Classification search scheme and rules engine for network unit
First Claim
1. A classification search apparatus for a network unit which is operative to receive and forward addressed data packets, comprising:
- a temporary store for a segment of data relating to a received packet;
a store for classification rules at least some of which include a field of reference data and an operating code, said operating code defining a starting location in said segment for a packet data field to be compared with said reference data; and
a rules engine for applying a multiplicity of said classification rules for successive application to said segment of data.
1 Assignment
0 Petitions
Accused Products
Abstract
A classification search engine for the application of classification rules to a data packet comprises a rules engine for applying a succession of rules, each rule including an operating code. At least some rules are each a single rule of which the operating code specifies a respective portion of the packet, such as a longword, for the extraction of data for the application of the respective rule. Each single rule includes a mask field for controlling the application of the single rule to the data. Other rules are multiple rules of which the operating codes identifies the rule as a multiple rule and which includes a mask for controlling the application of the multiple rule to the results of the application of a multiplicity of single rules to the packet. The operating code for a single rule specifies a pre-determined packet type and a decoder will determine whether a packet conforms to this type (which may be specific or generic) before allowing the application of the rule to the packet.
-
Citations
18 Claims
-
1. A classification search apparatus for a network unit which is operative to receive and forward addressed data packets, comprising:
-
a temporary store for a segment of data relating to a received packet;
a store for classification rules at least some of which include a field of reference data and an operating code, said operating code defining a starting location in said segment for a packet data field to be compared with said reference data; and
a rules engine for applying a multiplicity of said classification rules for successive application to said segment of data. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A classification search engine for the application of classification rules to a data segment, comprising:
a rules engine for applying a succession of rules, each rule including an operating code, wherein;
at least some of said rules are each a single rule of which the operating code specifies a portion of said data segment for the extraction of data for the application of the respective rule, each single rule including a mask field for controlling the application of the single rule to said data segment; and
at least one rule is a multiple rule of which the operating code identifies the rule as a multiple rule and which includes a mask for controlling the application of the multiple rule to the results of the application of a multiplicity of single rules to the packet. - View Dependent Claims (11, 12, 13)
-
14. A classification search engine for the application of classification rules to a data segment including data from a data packet, comprising:
a rules engine for applying a succession of rules, each rule comprising an operating code, wherein;
at least some rules are each a single rule of which the operating code (a) identifies a predetermined packet type; and
(b) specifies in accordance with said predetermined packet type a data field in said data segment for the extraction of data for the application of the respective rule, each single rule including a mask field for controlling the application of the single rule to said data field - View Dependent Claims (15, 16, 17, 18)
Specification