Method for automatically classifying traffic with enhanced hierarchy in a packet communications network
First Claim
1. A method for automatically classifying traffic in a packet communications network, said network having any number of flows, including zero, comprising the steps of:
- parsing a packet into a first flow specification, wherein said first flow specification contains at least one instance of any one of the following;
a protocol family designation, a direction of packet flow designation, a protocol type designation, a pair of hosts, a pair of ports, in HTTP protocol packets, a pointer to a MIME type;
thereupon, matching the first flow specification of the parsing step to a plurality of classes represented by a plurality of nodes, each node having a traffic specification;
thereupon, if a matching node was not found in the matching step, associating said first flow specification with one or more newly-created nodes;
thereupon, incorporating said newly-created node into said plurality of nodes.
12 Assignments
0 Petitions
Accused Products
Abstract
In packet communication, a method for automatically classifying packet flows for use in allocating bandwidth resources and the like by a rule of assignment of a service level. By rendering discoverable the attributes of a flow specification for packet flows, a finer grained hierarchy of classification is provided automatically that is based on information which is specific to the type of program or application supported by the flow and thus allowing greater flexibility in control over different flows within the same application. The method comprises applying individual instances of traffic classification paradigms to packet network flows based on selectable information obtained from a plurality of layers to define a characteristic class, then mapping the flow to the defined traffic class. The flow specification is provided with some application-specific attributes, some of which are discoverable. The discoverable attributes lead to an ability to automatically create sub-nodes of nodes for finer-grained control.
-
Citations
17 Claims
-
1. A method for automatically classifying traffic in a packet communications network, said network having any number of flows, including zero, comprising the steps of:
-
parsing a packet into a first flow specification, wherein said first flow specification contains at least one instance of any one of the following;
a protocol family designation, a direction of packet flow designation, a protocol type designation, a pair of hosts, a pair of ports, in HTTP protocol packets, a pointer to a MIME type;
thereupon,matching the first flow specification of the parsing step to a plurality of classes represented by a plurality of nodes, each node having a traffic specification;
thereupon,if a matching node was not found in the matching step, associating said first flow specification with one or more newly-created nodes;
thereupon,incorporating said newly-created node into said plurality of nodes.
-
-
2. A method for automatically classifying traffic in a packet communications network, said network having any number of flows, including zero, comprising the steps of:
-
determining application type of a flow;
thereafterfor said application type of said flow, parsing a packet of said flow into a first flow specification, said first flow specification containing information as attributes, said attributes being specific to said application type and wherein selected ones of said attributes are discoverable;
thereuponmatching the first flow specification of the parsing step to a plurality of classes represented by a plurality of nodes of a classification tree type, each said classification tree type node having a traffic specification;
thereuponif a matching classification tree type node was found in the matching step and said matching classification tree type node indicates that further nodes can be created as a consequence of attributes thereof that are discoverable, then creating at least one new classification tree type node;
thereuponassociating said first flow specification with said at least one newly-created classification tree type node; and
thereuponincorporating said at least one newly-created classification tree type node into said plurality of classification tree type nodes so that policies can be applied to traffic based only on said discoverable attributes of said at least one newly-created classification tree type node. - View Dependent Claims (3, 4, 5, 6, 7, 8, 9)
for at least a second flow having a second flow specification, recognizing said second flow specification and said first flow specification to comprise together a service aggregate;
thereuponassociating said first flow specification and said second flow specification with a newly-created classification tree node, said newly-created classification tree type node having a first traffic specification corresponding to said first flow specification and a second traffic specification corresponding to said second flow specification.
-
-
5. The method of claim 2 farther comprising the steps of:
applying policies from said newly-created classification tree type nodes to instances of detected traffic.
-
6. The method of claim 2 further comprising the steps of:
for a subclassification under a specified criterion comprising a specified attribute name and a value, if a matching classification tree type node was found in the matching step, said matching classification tree type node having at least one child classification tree type node, applying the matching, associating, and incorporating steps to a particular child classification tree type node of said matching classification tree type node as a part of classification.
-
7. The method of claim 2 wherein the parsing step further comprises the steps of:
-
examining data contained within a plurality of component packets belonging to said first flow for any number of a plurality of indicators of any of the following;
a protocol;
a service;
thereupon, matching said plurality of indicators to said classes represented by a plurality of said classification tree type nodes.
-
-
8. The method of claim 2 further including measuring traffic load and invoking said classification upon achievement of a minimum usage threshold.
-
9. The method according to claim 2 wherein said matching step is applied to hierarchically-recognized classes.
-
10. A system for automatically classifying traffic in a packet telecommunications network, said network having any number of flows, including zero, comprising:
-
a plurality of network links upon which said traffic is carried;
a network routing means; and
a processor means operative to;
determine application type of a flow;
for said application type of said flow, parse a packet of said flow into a first flow specification, said first flow specification containing information as attributes, said attributes being specific to said application type and wherein selected ones of said attributes are discoverable;
thereuponmatch the first flow specification of the parsing step to a plurality of classes represented by a plurality of nodes of a classification tree type, each said classification tree type node having a traffic specification;
thereuponif a matching classification tree type node was found in the matching step and said matching classification tree type node indicates that further nodes can be created as a consequence of attributes thereof that are discoverable, then associate said first flow specification with said at least one newly-created classification tree type node;
thereuponcreate at least one new classification tree type node; and
thereuponincorporate said at least one newly-created classification tree type node into said plurality of classification tree type nodes so that policies can be applied to traffic based only on said discoverable attributes of said at least one newly-created classification tree type node. - View Dependent Claims (11, 12)
-
-
13. A method for classifying traffic in a packet telecommunications network, said network having any number of flows, including zero, said method comprising the steps of:
-
parsing a packet into a first flow specification, said first flow specification having discoverable attributes;
thereupon,matching the first flow specification of the parsing step to a plurality of classes represented by a plurality of classification tree type nodes, each said classification tree type node having a traffic specification;
thereupon,if a matching classification tree type node was found in the matching step and said matching classification tree type node indicates through said discoverable attributes that further nodes can be created, creating at least one new classification tree type node;
thereuponassociating said first flow specification with at least one more newly-created node;
thereupon,displaying to a network administrator a representation of traffic according to said traffic specification for use in manual intervention. - View Dependent Claims (14, 15, 16, 17)
-
Specification