Method and apparatus for high-speed processing of structured application messages in a network device

• US 8,549,171 B2
• Filed: 03/24/2005
• Issued: 10/01/2013
• Est. Priority Date: 12/06/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Ramarao, Karempudi, Anthias, Tefcros, Potti, Sunil, Kumar, Sandeep, Cho, Stephen, Chan, Alex Yiu-Man, Jin, Yi, Ho, Ricky
• Primary Examiner(s): Nguyen, Thu
• Assistant Examiner(s): GREENE, JOSEPH L
• Application Number:
  US11/089,794
• Publication Number:
  US 20060123425A1
• Time in Patent Office: 3,113 Days
• Field of Search: 709/238, 709/239, 709/240, 709/241, 709/242
• US Class Current: 709/238
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

A method is disclosed for high-speed processing of structured application messages in a network device. According to one aspect, a network device receives a set of message classification rules that have been prepared beforehand by a system administrator or customer. The system analyzes the message classification rules to determine what part(s) of the message are necessary to classify a message according to the message classification rules. This allows the system to consider only the relevant parts of the message and ignore the rest of the message. The system extracts the portion of the message necessary for classifying the message and classifies the message using the values of the extracted information and the message classification rules. A unique sequence of operations is implied by the message classification and those operations must then be applied to the message.

Claims

1. A method for high-speed processing of structured application messages in a network device, the method comprising the computer-implemented steps of:

receiving, from user specified input, a plurality of message classification requirements;

wherein the message classification requirements specify rules used to classify a structured application layer message;

wherein the message classification requirements include operations to be performed on a classified structured application layer message;

identifying, in the message classification requirements at the network device, a reference to a classification portion of the structured application layer message that is used to classify the message, and to an operation portion of the structured application layer message that is used to perform the operations;

determining one or more XPath expressions, based on the reference to the classification portion, that indicate the portion of the structured application layer message used to classify the message;

determining one or more location identifiers, based on the reference to the operation portion, that indicate the portion of the structured application layer message used to perform the operations;

receiving the structured application layer message at the network device;

wherein the structured application layer message is formed from two or more Internet Protocol (IP) payloads of two or more IP packets;

extracting, based on the one or more XPath expressions, an extracted portion of message information needed to classify the structured application layer message; and

wherein the extracted portion may be used to perform at least one operation on the application layer message;

using only the extracted portion of the message information, classifying the structured application layer message according to the message classification requirements;

performing the at least one operation on the classified message, further comprising only accessing information indicated by the one or more location identifiers;

wherein information in the structured application layer message that is not at locations indicated by the one or more XPath expressions and the one or more location identifiers is not extracted;

wherein the method is performed by one or more processors.

2. A method as recited in claim 1, wherein the at least one operation sends the message to an appropriate destination.

3. A method as recited in claim 2, wherein the appropriate destination is specified by the message classification requirements.

4. A method as recited in claim 1, wherein the at least one operation modifies content of the message.

5. A method as recited in claim 1, wherein the at least one operation stores the message in a local database on the network device.

6. A method as recited in claim 1, wherein the at least one operation stores the message in a database external to the network device.

7. A method as recited in claim 1, wherein the at least one operation modifies a part of the message and/or adds information to the message.

8. A method as recited in claim 1, wherein the extracting step is performed in a custom hardware chip.

9. A method as recited in claim 1, wherein performing at least one operation on the classified message is performed in a custom hardware chip.

10. A computer-readable volatile or non-volatile medium carrying one or more sequences of instructions for high-speed processing of structured application messages in a network device, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

receiving, from user specified input, a plurality of message classification requirements;

wherein the message classification requirements specify rules used to classify a structured application layer message;

wherein the message classification requirements include operations to be performed on a classified structured application layer message;

identifying, in the message classification requirements at the network device, a reference to a classification portion of the structured application layer message that is used to classify the message, and to an operation portion of the structured application layer message that is used to perform the operations;

determining one or more XPath expressions, based on the reference to the classification portion, that indicate the portion of the structured application layer message used to classify the message;

determining one or more location identifiers, based on the reference to the operation portion, that indicate the portion of the structured application layer message used to perform the operations;

receiving the structured application layer message at the network device;

wherein the structured application layer message is formed from two or more Internet Protocol (IP) payloads of two or more IP packets;

extracting, based on the one or more XPath expressions, an extracted portion of the message information needed to classify the structured application layer message; and

wherein the extracted portion may be used to perform at least one operation on the application layer message;

using only the extracted portion of the message information, classifying the structured application layer message according to the message classification requirements;

performing the at least one operation on the classified message, further comprising only accessing information indicated by the one or more location identifiers;

wherein information in the structured application layer message that is not at locations indicated by the one or more XPath expressions and the one or more location identifiers is not extracted.

11. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein the at least one operation sends the message to an appropriate destination.

12. A computer-readable volatile or non-volatile medium as recited in claim 11, wherein the appropriate destination is specified by the message classification requirements.

13. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein the at least one operation modifies content of the message.

14. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein the at least one operation stores the message in a local database on the network device.

15. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein the at least one operation stores the message in a database external to the network device.

16. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein the at least one operation modifies a part of the message and/or adds information to the message.

17. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein the extracting step is performed in a custom hardware chip.

18. A computer-readable volatile or non-volatile medium as recited in claim 10, wherein performing at least one operation on the classified message is performed in a custom hardware chip.

19. An apparatus for high-speed processing of structured application messages, comprising:

one or more processors;

a module for receiving, from user specified input, a plurality of message classification requirements;

wherein the message classification requirements specify rules used to classify a structured application layer message;

wherein the message classification requirements include operations to be performed on a classified structured application layer message;

a module for identifying, in the message classification requirements at the network device, a reference to a classification portion of the structured application layer message that is used to classify the message, and to an operation portion of the structured application layer message that is used to perform the operations;

a module for determining one or more XPath expressions, based on the reference to the classification portion, that indicate the portion of the structured application layer message used to classify the message;

a module for determining one or more location identifiers, based on the reference to the operation portion, that indicate the portion of the structured application layer message used to perform the operations;

a module for receiving the structured application layer message at the network device;

wherein the structured application layer message is formed from two or more Internet Protocol (IP) payloads of two or more IP packets;

a module for extracting, based on the one or more XPath expressions, an extracted portion of the message information needed to classify the structured application layer message; and

wherein the extracted portion may be used to perform at least one operation on the application layer message;

a module for classifying the structured application layer message according to the message classification requirements and using only the extracted portion of the message information

a module for performing the at least one operation on the classified message, further comprising a module for only accessing information indicated by the one or more location identifiers;

wherein information in the structured application layer message that is not at locations indicated by the one or more XPath expressions and the one or more location identifiers is not extracted.

20. An apparatus as recited in claim 19, wherein the at least one operation sends the message to an appropriate destination.

21. An apparatus as recited in claim 20, wherein the appropriate destination is specified by the message classification requirements.

22. An apparatus as recited in claim 19, wherein the at least one operation modifies content of the message.

23. An apparatus as recited in claim 19, wherein the at least one operation stores the message in a local database on the network device.

24. An apparatus as recited in claim 19, wherein the at least one operation stores the message in a database external to the network device.

25. An apparatus as recited in claim 19, wherein the at least one operation modifies a part of the message and/or adds information to the message.

26. An apparatus as recited in claim 19, wherein the extracting is performed in a custom hardware chip.

27. An apparatus as recited in claim 19, wherein performing at least one operation on the classified message is performed in a custom hardware chip.

28. An apparatus for high-speed processing of structured application messages, comprising:

one or more processors;

means for receiving, from a user, a plurality of message classification requirements;

wherein the message classification requirements specify rules used to classify a structured application layer message;

wherein the message classification requirements include operations to be performed on a classified structured application layer message;

means for identifying, in the message classification requirements at the network device, a reference to a classification portion of the structured application layer message that is used to classify the message, and to an operation portion of the structured application layer message that is used to perform the operations;

means for determining one or more XPath expressions, based on the reference to the classification portion, that indicate the portion of the structured application layer message used to classify the message;

means for determining one or more location identifiers, based on the reference to the operation portion, that indicate the portion of the structured application layer message used to perform the operations;

means for receiving the structured application layer message at the network device; and

wherein the structured application layer message is formed from two or more Internet Protocol (IP) payloads of two or more IP packets;

means for extracting, based on the one or more XPath expressions, a portion of the message information needed to classify the structured application layer message; and

wherein the extracted portion may be used to perform at least one operation on the application layer message;

means for classifying the structured application layer message according to the message classification requirements using only the extracted portion of the message information;

means for performing the at least one operation on the classified message, further comprising means for only accessing information indicated by the one or more location identifiers;

wherein information in the structured application layer message that is not at locations indicated by the one or more XPath expressions and the one or more location identifiers is not extracted.

29. An apparatus as recited in claim 28, wherein the at least one operation sends the message to an appropriate destination.

30. An apparatus as recited in claim 29, wherein the appropriate destination is specified by the message classification requirements.

31. An apparatus as recited in claim 28, wherein the at least one operation modifies content of the message.

32. An apparatus as recited in claim 28, wherein the at least one operation stores the message in a local database on the network device.

33. An apparatus as recited in claim 28, wherein the at least one operation stores the message in a database external to the network device.

34. An apparatus as recited in claim 28, wherein the at least one operation modifies a part of the message and/or adds information to the message.