Integrated packet inspection and modification system and network device for internet service provider market research and influence

• US 8,259,722 B1
• Filed: 09/19/2008
• Issued: 09/04/2012
• Est. Priority Date: 05/19/2008
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Kharitonov, Daniel
• Primary Examiner(s): Ton, Dang T
• Assistant Examiner(s): Connor, Brian O
• Application Number:
  US12/234,320
• Time in Patent Office: 1,446 Days
• Field of Search: 370/392, 370/401
• US Class Current: 370/392
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 49/205 Quality of Service based
• CPC Class Codes: H04L 49/50 Overload detection or protection within a single switching element

Abstract

A network router includes interfaces to receive packets, a routing engine that executes a routing protocol to maintain routing information specifying routes through a network, a packet forwarding engine forward the packets to the interfaces in accordance with the routing information, one or more advertising engine service cards comprising a packet inspection engine and an advertising engine control unit, and a set of dynamic filters that identify packets for inspection by the packet inspection engine based on characteristics of the packet. The filters direct any matching ones of the packets from the packet forwarding engine to the packet inspection engine within the advertising engine service card, and the packet inspection engine analyzes the packets to extract information from the packets based on configured advertising engine policies. The advertising engine control unit outputs commands to dynamically add and delete filters from the set of dynamic filters.

Claims

1. A network router comprising:

a plurality of interfaces configured to send and receive packets;

a routing engine comprising a control unit that executes a routing protocol to maintain routing information specifying routes through a network;

a packet forwarding engine configured by the routing engine to apply forwarding information to select next hops for the packets and forward the packets to the interfaces in accordance with the routing information;

one or more advertising engine service cards comprising a packet inspection engine and an advertising engine control unit;

wherein the packet forwarding engine stores a set of dynamic filters that identify packets for inspection by the packet inspection engine based on characteristics of the packet,

wherein the packet forwarding engine applies the set of dynamic filters to the received packets and directs any matching ones of the packets from the packet forwarding engine to the packet inspection engine within the advertising engine service card,

wherein the packet inspection engine of the advertising engine service card analyzes the packets to extract information from the packets based on configured advertising engine policies; and

wherein the advertising engine control unit outputs commands to dynamically reconfigure the packet forwarding engine of the router to dynamically add and delete filters from the set of dynamic filters applied by the packet forwarding engine.

2. The network router of claim 1,

wherein the advertising engine control unit comprises a software application interface that is responsive to pluggable software installed on the advertising engine control unit, and

wherein the pluggable software presents a user interface that allows a user to configure the advertising engine policies and the dynamic filters applied by the packet forwarding engine.

3. The network router of claim 2, wherein the pluggable software allows the user to request a report based on the information extracted from the received packets, and wherein the pluggable software generates the reports based on the request.

4. The network router of claim 2, wherein the pluggable software compiles a marketing database based on the information extracted from the received packets.

5. The network router of claim 1, wherein the packet inspection engine of the advertising engine analyzes the packets for market research purposes based on one of a keyword search of the packets, a fixed offset search of the packets, and an information correlation between fields of the packets.

6. The network router of claim 1, wherein the packet forwarding engine comprises at least one stage of a switch fabric to forward the packets to the interfaces based on the selected next hops.

7. The network router of claim 1, wherein the packet inspection module creates copies of the packets, and wherein the packet forwarding engine forwards the packets to an interface based on the selected next hops and wherein the packet inspection module directs the copies of the packets to a packet modification engine within the advertising engine service cards.

8. The network router of claim 1, wherein the advertising engine service cards further comprises a packet modification engine that modifies one or more of the packets in accordance with a policy based on the inspection by the packet inspection module, wherein the policy is configured by a user via a user interface.

9. The network router of claim 8, wherein the packet modification engine modifies one or more of the packets by rewriting application-layer data contained within a payload of each of the packets to insert at least one advertisement within the application-layer data.

10. The network router of claim 8, wherein the packet inspection engine buffers the packets and reassembles an application layer communication based on a plurality of received packets in a packet flow session.

11. The network router of claim 10, wherein the packet modification engine modifies the application layer communication by inserting, modifying or removing one or more packets that make up the application layer communication so as to insert an advertisement in the application layer communication.

12. The network router of claim 1, wherein the dynamic filter matches packets based on information contained within a header of the received packet, and specifies an action to be performed on a matching packet.

13. The network router of claim 12, wherein the dynamic filter matches packets based on one of a source address, a destination address, a port, and a protocol.

14. The network router of claim 1, wherein the routing engine routes the packets in accordance with the routing protocol.

15. The network router of claim 14, wherein the router comprises a high-end router that routes the received packets at line-rate in accordance with the routing protocol.

16. The network router of claim 1, wherein at least one of the dynamic filters includes a rate-limiting filter term that directs the packet forwarding engine to direct matching ones of the packets from the packet forwarding engine to the packet inspection engine when a rate at which the matching ones of the packets is received is below a threshold, and directs the packet forwarding engine to drop the matching ones of the packets when the rate exceeds the threshold.

17. The network router of claim 1, wherein at least one of the dynamic filters includes a filter that specifies a time period during which the filter is to be applied by the network router.

18. A method comprising:

receiving packets at a plurality of interfaces of a router;

maintaining routing information specifying routes through a network by executing a routing protocol on a control unit of a routing engine of the router;

selecting next hops for the packets within the network with a packet forwarding engine configured by the routing engine;

forwarding the packets to the interfaces in accordance with the routing information;

storing a set of dynamic filters with the packet forwarding engine, wherein the dynamic filters identify packets for inspection by a packet inspection engine configured on an advertising engine service card of the router based on characteristics of the packets;

applying the set of dynamic filters to the received packets;

directing any matching ones of the packets from the packet forwarding engine to the packet inspection engine within the advertising engine service card;

with the packet inspection engine of the advertising engine service card, analyzing the packets to extract information from the packets based on configured advertising engine policies; and

with the advertising engine service card, outputting commands to dynamically reconfigure the packet forwarding engine of the router to dynamically add and delete filters from the set of dynamic filters applied by the packet forwarding engine.

19. The method of claim 18, further comprising presenting a user interface with a pluggable software that allows a user to configure the advertising engine policies and the dynamic filters applied by the packet forwarding engine.

20. The method of claim 18, further comprising forwarding the packets to the interfaces based on the selected next hops using at least one stage of a switch fabric.

21. The method of claim 18, further comprising:

creating copies of the packets;

forwarding the packets to an interface based on the selected next hops; and

directing the copies of the packets to a packet modification engine within the advertising engine service cards.

22. The method of claim 18, further comprising:

modifying one or more of the packets in accordance with a policy based on the inspection by the packet inspection module, wherein the policy is configured by a user via a user interface.

23. The method of claim 22, wherein modifying one or more of the packets comprises rewriting application-layer data contained within a payload of each of the packets to insert at least one advertisement within the application-layer data.

24. The method of claim 18, wherein applying the set of dynamic filters to the received packets comprises matching packets based on information contained within a header of the received packets, and specifying an action to be performed on the matching packets.

25. The method of claim 18, further comprising routing the received packets at line-rate in accordance with the routing protocol.

26. The method of claim 18, further comprising:

receiving a request for a report based on the information extracted from the received packet and information extracted from a plurality of other packets received by the router; and

generating the reports based on the request.

27. The method of claim 18, further comprising compiling a marketing database based on the information extracted from the received packets.

28. The method of claim 18, wherein analyzing the packets comprises analyzing the packets for market research purposes based on one of a keyword search of the packets, a fixed offset search of the packets, and an information correlation between fields of the packets.

29. A network switch comprising:

a plurality of interfaces configured to send and receive packets;

a forwarding plane that makes forwarding decisions to select next hops for the packets and forward the packets to the interfaces in accordance with the selected next hops;

one or more advertising engine service cards comprising a packet inspection engine and an advertising engine control unit;

wherein the forwarding plane stores a set of dynamic filters that identify packets for inspection by the packet inspection engine based on characteristics of the packet,

wherein the forwarding plane applies the set of dynamic filters to the received packets and directs any matching ones of the packets from the forwarding plane to the packet inspection engine within the advertising engine service card,

wherein the packet inspection engine of the advertising engine service cards analyzes the packets to extract information from the packets based on configured advertising engine policies, and

wherein the advertising engine control unit outputs commands to dynamically reconfigure the forwarding plane of the network switch to dynamically add and delete filters from the set of dynamic filters applied by the forwarding plane.

30. A non-transitory computer-readable storage medium comprising instructions for causing a programmable processor to:

receive packets at a plurality of interfaces of a router;

maintain routing information specifying routes through a network by executing a routing protocol on a control unit of a routing engine of the router;

select next hops for the packets within the network with a packet forwarding engine configured by the routing engine;

forward the packets to the interfaces in accordance with the routing information;

store a set of dynamic filters with the packet forwarding engine, wherein the dynamic filters identify packets for inspection by a packet inspection engine configured on an advertising engine service card of the router based on characteristics of the packets;

apply the set of dynamic filters to the received packets;

direct any matching ones of the packets from the packet forwarding engine to the packet inspection engine within the advertising engine service card; and

receive commands from the advertising engine control unit to dynamically reconfigure the packet forwarding engine of the router to dynamically add and delete filters from the set of dynamic filters applied by the packet forwarding engine based on analysis of the packets by the packet inspection engine to extract information from the packets based on configured advertising engine policies.