Self modifying state graphs for quality of service classification

• US 6,912,570 B1
• Filed: 11/12/1999
• Issued: 06/28/2005
• Est. Priority Date: 11/12/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Leavy, Nicholas
• Primary Examiner(s): VU, THONG H
• Application Number:
  US09/439,116
• Time in Patent Office: 2,055 Days
• Field of Search: 709/224, 709/221, 709/223, 709/225, 370/474, 370/252, 379/229, 707/4, 703/20, 345/440, 345/769, 714/39, 340/825, 702/185, 702/119, 702/122, 702/20
• US Class Current: 709/224
• CPC Class Codes: H04L 63/0254 Stateful filtering
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/61 taking into account QoS or priority requirements

Abstract

A method and intermediate device for dynamically modifying a stateful inspection of data. In one embodiment, the present invention is comprised of an intermediate device such as, for example, a router. The intermediate device is adapted to perform a stateful inspection of data passing therethrough. In one approach, the intermediate device performs the stateful inspection by inspecting the data to determine state information for the data. Next, the intermediate device modifies a state graph used to perform the stateful inspection of the data based upon the state information found during the aforementioned inspection. The intermediate device then utilizes the modified state graph to perform continued stateful inspection of the data. In so doing, the present invention enables an enhanced use of Quality of Service (QoS) classification based upon the high level application of the data. The present invention further provides a classification engine which can readily be adapted to new protocols.

Claims

1. A method for dynamically modifying a stateful inspection of FTP classified data being transmitted over a network, said method comprising the steps of:

a) dynamically inspecting said data to determine state information for said data; and

b) modifying a state graph used in performing said stateful inspection of said data based upon said state information determined in step a) for said data; and

c) utilizing said modified state graph to perform continued stateful inspection by means of an intermediate device of said data.

2. The method for dynamically modifying a stateful, inspection of data as recited in claim 1 wherein said state graph is implemented in a high level programming language.

3. The method for dynamically modifying a stateful inspection of data as recited in claim 2 wherein said high level programming language is a Protocol Description Language (PDL).

4. The method for dynamically modifying a stateful inspection of data as recited in claim 1 wherein said data is packet data.

5. The method for dynamically modifying a stateful inspection of data as recited in claim 1 further comprising the step of:

d) assigning Quality of Service (QoS) classification to said data based upon said state information determined in step a) for said data.

6. The method for dynamically modifying a stateful inspection of data as recited in claim 5 wherein said assigning of said Quality of Service classification of step d) is based upon the highest level application for said data.

7. An intermediate device adapted to perform a stateful inspection of FTP classified data passing therethrough, said intermediate device further adapted to perform a method of dynamically modifying said stateful inspection of said data which passes through said intermediate device, said method comprising the steps of:

a) dynamically inspecting said data to determine state information for said data; and

b) modifying a state graph used in performing said stateful inspection of said data based upon said state information determined in step a) for said data; and

c) utilizing said modified state graph to perform continued stateful inspection by means of said intermediate device of said data.

8. The intermediate device of claim 7 wherein said intermediate device is a router.

9. The intermediate device of claim 7 wherein said state graph is implemented in a high level programming language.

10. The intermediate device of claim 9 wherein said high level programming language is a Protocol Description Language (PDL).

11. The intermediate device of claim 7 wherein said data is packet data.

12. The intermediate device of claim 7 wherein said method performed by said intermediate device further comprises the step of:

assigning Quality of Ser vice (QoS) classfication to said data based upon said state information determined in step a) for said data.

13. The intermediate device of claim 12 wherein step d) of said method performed by said intermediate device further comprises assigning said Quality of Service classification based upon the highest level application for said data.

14. A computer readable medium adapted to be coupled to an intermediate device, said computer readable medium have computer readable code stored thereon for causing said intermediate device to perform a stateful inspection of FTP classified data passing therethrough, said computer readable code stored on said computer readable media further adapted to cause said intermediate device to perform a method of dynamically modifying said stateful inspection of said FTP classified data which passes through said intermediate device, said method comprising the steps of:

a) dynamically inspecting said data to determine state information for said data; and

b) modifying a state graph used in performing said stateful inspection of said data based upon said state information determined in step a) for said data; and

c) utilizing said modified state graph to perform continued stateful inspection by means of said intermediate device of said data.

15. The computer readable medium of claim 14 wherein said computer readable code stored thereon causes an intermediate device comprised of a router to perform said method.

16. The computer readable medium of claim 14 wherein said computer readable code stored thereon causes said intermediate device to perform said method using said state graph wherein said state graph is implemented in a high level programming language.

17. The computer readable medium of claim 16 wherein said computer readable code stored thereon causes said intermediate device to perform said method using said state graph wherein said state graph is implemented in a Protocol Description Language (PDL).

18. The computer readable medium of claim 14 wherein said computer readable code stored thereon causes said intermediate device to perform said method on packet data passing through said intermediate device.

19. The computer readable medium of claim 14 wherein said computer readable code stored thereon causes said intermediate device to further perform the step of:

c) assigning Quality of Service (QoS) classification to said data based upon said state information determined in step a) for said data.

20. The computer readable medium of claim 14 wherein said computer readable code stored thereon causes said intermediate device to further perform the step of:

d) assigning Quality of Service (QoS) classification to said data based upon said state information determined in step a) and based upon the highest level application for said data.