System and method for general purpose network analysis

• US 5,781,729 A
• Filed: 07/07/1997
• Issued: 07/14/1998
• Est. Priority Date: 12/20/1995
• Status: Expired due to Fees

• Current Assignee: NB Networks LLC
• Original Assignee: NB Networks LLC
• Inventors: Baker, Peter D., Neal, Karen
• Primary Examiner(s): Voeltz, Emanuel Todd
• Assistant Examiner(s): PEESO, THOMAS R
• Application Number:
  US08/888,875
• Time in Patent Office: 372 Days
• Field of Search: 395/200.6, 395/200.61, 395/200.66, 395/200.68, 395/200.8, 364/551.01, 371/48, 371/68.2
• US Class Current: 709/230
• CPC Class Codes: H04L 41/142 using statistical or mathematical methods
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 43/18 Protocol analysers
• CPC Class Codes: H04L 69/03 Protocol definition or specification protocol conformance testing H04L1/244
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A network interface system and related methods. A single logic control module, which may be implemented in hardware or software, is utilized to perform any of a number of data manipulation functions including, for example, parsing, filtering, data generation or analysis, based upon one or more programmably configurable protocol descriptions which may be stored in and retrieved from an associated memory.

Claims

1. A system for manipulating data transmitted over one or more data communications networks, said system comprising:

a logic control module capable of accessing a plurality of programmably configurable protocol descriptions stored in a memory, said programmably configurable protocol descriptions each including a protocol control record and at least one field sub-record for defining a selected portion of a network protocol to be manipulated and a plurality of rules for manipulating said portion of said protocol;

said logic control module including frame and protocol header length determining logic, statistics gathering logic, verification and error checking logic, filtering logic, next protocol determining logic, routing logic and output formatting logic for and controlling, based upon said programmably configurable protocol descriptions, a series of data manipulation functions to be implemented by said system.

2. A protocol analyzer comprising:

a logic control module capable of accessing a plurality of programmably configurable protocol descriptions stored in a memory, said programmably configurable protocol descriptions each including a protocol control record and at least one field sub-record for defining a selected portion of a network protocol to be analyzed and a plurality of rules for conducting an analysis of said portion of said protocol;

said logic control module including frame and protocol header length determining logic, statistics gathering logic, verification and error checking logic, filtering logic, and next protocol determining logic for defining and controlling, based upon said programmably configurable protocol descriptions, a series of parsing, filtering, statistics gathering and display functions implemented by said protocol analyzer.

3. A machine implemented process for parsing data transmitted over a data communications network, said process comprising the steps of:

storing at least one programmably configurable protocol description in a memory, said at least one programmably configurable protocol description comprising a protocol control record and at least one field sub-record for defining a plurality of characteristics of said data transmitted over said data communications network;

retrieving said at least one protocol description from said memory; and

providing said at least one protocol description to a logic control module, said logic control module, upon receiving said at least one protocol description, being configured to parse data received from said data communications network based upon said characteristics defined by said protocol description.

4. The process of claim 3, wherein a plurality of programmably configurable protocol descriptions are stored in said memory, and wherein said programmably configurable protocol descriptions are selectively retrieved from said memory in response to selected data sequences received from said data communications network.

5. A machine implemented process for filtering data transmitted over a data communications network, said process comprising the steps of:

storing at least one programmably configurable protocol description in a memory, said at least one programmably configurable protocol description comprising a protocol control record and at least one field sub-record for defining a plurality of characteristics of said data transmitted over said data communications network;

retrieving said at least one protocol description from said memory; and

providing said at least one protocol description to a logic control module, said logic control module, upon receiving said at least one protocol description, being configured to filter data received from said data communications network based upon said characteristics defined by said protocol description.

6. The process of claim 5, wherein a plurality of programmably configurable protocol descriptions are stored in said memory, and wherein said programmably configurable protocol descriptions are selectively retrieved from said memory in response to selected data sequences received from said data communications network.

7. A machine implemented process for routing data transmitted over a data communications network, said process comprising the steps of:

storing at least one programmably configurable protocol description in a memory, said at least one programmably configurable protocol description comprising a protocol control record and at least one field sub-record for defining a plurality of characteristics of said data transmitted over said data communications network;

retrieving said at least one protocol description from said memory; and

providing said at least one protocol description to a logic control module, said logic control module, upon receiving said at least one protocol description, being configured to route data within said data communications network based upon said characteristics defined by said protocol description.

8. The process of claim 7, wherein a plurality of programmably configurable protocol descriptions are stored in said memory, and wherein said programmably configurable protocol descriptions are selectively retrieved from said memory in response to selected data sequences received from said data communications network.

9. A network interface system comprising:

at least one network interface unit for communicating with a data communications network;

at least one memory coupled to said network interface unit, said memory being configured to store a plurality of network data files and a plurality of programmably configurable protocol descriptions; and

a logic control module coupled to said at least one network interface unit and to said at least one memory, said logic control module having the capability to selectively retrieve one or more of said programmably configurable protocol descriptions from said memory and to implement a selected data manipulation function in a manner defined by said one or more retrieved protocol descriptions.

10. The network interface system of claim 9, wherein said logic control module comprises a microprocessor and a computer program which may be executed by said microprocessor.

11. The network interface system of claim 10, wherein each of said programmably configurable protocol descriptions comprises a protocol control record and a plurality of field data records.

12. The network interface system of claim 11, wherein each said protocol control record defines an overall structure of a network protocol.

13. The network interface system of claim 12, wherein each protocol control record comprises a plurality of field sub-records, a plurality of statistics records, a plurality of lookup records, a plurality of expression records, a plurality of filter criteria records, and a plurality of value verification records.

14. A protocol analyzer comprising:

at least one network interface unit for communicating with a data communications network;

at least one memory coupled to said network interface unit, said memory being configured to store a plurality of network data files and a plurality of programmably configurable protocol descriptions, each programmably configurable protocol description comprising a protocol control record and a plurality of field subrecords, wherein said protocol control record defines an overall data structure of a selected data communication protocol;

a logic control module coupled to said at least one network interface unit and to said at least one memory, said logic control module having the capability to selectively retrieve one or more of said programmably configurable protocol descriptions from said memory and to execute one or more network analysis functions defined by said one or more retrieved protocol descriptions; and

at least one output device coupled to said logic control module for displaying a result of a network analysis function performed by said logic control module.