System and method for communicating packets in a network environment

• US 7,281,265 B1
• Filed: 06/02/2003
• Issued: 10/09/2007
• Est. Priority Date: 06/02/2003
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Retana, Alvaro E., Gage, Timothy M.
• Primary Examiner(s): Jung; David Y.
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US10/453,360
• Time in Patent Office: 1,590 Days
• Field of Search: 726/13, 713/154
• US Class Current: 726/13
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A method for communicating packets in a network environment is provided that includes receiving a first and a second packet and determining if the second packet is substantially similar to the first packet. If the second packet is received during a predetermined time interval, then the first packet may be communicated to a next destination.

Claims

1. An apparatus for communicating packets in a network environment, comprising:

a network element operable to receive a first and a second packet, the network element being operable to determine if the second packet is substantially similar to the first packet and if the second packet is received during a predetermined time interval, wherein the network element is operable to communicate the first packet to a next destination in cases where the second packet is received by the network element during the predetermined time interval.

2. The apparatus of claim 1, wherein the network element is operable to discard the first packet if the second packet is not received by the network element during the predetermined time interval.

3. The apparatus of claim 1, further comprising:

a filtering element included within the network element and operable to determine if the first and second packets are received during the predetermined time interval, wherein the filtering element is operable to discard the first packet if the second packet is not received during the predetermined time interval, and wherein the filtering element is operable to communicate a duplicate of a packet that is received to the next destination in cases where a subsequent matching packet is received during the predetermined time interval.

4. The apparatus of claim 1, wherein the network element is operable to store an identification element associated with the first packet such that if the second packet is received by the network element during the predetermined time interval, the network element may use the identification element to correlate the first packet to the second packet and then, if a match exists, communicate the first packet to the next destination.

5. The apparatus of claim 1, wherein the network element includes a localized communication protocol that allows the network element to interface with a neighboring network element for purposes of determining whether to communicate the first packet to a next destination or to discard the first packet.

6. The apparatus of claim 1, wherein the network element is operable to determine if a failover has occurred that is associated with a communication link that facilitates propagation of the first and second packets, the network element operable to regress to a default behavior in cases where only a single communication link is provided for receiving the first packet such that the first and second packets are not discarded.

7. The apparatus of claim 1, wherein the network element is operable to duplicate a received packet in order to communicate two packets, which are substantially similar to the received packet, via two communication links.

8. An apparatus for communicating packets in a network environment, comprising:

a filtering element coupled to a network element and operable to receive a first and a second packet, the filtering element being operable to determine if the first and second packets are received during a predetermined time interval, wherein the filtering element is operable to discard the first packet if the second packet is not received during the predetermined time interval, and wherein the filtering element is operable to communicate a duplicate of a packet that is received to a next destination in cases where a subsequent matching packet is received during the predetermined time interval.

9. The apparatus of claim 8, wherein the filtering element includes a localized communication protocol that allows the filtering element to interface with a neighboring filtering element for purposes of determining whether to communicate the first packet to a next destination or to discard the first packet.

10. The apparatus of claim 8, wherein a selected one of the filtering element and the network element is operable to store an identification element associated with the first packet such that if the second packet is received during the predetermined time interval, the identification element may be used to correlate the first packet to the second packet before communicating the first packet to the next destination.

11. The apparatus of claim 8, wherein the filtering element is operable to determine if a failover has occurred that is associated with a communication link that facilitates propagation of the first and second packets, the filtering element operable to regress to a default behavior in cases where only a single communication link is provided for receiving the first packet such that the first and second packets are not discarded.

12. A method for communicating packets in a network environment, comprising:

receiving a first and a second packet;

determining if the second packet is substantially similar to the first packet and if the second packet is received during a predetermined time interval; and

communicating the first packet to a next destination in cases where the second packet is received during the predetermined time interval.

13. The method of claim 12, further comprising:

discarding the first packet if the second packet is not received during the predetermined time interval.

14. The method of claim 12, further comprising:

duplicating a received packet in order to communicate two packets, which are substantially similar to the received packet, via two communication links.

15. The method of claim 12, further comprising:

storing an identification element associated with the first packet such that if the second packet is received during the predetermined time interval, the identification element may be used to correlate the first packet to the second packet and then, if a match exists, communicate the first packet to the next destination.

16. The method of claim 12, further comprising:

determining if a failover has occurred that is associated with a communication link, which facilitates propagation of the first and second packets; and

regressing to a default behavior in cases where only a single communication link is provided for receiving the first packet such that the first and second packets are not discarded.

17. A system for communicating packets in a network environment, comprising:

means for receiving a first and a second packet;

means for determining if the second packet is substantially similar to the first packet and if the second packet is received during a predetermined time interval; and

means for communicating the first packet to a next destination in cases where the second packet is received during the predetermined time interval.

18. The system of claim 17, further comprising:

means for discarding the first packet if the second packet is not received during the predetermined time interval.

19. The system of claim 17, further comprising:

means for duplicating a received packet in order to communicate two packets, which are substantially similar to the received packet, via two communication links.

20. The system of claim 17, further comprising:

means for storing an identification element associated with the first packet such that if the second packet is received during the predetermined time interval, the identification element may be used to correlate the first packet to the second packet and then, if a match exists, communicate the first packet to the next destination.

21. The system of claim 17, further comprising:

means for determining if a failover has occurred that is associated with a communication link, which facilitates propagation of the first and second packets; and

means for regressing to a default behavior in cases where only a single communication link is provided for receiving the first packet such that the first and second packets are not discarded.

22. Software for communicating packets in a network environment, the software being embodied in a computer readable medium and comprising code such that when executed is operable to:

receive a first and a second packet;

determine if the second packet is substantially similar to the first packet and if the second packet is received during a predetermined time interval; and

communicate the first packet to a next destination in cases where the second packet is received during the predetermined time interval.

23. The medium of claim 22, wherein the code is further operable to:

discard the first packet if the second packet is not received during the predetermined time interval.

24. The medium of claim 22, wherein the code is further operable to:

duplicate a received packet in order to communicate two packets, which are substantially similar to the received packet, via two communication links.

25. The medium of claim 22, wherein the code is further operable to:

store an identification element associated with the first packet such that if the second packet is received during the predetermined time interval, the identification element may be used to correlate the first packet to the second packet and then, if a match exists, communicate the first packet to the next destination.