Data stream protocol prioritized analysis
First Claim
1. A method for performing protocol analysis on network data, the method comprising:
- receiving network data representing at least a portion of a data stream transmitted in a network at a network processor;
distributing the network data to a plurality of memory buffers connected with a plurality of analysis processors such that each packet of a particular transaction is distributed to the same analysis processor, wherein each memory buffer generates a status signal indicating a fullness of the memory buffer;
assigning a priority to each of a plurality of protocol analysis tests; and
performing selected protocol analysis tests based on the priority when the status signal is above a threshold level.
1 Assignment
0 Petitions
Accused Products
Abstract
Methods and apparatuses for performing priority analysis on data transferred in a network. A network processor is connected with a distribution module that distributes network data to multiple memory buffers that are each connected with an analysis processor. Each analysis processor performs protocol analysis tests on the data it receives. When a status signal generated by each memory buffer indicates that the memory buffer is nearing capacity, the corresponding analysis processor may selecting exclude protocol analysis tests based on the priority of those tests. The protocol analyzer is also scalable to include multiple instances of network processors, distribution modules, memory buffers and analysis processors. Each instance is typically interconnected.
33 Citations
18 Claims
-
1. A method for performing protocol analysis on network data, the method comprising:
-
receiving network data representing at least a portion of a data stream transmitted in a network at a network processor;
distributing the network data to a plurality of memory buffers connected with a plurality of analysis processors such that each packet of a particular transaction is distributed to the same analysis processor, wherein each memory buffer generates a status signal indicating a fullness of the memory buffer;
assigning a priority to each of a plurality of protocol analysis tests; and
performing selected protocol analysis tests based on the priority when the status signal is above a threshold level. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
10. A protocol analyzer for performing protocol analysis of network data, the protocol analyzer comprising:
-
a first network processor configured to receive first network data representing at least a portion of a data stream transferred in a first network link;
a second network processor configured to receive second network data representing at least a portion of a data stream transferred in a second network link;
first analysis processors coupled to the first network processor for performing protocol analysis tests on at least the first network data;
second analysis processors coupled to the second network processor for performing protocol analysis tests on at least the second network data, wherein the second analysis processors are configured to communicate with the first analysis processors;
a first distribution module that distributes packets from the first network processor to the first analysis processors; and
a second distribution module that distributes packets from the second network processor to the second analysis processors, wherein the second distribution module communicates with the first distribution module such that packets from the first distribution module can be distributed to the second analysis processors. - View Dependent Claims (8, 9, 11, 12, 13, 14, 15, 16, 17, 18)
-
Specification