METHOD AND SYSTEM FOR UNIDIRECTIONAL PACKET PROCESSING AT DATA LINK LAYER
First Claim
1. A system for unidirectionaly processing packets at data link layer, said system comprising:
- two or more network ports, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
said system using shared memory to register MAC addresses of the network nodes at each said system ports;
said system using shared memory for signaling between processes.
0 Assignments
0 Petitions
Accused Products
Abstract
A method and system for data link layer packet processing which unidirectionaly captures, filters, enqueues, processes and forwards packets between multiple network interfaces are introduced. Fast and intelligent data link layer network applications or equipment can implemented by programming the invention. Each direction of packet flow in this system is independently processed from others. This feature provides very flexible packet processing and very fast packet forwarding since each flow can be implemented in an isolated process, application or a device. As the system operates at OSI model'"'"'s data link layer (e.g. Ethernet), installing the system into a functional network does not require any change in the configuration of network applications or equipment. This system can be utilized for employing various networking functions such as network emulation, bridging, firewall, virus detection, bandwidth management, traffic monitoring and in-line intrusion detection, etc.
-
Citations
24 Claims
-
1. A system for unidirectionaly processing packets at data link layer, said system comprising:
- two or more network ports, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
said system using shared memory to register MAC addresses of the network nodes at each said system ports;
said system using shared memory for signaling between processes. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23, 24)
- two or more network ports, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
-
10. A method for unidirectionaly processing packets at data link layer, said method comprising:
- two or more network interfaces, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
said method using shared memory to register MAC addresses of the network nodes at each said method interfaces;
said method using shared memory for signaling between processes.
- two or more network interfaces, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
-
16. A computer program product for unidirectionaly processing packets at data link layer, said computer program product comprising:
- two or more network ports, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
said computer program product using shared memory to register MAC addresses of the network nodes at each said ports;
said computer program product using shared memory for signaling between processes.
- two or more network ports, and two or more processes that can perform any combinations of promiscuous packet capturing, filtering, enqueuing, packet processing and forwarding functions on each direction of the traffic;
Specification