System and method for processing network packet flows

• US 8,125,905 B2
• Filed: 09/03/2009
• Issued: 02/28/2012
• Est. Priority Date: 07/02/2001
• Status: Expired due to Term

• Current Assignee: Trend Micro Inc.
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Willebeek-LeMair, Marc, Blackard, Joe Wayne, Webster, Francis S. III, Buckman, Charles R, Cox, Dennis J, Kolby, Donovan M, Cantrell, Craig S, Smith, Brian C, Werner, John H
• Primary Examiner(s): Phillips, Hassan
• Assistant Examiner(s): DUONG, DUC T
• Application Number:
  US12/553,664
• Publication Number:
  US 20090323550A1
• Time in Patent Office: 908 Days
• Field of Search: 370/229, 370/230, 370/230.1, 370/231, 370/235, 370/252, 709/224, 709/226, 717/127, 717/131
• US Class Current: 370/231
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1485 Tariff-related aspects
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/22 Traffic shaping
• CPC Class Codes: H04L 47/2416 Real-time traffic
• CPC Class Codes: H04L 47/2441 relying on flow classification, e.g. using integrated services [IntServ]
• CPC Class Codes: H04L 47/2475 for supporting traffic characterised by the type of applications
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/163 In-band adaptation of TCP data exchange; In-band control procedures

Abstract

A system and method provides a broadband network node for a best effort network such as the Internet or intranets which supports the inexpensive and rapid deployment of services to the best efforts network. Separate data path and control path mechanisms allow high-speed data transfers with parallel processing flows for the data path that are controlled across data flows by the control path. Packets are classified, modified and shaped to enable the service on the network with an accountant to track packet traffic for control and billing purposes. A series of processing blades perform a modification function for each blade that processes packets according to classifications. The processing blades are modular and scalable for insertion in the broad band switch to rapidly adapt the broadband network node for new services.

Claims

1. A method for providing a service on a packet-based network, the method comprising:

monitoring network traffic with a processor to detect control protocol information;

extracting the control protocol information from the network traffic;

using reflective programming responsive to the extracted control protocol information to dynamically create a new dataflow program for monitoring packets associated with at least some of the extracted control protocol information; and

monitoring further network traffic with the new dataflow program.

2. The method of claim 1 wherein the processor comprises a network processor.

3. The method of claim 1 wherein monitoring the network traffic further comprises:

monitoring the network traffic with the processor running a first dataflow program to detect the control protocol information, wherein the first dataflow program is different from the new dataflow program.

4. The method of claim 3, wherein creating the new dataflow program is performed by the first dataflow program.

5. The method of claim 1 wherein monitoring the network traffic comprises:

monitoring the network traffic with the processor running a rules-based program to detect the control protocol information.

6. The method of claim 1 wherein the control protocol information comprises host and port information from network traffic associated with an FTP data.

7. The method of claim 6 wherein the new dataflow program comprises a host/port quadruple associated with the FTP data.

8. The method of claim 6 wherein the new dataflow program associates the FTP data with a class of service.

9. The method of claim 1 wherein the control protocol information comprises information in DHCP requests and responses.

10. The method of claim 1 wherein the control protocol information comprises information in DNS requests and responses.

11. The method of claim 1, further comprising:

the new dataflow program using reflective programming, responsive to information in the further network traffic monitored by the new dataflow program, to dynamically create a second new dataflow program for monitoring network traffic.

12. The method of claim 1, wherein the new dataflow program provides a service different from a service provided by the first dataflow program.

13. A network node comprising:

a processor;

a first dataflow program executable on the processor to;

extract control protocol information from network traffic received by the network node;

use reflective programming responsive to the extracted control protocol information to dynamically create a new dataflow program for monitoring packets associated with at least some of the extracted control protocol information; and

wherein the new dataflow program is executable on the processor to monitor further network traffic, wherein the new dataflow program is to provide a service different from a service to be provided by the first dataflow program.

14. The network node of claim 13, wherein the new dataflow program is executable to use reflective programming, responsive to information in the further network traffic monitored by the new dataflow program, to dynamically create a second new dataflow program for monitoring network traffic.