Data matching using flow based packet data storage

• US 20080031240A1
• Filed: 08/02/2006
• Published: 02/07/2008
• Est. Priority Date: 08/02/2006
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Silver Peak Systems Incorporated (Hewlett-Packard Enterprise Company)
• Inventors: Burns, John, Yin, Zhigang, Hughes, David Anthony
• Granted Patent: US 8,755,381 B2
• Time in Patent Office: Days
• US Class Current: 370/389
• CPC Class Codes: H04L 43/062 related to network traffic
• CPC Class Codes: H04L 45/745 Address table lookup; Address filtering
• CPC Class Codes: H04L 47/2483 involving identification of individual flows
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 49/901 using storage descriptor, e.g. read or write pointers
• CPC Class Codes: H04L 49/9047 including multiple buffers, e.g. buffer pools
• CPC Class Codes: H04L 49/9057 Arrangements for supporting packet reassembly or resequencing
• CPC Class Codes: H04L 49/9094 Arrangements for simultaneous transmit and receive, e.g. simultaneous reading/writing from/to the storage element
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A system for processing packets includes a communications interface and a processor. A communications interface receives a packet between a source and a destination. The processor identifies a flow between the source and the destination based on the packet. The processor determines whether some of packet data of the packet matches to storage data in storage using hashes. The processor then stores the packet data in a block of memory in the storage based on the flow and if the packet data does not match the storage data.

Claims

1. A system for processing packets, the system comprising:

a communications interface configured to receive a packet between a source and a destination; and

a processor configured to identify a flow between the source and the destination based on the packet, determine whether some of packet data of the packet matches to storage data in storage using hashes, and store the packet data in a block of memory in the storage based on the flow and if the packet data does not match the storage data.

2. The system of claim 1 wherein the storage comprises fast memory and slow memory.

3. The system of claim 2 wherein the processor is configured to move the storage data between the fast memory and the slow memory.

4. The system of claim 1 wherein the flow comprises a session between a source and a destination.

5. The system of claim 1 wherein the block of memory comprises a page of the contiguous memory.

6. The system of claim 1 wherein the processor is configured to retrieve a hash state of the hashes for the flow.

7. The system of claim 1 wherein the processor is configured to determine the hashes for the flow.

8. The system of claim 1 wherein the processor is configured to store a hash state of the hashes for the flow.

9. The system of claim 1 wherein the processor is configured to update a hash table with the hashes.

10. The system of claim 1 wherein the hashes are rolling.

11. The system of claim 1 wherein the processor is configured to allocate the block of the memory for the identified flow.

12. The system of claim 1 wherein the processor is configured to transmit the packet data.

13. A method for processing packets, the method comprising:

receiving a packet between a source and a destination;

identifying a flow between the source and the destination based on the packet;

determining whether some of packet data of the packet matches to storage data in storage using hashes; and

storing the packet data in a block of memory in the storage based on the flow and if the packet data does not match the storage data.

14. The method of claim 13 wherein the storage comprises fast memory and slow memory.

15. The method of claim 14 further comprising moving the storage data between the fast memory and the slow memory.

16. The method of claim 13 wherein the flow comprises a session between a source and a destination.

17. The method of claim 13 wherein the block of memory comprises a page of the contiguous memory.

18. The method of claim 13 further comprising retrieving a hash state of the hashes for the flow.

19. The method of claim 13 further comprising determining the hashes for the flow.

20. The method of claim 13 further comprising storing a hash state of the hashes for the flow.

21. The method of claim 13 further comprising updating a hash table with the hashes.

22. The method of claim 13 wherein the hashes are rolling.

23. The method of claim 13 further comprising allocating the block of the memory for the identified flow.

24. The method of claim 13 further comprising transmitting the packet data.

25. A software product for processing packets, the software product comprising:

software operational when executed by a processor to direct the processor to receive a packet between a source and a destination, identify a flow between the source and the destination based on the packet, determine whether some of packet data of the packet matches to storage data in storage using hashes, and store the packet data in a block of memory in the storage based on the flow and if the packet data does not match the storage data; and

a storage medium configured to store the software.

26. The software product of claim 25 wherein the storage comprises fast memory and slow memory.

27. The software product of claim 26 wherein the software is operational when executed by the processor to direct the processor to move the storage data between the fast memory and the slow memory.

28. The software product of claim 25 wherein the flow comprises a session between a source and a destination.

29. The software product of claim 25 wherein the block of memory comprises a page of the contiguous memory.

30. The software product of claim 25 wherein the software is operational when executed by the processor to direct the processor to retrieve a hash state of the hashes for the flow.

31. The software product of claim 25 wherein the software is operational when executed by the processor to direct the processor to determine the hashes for the flow.

32. The software product of claim 25 wherein the software is operational when executed by the processor to direct the processor to store a hash state of the hashes for the flow.

33. The software product of claim 25 wherein the software is operational when executed by the processor to direct the processor to update a hash table with the hashes.

34. The software product of claim 25 wherein the hashes are rolling.

35. The software product of claim 25 wherein the software is operational when executed by the processor to direct the processor to allocate the block of the memory for the identified flow.

36. The software product of claim 25 wherein the software is operational when executed by the processor to direct the processor to transmit the packet data.