Data stream classification
First Claim
1. A logic encoded in one or more non-transitory computer-readable tangible storage media for execution and when executed operable to perform a method, the method comprising:
- controlling a computer to identify packets associated with a data stream, where the data stream comprises a sequence of packets transmitted from a source device to a destination device and where the data stream was originated by a voice over internet protocol (VoIP) application;
controlling the computer to update a set of characterization data associated with the data stream based, at least in part, on a piece of information associated with the sequence of packets, where the set of characterization data facilitates identifying the VoIP application that originated the data stream;
where the set of characterization data comprises a set of classification statistics computed from data specific to the sequence of packets;
controlling the computer to assign a data stream classifier to the data stream, where the data stream classifier is determined by comparing a portion of the set of characterization data to a set of identification data upon determining that the set of characterization data indicates that a threshold probability that the data stream is able to be classified has been achieved; and
controlling the computer to store an association between the data stream classifier and the data stream and to provide a signal associated with the data stream classifier.
1 Assignment
0 Petitions
Accused Products
Abstract
Systems, methods, and other embodiments associated with data stream classification are described. One example method includes identifying packets associated with the data stream. The example method may also include updating a set of characterization data associated with the data stream based on information associated with a packet. The example method may also include assigning a data stream classifier to the data stream by comparing characterization data to identification data upon determining that the set of characterization data indicates that the data stream is able to be classified. The example method may also include providing a signal associated with the data stream classifier.
-
Citations
33 Claims
-
1. A logic encoded in one or more non-transitory computer-readable tangible storage media for execution and when executed operable to perform a method, the method comprising:
-
controlling a computer to identify packets associated with a data stream, where the data stream comprises a sequence of packets transmitted from a source device to a destination device and where the data stream was originated by a voice over internet protocol (VoIP) application; controlling the computer to update a set of characterization data associated with the data stream based, at least in part, on a piece of information associated with the sequence of packets, where the set of characterization data facilitates identifying the VoIP application that originated the data stream; where the set of characterization data comprises a set of classification statistics computed from data specific to the sequence of packets; controlling the computer to assign a data stream classifier to the data stream, where the data stream classifier is determined by comparing a portion of the set of characterization data to a set of identification data upon determining that the set of characterization data indicates that a threshold probability that the data stream is able to be classified has been achieved; and controlling the computer to store an association between the data stream classifier and the data stream and to provide a signal associated with the data stream classifier. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16)
-
-
17. A system, comprising:
-
a data store to store a set of classification information associated with a data stream, where the set of classification information comprises a set of classification statistics and a data stream classifier, where the data stream comprises a sequence of packets transmitted from a source device to a destination device, and where the data stream was originated by a voice over internet protocol (VoIP) application; a data recording logic to update the set of classification statistics and a set of characterization data associated with the data stream in the data store, based on lightweight statistical computations performed on data specific to the sequence of packets from the data stream, where a lightweight computation is a computation that relies on properties of the sequence of packets, where the set of characterization data facilitates identifying the VoIP application that originated the data stream; a classification logic to update the data stream classifier in the data store, where the data stream classifier is updated based, at least in part, on comparing a portion of the set of the classification statistics to a set of identification data upon determining that a portion of the set of the classification statistics indicates that a threshold probability that the data stream is able to be classified has been achieved. - View Dependent Claims (18, 19, 20, 21, 22, 23)
-
-
24. A system, comprising:
-
means for storing a set of classification statistics associated with a data stream and for storing a data stream classifier; where the set of classification statistics is computed from data specific to a sequence of packets included in the data stream; means for updating the set of classification statistics and a set of characterization data associated with the data stream based, at least in part, on a piece of information associated with the sequence of packets from the data stream, where the data set of characterization data facilitates identifying a VoIP application with which the data stream is associated; and means for transforming the data stream classifier by comparing a portion of the set of classification statistics to a set of identification data upon determining that the set of classification statistics indicates that that a threshold probability that the data stream is able to be classified has been achieved. - View Dependent Claims (25, 26, 27, 28)
-
-
29. A method comprising:
-
controlling a computer to identify packets associated with a data stream, where the data stream comprises a sequence of packets transmitted from a source device to a destination device and where the data stream was originated by a voice over internet protocol (VoIP) application; controlling the computer to update a set of characterization data associated with the data stream based, at least in part, on a piece of information associated with the sequence of packets, where the set of characterization data facilitates identifying the VoIP application that originated the data stream, where the set of characterization data comprises a set of classification statistics computed from data associated with the sequence of packets; controlling the computer to assign a data stream classifier to the data stream, where the data stream classifier is determined by comparing a portion of the set of characterization data to a set of identification data upon determining that the set of characterization data indicates that a threshold probability that the data stream is able to be classified has been achieved; and controlling the computer to store an association between the data stream classifier and the data stream and to provide a signal associated with the data stream classifier; wherein the method is performed by one or more computing devices. - View Dependent Claims (30, 31, 32, 33)
-
Specification