Rule-based packet selection, storage, and access method and system

• US 7,254,562 B2
• Filed: 07/11/2002
• Issued: 08/07/2007
• Est. Priority Date: 07/11/2002
• Status: Expired due to Term

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Scoredos, Eric C., Hsu, Wan-Yen, Takahashi, Nobuhisa
• Primary Examiner(s): ELISCA, PIERRE E
• Application Number:
  US10/192,948
• Publication Number:
  US 20040010473A1
• Time in Patent Office: 1,853 Days
• Field of Search: 705/77, 705/57, 705/58
• US Class Current: 705/77
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: H04L 63/0263 Rule management

Abstract

A rule-based selection, storage and access method and system for processing packets from network traffic. First, packet intercepted from network traffic are selected based on at least one rule. Second, the selected packets are stored in an in-kernel storage buffer, which can be tuned to a size that is appropriate to the number packets being captured and the ability of a packet usage application (e.g., a billing program) to process the packets. Third, an access mechanism is provided to a packet usage application for accessing the stored packets. The intercepted network traffic is provided to a receiving application.

Claims

1. A method of billing for transfers of data in a network, wherein said data comprises packets, said method comprising:

copying at least a portion of a packet based on at least one rule;

storing said at least a portion of the copied packet in an in-kernel buffer,

wherein the size of said in-kernel buffer is changeable, said in-kernel buffer having a first priority;

transferring said at least a portion of said copied packet from said in-kernel buffer to a user buffer, said user buffer having a second priority wherein said first priority is more secure than said second priority; and

processing said at least a portion of said copied packet by a billing program, wherein billing is based on the number of copied packets.

2. The method of claim 1 and further comprising changing the size of said in-kernel buffer based on a statistical analysis.

3. The method of claim 2, wherein said statistical analysis is based at least in part on the anticipated maximum network traffic load.

4. The method of claim 2, wherein said statistical analysis is based at least in part on the usage of said in-kernel buffer when the network traffic is at a preselected level.

5. The method of claim 1, wherein the size of said user buffer is changeable.

6. The method of claim 1, and further comprising adjusting the size of said user buffer.

7. The method of claim 1 and further comprising changing the size of said user buffer based on the number of packets copied over a period.

8. The method of claim 1, wherein said transferring said at least a portion of said copied packet from said in-kernel buffer to a user buffer comprises transferring a plurality of portions of packets one at a time.

9. The method of claim 1, wherein said copying at least a portion of a packet is based on at least one rule that compares one of a source address and a destination address of a packet with a corresponding predetermined source address and destination address.

10. The method of claim 1, wherein said copying at least a portion of a packet is based on at least one rule that compares a port number associated with a packet to a predetermined port number.

11. The method of claim 1 wherein said at least a portion of said packet is stored based on at least one rule.

12. The method of claim 11, wherein said at least a portion of said packet is stored based on a rule that compares one of a source address and a destination address of a packet with a corresponding predetermined source address and destination address.

13. The method of claim 12, wherein said at least a portion of said packet is stored based on a rule that compares a port number associated with a packet to a predetermined port number.

14. The method of claim 1, wherein said at least one rule comprises determining a network card associated with the transfer of said packet.

15. The method of claim 1, wherein said at least one rule comprises determining a port associated with the transfer of said packet.

16. A method of billing for data transfers within a network, wherein said data comprises packets, said method comprising:

copying at least a portion of a packet transferred within said network;

storing at least a portion of said packet in an in-kernel buffer if said packet meets at least on rule, wherein the size of said in-kernel buffer is changeable, said in-kernel buffer has a first priority associated therewith;

transferring said at least a portion of the stored packet from said in-kernel buffer to a user buffer, said user buffer having a second priority wherein said first priority is more secure than said second priority; and

processing said at least a portion of said copied packet by a billing program, wherein billing is based on the number of stored packets.

17. The method of claim 16 and further comprising:

monitoring the usage of said in-kernel buffer; and

configuring the size of said in-kernel buffer based on said usage.

18. The method of claim 16 and further comprising:

monitoring the usage of said user buffer; and

configuring the size of said user buffer based on said usage.

19. The method of claim 16, wherein said copying comprises copying said packets, wherein one copy is transferred to a destination location.

20. The method of claim 16, wherein said copying a packet is based on at least one rule.

21. The method of claim 20, wherein said at least one rule compares one of a source address and a destination address of a packet with a corresponding predetermined source address and destination address.

22. The method of claim 20, wherein said at least one rule compares a port number associated with a packet to a predetermined port number.

23. The method of claim 16, wherein said at least one rule compares one of a source address and a destination address of a packet with a corresponding predetermined source address and destination address.

24. The method of claim 16, wherein the size of said in-kernel buffer is changed based on a statistical analysis.

25. The method of claim 24, wherein said statistical analysis is based at least in part on the usage of said in-kernel buffer when the network traffic is at a preselected level.

26. A system of billing for data transfers in a network, the system comprising a computer readable medium having computer code stored therein, said computer code comprising instructions for:

copying at least one portion of a packet being transferred within said network based on at least one rule;

storing said at least one portion of said packet in an in-kernel storage buffer, said in-kernel storage buffer having a first priority;

transferring said at least one portions of said packet to a user buffer, said user buffer having a second priority, said first priority being greater than said second priority; and

processing said at least a portion of said copied packet by a billing program, wherein billing is based on the number of stored packets.

27. The system of claim 26, wherein said instruction further comprise:

monitoring network traffic; and

adjusting the size of said in-kernel storage buffer based on said network traffic.

28. The system of claim 26, wherein said instruction further comprise:

monitoring network traffic; and

adjusting the size of said user buffer based on said network traffic.