Fast network layer packet filter

Details Fast network layer packet filter Fast network layer packet filter

1996-06-24

2000-11-14

Pham, Chi H.

Multiplex communications

Network configuration determination

370392, 370401, H04L 1228, H04L 1266

Patent

active

061479764

ABSTRACT:
A new packet filtering system associates domain identifiers with respective sets of addresses. A set of domain prefixes defines the set of addresses associated with a given domain identifier. Domain prefixes are found matching the source address and destination address of each received packet. These prefixes are associated with a source domain identifier and destination domain identifier respectively. The system similarly associates sets of one or more protocol types and port ranges with respective protocol domain identifiers. The protocol type, source port and destination port of the received packet determine source and destination protocol domain identifiers for the received packet. The system includes a filtering matrix including one or more entries, each indicating whether an associated received packed should be filtered. The source domain identifier, destination domain identifier, and source and destination protocol domain identifiers are used to index into the filtering matrix, for example using each as an index into one of the dimensions of a four dimensional array used to implement the filtering matrix. In an alternative embodiment, the source and destination protocol identifiers are used to obtain a protocol index from a protocol vector data structure. The protocol index, source domain identifier and destination identifier are then used to index into a three dimensional filtering matrix. The system further optimizes the filtering matrix for size, and the lookup time is dependent only on the number of filtering domains, and not the complexity or number of filtering rules.

REFERENCES:
patent: 5136580 (1992-08-01), Videlock et al.
patent: 5313465 (1994-05-01), Perlman et al.
patent: 5327426 (1994-07-01), Dolin, Jr. et al.
patent: 5425026 (1995-06-01), Mori
patent: 5455865 (1995-10-01), Perlman
patent: 5475823 (1995-12-01), Amerson et al.
patent: 5519858 (1996-05-01), Walton et al.
patent: 5590285 (1996-12-01), Krause et al.
patent: 5617421 (1997-04-01), Chin et al.
patent: 5619498 (1997-04-01), Sharpe
patent: 5623601 (1997-04-01), Vu
patent: 5644571 (1997-07-01), Seaman
patent: 5657314 (1997-08-01), McClure et al.
patent: 5802043 (1998-09-01), Skillen et al.

Affiliated with

Also associated with

Rating

Fast network layer packet filter does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Fast network layer packet filter, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Fast network layer packet filter will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2072270