarding
US20010048661A1 (en) * 2000-05-24 2001-12-06 David Clear Method and apparatus for multi-protocol redundant router protocol support
US20020080780A1 (en) * 2000-08-10 2002-06-27 Mccormick James S. Buffering system for use in a communication switch that includes a multiprocessor control block and method therefore
US20030118029A1 (en) * 2000-08-31 2003-06-26 Maher Robert Daniel Method and apparatus for enforcing service level agreements
US6968554B1 (en) * 2000-10-03 2005-11-22 Network General Technology Multi-layer protocol reassembly that operates independently of underlying protocols, and resulting vector list corresponding thereto
US20020136230A1 (en) * 2000-12-15 2002-09-26 Dell Martin S. Scheduler for a packet routing and switching system
US20020075803A1 (en) * 2000-12-18 2002-06-20 John Zaharychuk Method and apparatus for dynamic optimization of a multi-service access device
US20020116527A1 (en) * 2000-12-21 2002-08-22 Jin-Ru Chen Lookup engine for network devices
US20020097677A1 (en) * 2001-01-25 2002-07-25 Hoar Andrew V. Dual use rate policer and re-marking logic
US20030021230A1 (en) * 2001-03-09 2003-01-30 Petaswitch Solutions, Inc. Switch fabric with bandwidth efficient flow control
US20020141427A1 (en) * 2001-03-29 2002-10-03 Mcalpine Gary L. Method and apparatus for a traffic optimizing multi-stage switch fabric network
US20030046429A1 (en) * 2001-08-30 2003-03-06 Sonksen Bradley Stephen Static data item processing
US20030112756A1 (en) * 2001-12-17 2003-06-19 Louis Le Gouriellec Conditional bandwidth subscriptions for multiprotocol label switching (MPLS) label switched paths (LSPs)
US20040125815A1 (en) * 2002-06-24 2004-07-01 Mikio Shimazu Packet transmission apparatus and method thereof, traffic conditioner, priority control mechanism and packet shaper

Cited By (49)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7822048B2 (en) 2001-05-04 2010-10-26 Slt Logic Llc System and method for policing multiple data flows and multi-protocol data flows
US20060159019A1 (en) * 2001-05-04 2006-07-20 Slt Logic Llc System and method for policing multiple data flows and multi-protocol data flows
US20090213856A1 (en) * 2001-05-04 2009-08-27 Slt Logic Llc System and Method for Providing Transformation of Multi-Protocol Packets in a Data Stream
US7978606B2 (en) 2001-05-04 2011-07-12 Slt Logic, Llc System and method for policing multiple data flows and multi-protocol data flows
US20030118022A1 (en) * 2001-12-21 2003-06-26 Chip Engines Reconfigurable data packet header processor
US7496035B1 (en) * 2003-01-31 2009-02-24 Cisco Technology, Inc. Methods and apparatus for defining flow types and instances thereof such as for identifying packets corresponding to instances of the flow types
US20140081699A1 (en) * 2004-02-13 2014-03-20 Fis Financial Compliance Solutions, Llc Systems and methods for monitoring and detecting fraudulent uses of business applications
US20060031555A1 (en) * 2004-08-05 2006-02-09 Somsubhra Sikdar Data context switching in a semantic processor
US7570661B2 (en) * 2005-06-14 2009-08-04 Microsoft Corporation Script-based parser
US20060280178A1 (en) * 2005-06-14 2006-12-14 Microsoft Corporation Script-based parser
US20070047457A1 (en) * 2005-08-29 2007-03-01 Harijono Indra G Method and system for reassembling packets prior to searching
US7486673B2 (en) * 2005-08-29 2009-02-03 Connect Technologies Corporation Method and system for reassembling packets prior to searching
US20100067538A1 (en) * 2006-10-25 2010-03-18 Zhigang Zhang Method and system for frame classification
US8761015B2 (en) * 2006-10-25 2014-06-24 Thomson Licensing Method and system for frame classification
KR101340939B1 (en) * 2006-10-25 2014-01-14 톰슨 라이센싱 Method and system for frame classification
WO2008049270A1 (en) * 2006-10-25 2008-05-02 Thomson Licensing Method and system for frame classification
US20130016729A1 (en) * 2007-07-11 2013-01-17 Commex Technologies, Ltd. Systems and Methods For Efficient Handling of Data Traffic and Processing Within a Processing Device
US9268729B2 (en) * 2007-07-11 2016-02-23 Commex Technologies, Ltd. Systems and methods for efficient handling of data traffic and processing within a processing device
US9602577B2 (en) 2010-08-12 2017-03-21 Citrix Systems, Inc. Systems and methods for quality of service of ICA published applications
US8638795B2 (en) 2010-08-12 2014-01-28 Citrix Systems, Inc. Systems and methods for quality of service of encrypted network traffic
US20120039332A1 (en) * 2010-08-12 2012-02-16 Steve Jackowski Systems and methods for multi-level quality of service classification in an intermediary device
US8792491B2 (en) * 2010-08-12 2014-07-29 Citrix Systems, Inc. Systems and methods for multi-level quality of service classification in an intermediary device
US9294378B2 (en) 2010-08-12 2016-03-22 Citrix Systems, Inc. Systems and methods for quality of service of encrypted network traffic
US8990380B2 (en) 2010-08-12 2015-03-24 Citrix Systems, Inc. Systems and methods for quality of service of ICA published applications
US9071542B2 (en) 2010-08-12 2015-06-30 Citrix Systems, Inc. Systems and methods for multi-level quality of service classification in an intermediary device
US8799188B2 (en) * 2011-02-08 2014-08-05 International Business Machines Corporation Algorithm engine for use in a pattern matching accelerator
US20120203718A1 (en) * 2011-02-08 2012-08-09 International Business Machines Corporation Algorithm engine for use in a pattern matching accelerator
US9866540B2 (en) 2011-08-02 2018-01-09 Cavium, Inc. System and method for rule matching in a processor
US9596222B2 (en) 2011-08-02 2017-03-14 Cavium, Inc. Method and apparatus encoding a rule for a lookup request in a processor
US9344366B2 (en) 2011-08-02 2016-05-17 Cavium, Inc. System and method for rule matching in a processor
US9930150B2 (en) * 2013-09-16 2018-03-27 Amazon Technologies, Inc. Configurable parser and a method for parsing information units
US20170104852A1 (en) * 2013-09-16 2017-04-13 Amazon Technologies, Inc. Configurable parser and a method for parsing information units
US9825884B2 (en) 2013-12-30 2017-11-21 Cavium, Inc. Protocol independent programmable switch (PIPS) software defined data center networks
US9544402B2 (en) * 2013-12-31 2017-01-10 Cavium, Inc. Multi-rule approach to encoding a group of rules
US9275336B2 (en) 2013-12-31 2016-03-01 Cavium, Inc. Method and system for skipping over group(s) of rules based on skip group rule
US20150189046A1 (en) * 2013-12-31 2015-07-02 Cavium, Inc. Multi-rule approach to encoding a group of rules
US9667446B2 (en) 2014-01-08 2017-05-30 Cavium, Inc. Condition code approach for comparing rule and packet data that are provided in portions
CN103957139A (en) * 2014-05-09 2014-07-30 天津市德力电子仪器有限公司 Ten-Gigabit Ethernet frame analyzing method based on FPGA
US9531848B2 (en) 2014-06-19 2016-12-27 Cavium, Inc. Method of using generic modification instructions to enable flexible modifications of packets and an apparatus thereof
US9497294B2 (en) 2014-06-19 2016-11-15 Cavium, Inc. Method of using a unique packet identifier to identify structure of a packet and an apparatus thereof
US20150373165A1 (en) * 2014-06-19 2015-12-24 Xpliant, Inc. Method of handling large protocol layers for configurable extraction of layer information and an apparatus thereof
US9473601B2 (en) 2014-06-19 2016-10-18 Cavium, Inc. Method of representing a generic format header using continuous bytes and an apparatus thereof
US9438703B2 (en) 2014-06-19 2016-09-06 Cavium, Inc. Method of forming a hash input from packet contents and an apparatus thereof
US9635146B2 (en) 2014-06-19 2017-04-25 Cavium, Inc. Method of using bit vectors to allow expansion and collapse of header layers within packets for enabling flexible modifications and an apparatus thereof
US9516145B2 (en) 2014-06-19 2016-12-06 Cavium, Inc. Method of extracting data from packets and an apparatus thereof
US9742694B2 (en) 2014-06-19 2017-08-22 Cavium, Inc. Method of dynamically renumbering ports and an apparatus thereof
US9531849B2 (en) 2014-06-19 2016-12-27 Cavium, Inc. Method of splitting a packet into individual layers for modification and intelligently stitching layers back together after modification and an apparatus thereof
US9628385B2 (en) 2014-06-19 2017-04-18 Cavium, Inc. Method of identifying internal destinations of networks packets and an apparatus thereof
US9606781B2 (en) 2014-11-14 2017-03-28 Cavium, Inc. Parser engine programming tool for programmable network devices

Also Published As

Publication number Publication date Type
US7835375B2 (en) 2010-11-16 grant
US20080151935A1 (en) 2008-06-26 application
US20020163909A1 (en) 2002-11-07 application
US6904057B2 (en) 2005-06-07 grant

Similar Documents

Publication Publication Date Title
US6633565B1 (en) Apparatus for and method of flow switching in a data communications network
US7225188B1 (en) System and method for performing regular expression matching with high parallelism
US6466976B1 (en) System and method for providing desired service policies to subscribers accessing the internet
US5479401A (en) ATM cell interface and method for dispatching an ATM cell
US6532229B1 (en) Low cost link aggregation method and system
US5598410A (en) Method and apparatus for accelerated packet processing
US7218632B1 (en) Packet processing engine architecture
US6628652B1 (en) Flexible telecommunications switching network
US6208649B1 (en) Derived VLAN mapping technique
US6172980B1 (en) Multiple protocol support
US6980552B1 (en) Pipelined packet switching and queuing architecture
US6874016B1 (en) Information searching device
US5699521A (en) Communication system and communication method
US20130163427A1 (en) System for flexible and extensible flow processing in software-defined networks
US6760776B1 (en) Method and apparatus for processing network frames in a network processor by embedding network control information such as routing and filtering information in each received frame
US6507577B1 (en) Voice over internet protocol network architecture
US6674760B1 (en) Method and system for implementing end-to-end QoS in packet-switched networks
US6975631B1 (en) Network packet forwarding lookup with a reduced number of memory accesses
US6766381B1 (en) VLSI network processor and methods
US6381242B1 (en) Content processor
US6490292B1 (en) Router apparatus and frame transfer method
US7730521B1 (en) Authentication device initiated lawful intercept of network traffic
US6415313B1 (en) Communication quality control system
US6473434B1 (en) Scaleable and robust solution for reducing complexity of resource identifier distribution in a large network processor-based system
US6160811A (en) Data packet router

Legal Events

Date Code Title Description
AS Assignment

Owner name: RPX CORPORATION, CALIFORNIA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:SLT LOGIC LLC;REEL/FRAME:026867/0191

Effective date: 20110826