HASHING OF NETWORK PACKET FLOWS FOR EFFICIENT SEARCHING
First Claim
Patent Images
1. A method implemented in a network device, comprising:
- receiving data packets from a network;
for each of the received packets,a) parsing the data packet to extract a source address and a destination address therefrom;
b) applying a hash function to the source address to obtain a first hash;
c) applying a hash function to the destination address to obtain a second hash; and
,d) separably combining first and second hashes to generate a hash index for the packet, wherein the hash index defines a packet flow to which the packet belongs.
4 Assignments
0 Petitions
Accused Products
Abstract
The invention relates to a method and apparatus for efficient storing and retrieval of captured data packets. The packets are parsed to extract flow defining parameters such as source and destination addresses, the extracted addresses are hashed and the address hash numbers are reversibly combined, for example concatenated in a pre-defined order of their values to obtain a single hash index for a flow. The packets are then saved in a packet store in accordance and/or association with their hash index. The packets may be efficiently retrieved based on the two addresses or on a single network address.
-
Citations
14 Claims
-
1. A method implemented in a network device, comprising:
-
receiving data packets from a network; for each of the received packets, a) parsing the data packet to extract a source address and a destination address therefrom; b) applying a hash function to the source address to obtain a first hash; c) applying a hash function to the destination address to obtain a second hash; and
,d) separably combining first and second hashes to generate a hash index for the packet, wherein the hash index defines a packet flow to which the packet belongs. - View Dependent Claims (2, 3, 4, 5, 6, 7, 12, 13, 14)
-
-
8. A network device, comprising:
-
a network interface for receiving packets from a network, a packet processor coupled to the network interface and comprising; a packet parser for parsing each of the received packets for extracting therefrom a source address and a destination address; a hash generator for generating a first hash from the source address and a second hash from the destination address; and
,a hash combiner for combining first and second hashes to generate a hash index for the packet, wherein the hash index defines a packet flow to which the packet belongs. - View Dependent Claims (9, 10, 11)
-
Specification