System and method for multi-stage packet filtering on a networked-enabled device
First Claim
1. A method for packet filtering in a network-enabled device according to a set of filtering rules wherein filtering rules are applied early in the processing of incoming communications packets, comprising:
- filtering incoming data packets using the filtering rules in a plurality of stages wherein the first stage is triggered by the receipt of a data packet by the network-enabled device.
0 Assignments
0 Petitions
Accused Products
Abstract
A multi-stage packet filtering method and system. The multi-stage packet filtering according to the invention applies a set of filtering rules early in the processing of incoming communications packets by filtering incoming data packets using the filtering rules in a plurality of stages wherein the first stage is triggered by the receipt of a data packet by the device. Filtering rules that cannot be applied in the first stage may be deferred to a pre-memory allocation stage. Thus, preferable leaving only rules that must be executed in conjunction with protocol processing to be filtered at a filtering stage executed in a protocol processing filtering stage.
178 Citations
16 Claims
-
1. A method for packet filtering in a network-enabled device according to a set of filtering rules wherein filtering rules are applied early in the processing of incoming communications packets, comprising:
filtering incoming data packets using the filtering rules in a plurality of stages wherein the first stage is triggered by the receipt of a data packet by the network-enabled device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
9. A network-enabled device having a central processing unit and a memory for storing software modules having instructions controlling the central processing unit, the network-enabled device implementing packet filtering system according to a set of filtering rules wherein filtering rules are applied as early as possible, the software modules comprising instructions for:
filtering incoming data packets using the filtering rules in a plurality of stages wherein the first stage is triggered by the receipt of a data packet by the network-enabled device. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
Specification