System and method for processing network packet flows

• US 7,633,868 B2
• Filed: 06/23/2006
• Issued: 12/15/2009
• Est. Priority Date: 07/02/2001
• Status: Expired due to Fees

• Current Assignee: Trend Micro Inc.
• Original Assignee: TippingPoint Technologies, Inc. (Trend Micro Inc.)
• Inventors: Willebeek-LeMair, Marc, Werner, Jon H., Smith, Brian C., Kolbly, Donovan M., Cox, Dennis J., Webster, Francis S. III, Buckman, Charles R., Blackard, Joe Wayne, Cantrell, Craig S.
• Primary Examiner(s): Moore, Jr.; Michael J
• Assistant Examiner(s): Duong; Duc T
• Application Number:
  US11/473,885
• Publication Number:
  US 20060239273A1
• Time in Patent Office: 1,271 Days
• Field of Search: 370/229, 370/230, 370/230.1, 370/231, 370/235, 370/252, 709/224, 709/226
• US Class Current: 370/231
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1485 Tariff-related aspects
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/2416 Real-time traffic
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures

Abstract

A system and method provides a broadband network node for a best effort network such as the Internet or intranets which supports the inexpensive and rapid deployment of services to the best efforts network. Separate data path and control path mechanisms allow high-speed data transfers with parallel processing flows for the data path that are controlled across data flows by the control path. Packets are classified, modified and shaped to enable the service on the network with an accountant to track packet traffic for control and billing purposes. A series of processing blades perform a modification function for each blade that processes packets according to classifications. The processing blades are modular and scalable for insertion in the broad band switch to rapidly adapt the broadband network node for new services.

Claims

1. A method for providing a service on a packet-based network, the method comprising:

monitoring network traffic with a processor to detect control protocol information;

extracting control protocol information from the network traffic;

using reflective programming to create a new dataflow program for monitoring packets associated with at least some of the extracted control protocol information; and

monitoring the network traffic with the new dataflow program;

wherein the new dataflow program comprises rules based on IP addresses extracted from MAC IP mapping.

2. A method for providing a service on a packet-based network, the method comprising:

monitoring network traffic with a processor to detect control protocol information;

extracting control protocol information from the network traffic;

using reflective programming to create a new dataflow program for monitoring packets associated with at least some of the extracted control protocol information; and

monitoring the network traffic with the new dataflow program;

wherein the control protocol information comprises a lookup request to a first server for the IP address and port number of a second server having predetermined information.

3. The method of claim 2 wherein the new dataflow program comprises instructions to create another dataflow program.