Method for modifying packets that meet a particular criteria as the packets pass between two layers in a network

• US 5,481,735 A
• Filed: 12/28/1992
• Issued: 01/02/1996
• Est. Priority Date: 12/28/1992
• Status: Expired due to Term

• Current Assignee: Apple Inc.
• Original Assignee: Apple Computer Incorporated (Apple Inc.)
• Inventors: Strelau, Klaus, Mortensen, Craig, Roots, Logan
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US07/999,281
• Time in Patent Office: 1,100 Days
• Field of Search: 370/60.17, 370/85.4, 370/94.1, 395/200, 395/325, 395/500, 395/800, 371/32
• US Class Current: 709/246
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and apparatus in a computer system coupled to a network for altering information in said network by the computer system. A process is inserted between two lower layers of the ISO/OSI model. The process then receives a packet from a first layer of the ISO/OSI model, and determines whether a criteria comprising a set of conditions has been determined in the packet. If any of the set of criteria is present in the packet then the packet is transformed into a modified packet according to a predefined action. Then, the modified packet is transmitted to a second layer of the ISO/OSI model. In different embodiments the layers may be either higher or lower relative to one another in order that incoming or outgoing packets be modified. The method may also be performed under control of a user-generated script, or by remote control from another node. The method may also employ user-generated processes for condition (criteria) checking and/or modifications.

Claims

1. A method for selectively modifying packets or the transmission of packets transmitted between a first layer in the ISO/OSI model in a network system and a second layer in the ISO/OSI model in a network system, the first layer in the ISO/OSI model being different from and adjacent to the second layer in the ISO/OSI model, the network system including a first process for translating packets from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, the packet having a plurality of properties including a packet size, a packet offset and a plurality of packet traits, the method comprising the steps of:

A) receiving from a user a set of user-specified conditions and a user-specified operation associated with a set of user-specified conditions by;

A1) generating a first display of a first plurality of user interface controls for specifying said set of user-specified conditions;

A2) receiving through user interaction with said first plurality of user interface controls user input that specifies said set of user-specified conditions, wherein each of said user-specified conditions designates an arithmetic relationship between a property of packets and a specified value;

A3) generating a second display of a second plurality of user interface controls for specifying said user-specified operation associated with said set of user-specified conditions;

A4) receiving through user interaction with said second plurality of user interface controls user input that specifies said user-specified operation, said user-specified operation being an operation that either modifies the packet or modifies transmission of the packet;

B) causing a second process to execute when an attempt is made to transmit a packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said second process performing the steps of;

B1) inspecting said packet to determine whether the packet satisfies said set of user-specified conditions;

B2) if said packet satisfies said set of user-specified conditions, then performing a user-specified operation on said packet; and

C) invoking said first process after executing said second process.

2. The method of claim 1 wherein said packet initially includes a first set of data, wherein said step of performing said user-specified operation includes replacing said first set of data in said packet with a second set of data.

3. The method of claim 2 wherein said step of performing said user-specified operation comprises modifying data contained in each of the defined protocol traits of the OSI/ISO protocol stacks.

4. The method of claim 1 wherein said step of performing said user-specified operation includes truncating said packet.

5. The method of claim 1 wherein said step of performing said user-specified operation includes increasing the length of said packet.

6. The method of claim 1 wherein said step of performing said user-specified operation includes retransmitting said packet N number of times on said network system.

7. The method of claim 6 wherein said step of retransmitting is timed such that a time t transpires between each retransmission of said packet.

8. The method of claim 7 wherein said step of retransmitting is timed such that a time t_i transpires between an initial transmission of said packet and a first of said N retransmissions of said packet on said network system.

9. The method of claim 1 wherein said method includes the step of receiving input from a user, wherein the input selects a plurality of network ports in said network system, wherein the method is performed only on the plurality of network ports selected by the user.

10. The method of claim 1 wherein said steps of receiving through user interaction with said first plurality of user interface controls user input that specifies said set of user-specified conditions and receiving through user interaction with said second plurality of user interface controls user input that specifies said user-specified action include receiving a user-generated script which specifies said user-specified set of conditions and said user-specified operation.

11. The method of claim 1 wherein the first layer is higher in the ISO/OSI model than the second layer.

12. The method of claim 1 wherein the first layer is lower in the ISO/OSI model than the second layer.

13. The method of claim 1 wherein said set of user-specified conditions includes at least one condition that is based on an output of a pseudo random number generator.

14. The method of claim 1 wherein said step of performing said user-specified operation comprises delaying transmission of said packet for a user-specified period of time.

15. A method for selectively modifying packets or transmission between a first layer in the ISO/OSI model and a second layer in the ISO/OSI model in a network system, the first layer in the ISO/OSI model being different from and adjacent to the second layer in the ISO/OSI model, the network system including a first process for translating packets from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, the network system executing code indicated by an address stored at a predetermined location when an attempt is made to transmit a packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said address initially indicating the location of a first portion of code corresponding to said first process, the packet having a plurality of properties including a packet size, a packet offset and a plurality of packet traits, the method comprising the steps of:

A) revising said address to indicate the location of a second portion of code corresponding to a second process, wherein revising said address causes said network system to execute said second process when said attempt is made to transmit said packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said second process performing the steps of;

A1) inspecting said packet to determine whether the packet satisfies a set of user-specified conditions, wherein each of said user-specified conditions designates an arithmetic relationship between a property of said packet and a specified value;

A2) if said packet satisfies said set of user-specified conditions, then performing a user-specified operation on said packet, said user-specified operation being an operation that a user has associated with said set of user-specified condition that either modifies the packet or affects transmission of the packet; and

B) invoking said first process after executing said second process.

16. The method of claim 15 wherein said step of invoking said first process after executing said second process includes creating a reference in said second portion of code to said first portion of code.

17. A method for selectively modifying packets or transmission of between a first layer in the ISO/OSI model and a second layer in the ISO/OSI model in a network system, the first layer in the ISO/OSI model being different from and adjacent to the second layer in the ISO/OSI model, the network system including a first process for translating packets from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, the packet having a plurality of properties including a packet size, a packet offset and a plurality of packet traits, the method comprising the steps of:

A) causing a second process to execute when an attempt is made to transmit a packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said second process performing the steps of;

A1) inspecting said packet to determine whether the packet satisfies a set of user-specified conditions, wherein each of said user-specified conditions designates an arithmetic relationship between a property of said packet and a specified value;

A2) if said packet satisfies said set of user-specified conditions, then performing a user-specified operation on said packet, said user-specified operation being an operation that a user has associated with said set of user-specified condition that either modifies the packet or affects transmission of the packet; and

B) invoking said first process after executing said second process;

wherein said set of user-specified conditions further includes a first condition and a second condition, wherein said first condition is whether said second condition has been satisfied by a user-specified number of packets previously transmitted from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model.