Performing message payload processing functions in a network element on behalf of an application

• US 7,987,272 B2
• Filed: 12/06/2004
• Issued: 07/26/2011
• Est. Priority Date: 12/06/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Kumar, Sandeep, Rajendran, Saravanakumar, Ho, Ricky, Anthias, Tefcros
• Primary Examiner(s): Follansbee; John
• Assistant Examiner(s): Anwari; Maceeh
• Application Number:
  US11/005,978
• Publication Number:
  US 20060123467A1
• Time in Patent Office: 2,423 Days
• Field of Search: 709/227
• US Class Current: 709/227
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion

Abstract

A method is disclosed for performing message payload processing functions in a network element on behalf of an application. According to one aspect, a network element receives user-specified input that indicates a particular message classification. The network element also receives one or more data packets. Based on the data packets, the network element determines that an application layer message, which is collectively contained in payload portions of the data packets, matches the particular message classification. The network element processes at least a portion of the message by performing, on behalf of the application to which the message is directed, and relative to at least the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification.

Claims

1. A method of performing message payload processing functions in a network element on behalf of an application, the method comprising the computer-implemented steps of:

receiving user-specified input at the network element;

intercepting, at the network element, one or more data packets comprising network layer or transport layer headers having an address of a destination which destination differs from the network element;

determining, based on the one or more data packets, whether an application layer message, collectively contained in one or more payloads of the one or more data packets, matches a message classification;

in response to determining that the application layer message does not match a message classification, forwarding the data packets to the destination address without performing any user-specified actions;

in response to determining that the application layer message matches a particular message classification, processing at least a portion of the application layer message by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the application layer message comprises a multi-part MIME message, and wherein processing at least a portion of the application layer message includes handling each part of the multi-part MIME message separately from each other part;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application;

wherein at least one of the one or more actions comprises modifying the portion of the message to produce a modified message;

forwarding the modified message in new data packets to the destination;

wherein the one or more data packets are destined for a first destination, and wherein the new data packets are destined for one or more destinations that include a second destination that differs from the first destination;

wherein the method is performed by one or more computer devices.

2. A method as recited in claim 1, wherein processing the portion of the application layer message comprises separating the contents of the application layer message from the remainder of the one or more data packets and inspecting the contents in a manner that is based on semantics associated with the contents.

3. A method as recited in claim 1, wherein the user-specified input indicates that the one or more actions are to be associated with the particular message classification.

4. A method as recited in claim 1, further comprising:

sending, from the network element, one or more data packets that contain the modified message.

5. A method as recited in claim 1, wherein performing the one or more actions comprises performing the one or more actions in an order indicated in the user-specified input.

6. A method as recited in claim 1, wherein determining the portion of a message comprises assembling, at the network element, contents of payload portions of two or more of the data packets.

7. A method as recited in claim 1, wherein at least one of the one or more actions comprises preventing the one or more data packets from being delivered to a destination for which the one or more data packets are destined.

8. A method as recited in claim 1, wherein at least one of the one or more actions comprises writing at least a part of the message to a log.

9. A method as recited in claim 1, wherein at least one of the one or more actions comprises encrypting at least a portion of the message.

10. A method as recited in claim 1, wherein at least one of the one or more actions comprises signing at least a portion of the message.

11. A method as recited in claim 1, wherein at least one of the one or more actions comprises verifying at least a portion of the message.

12. A method as recited in claim 1, wherein at least one of the one or more actions comprises sending, to a source from which the one or more data packets originated, a response that is cached at the network element.

13. A method as recited in claim 1, wherein the network element is a network switch or router.

14. A method as recited in claim 1, wherein the portion of the message is formatted, changed, or transformed in a message format that differs from a message format in which the portion of the message was formatted, changed, or transformed when the one or more data packets were received at the network element.

15. A method as recited in claim 1, wherein the portion of the message is carried in an application layer protocol that differs from the application layer protocol in which the message was carried when the one or more data packets were received at the network element.

16. A method as recited in claim 1, further comprising:

encapsulating the portion of the message within a message that contains a header that indicates one or more actions taken by a previous node.

17. A non-transitory volatile or non-volatile computer-readable medium carrying one or more sequences of instructions for performing message payload processing functions in a network element on behalf of an application, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

receiving user-specified input at the network element;

intercepting, at the network element, one or more data packets comprising network layer or transport layer headers having an address of a destination which destination differs from the network element;

determining, based on the one or more data packets, whether an application layer message, collectively contained in one or more payloads of the one or more data packets, matches a message classification;

in response to determining that the application layer message does not match a message classification, forwarding the data packets to the destination address without performing any user-specified actions;

in response to determining that the application layer message matches a particular message classification, processing at least a portion of the application layer message by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the application layer message comprises a multi-part MIME message, and wherein processing at least a portion of the application layer message includes handling each part of the multi-part MIME message separately from each other part;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application;

wherein at least one of the one or more actions comprises modifying the portion of the message to produce a modified message;

forwarding the modified message in new data packets to the destination;

wherein the one or more data packets are destined for a first destination, and wherein the new data packets are destined for one or more destinations that include a second destination that differs from the first destination.

30. A medium as recited in claim 17, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out separating the contents of the application layer message from the remainder of the one or more data packets and inspecting the contents in a manner that is based on semantics associated with the contents.

31. A medium as recited in claim 17, wherein the user-specified input indicates that the one or more actions are to be associated with the particular message classification.

32. A medium as recited in claim 17, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out sending, from the network element, one or more data packets that contain the modified message.

33. A medium as recited in claim 17, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out performing the one or more actions in an order indicated in the user-specified input.

34. A medium as recited in claim 17, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out assembling, at the network element, contents of payload portions of two or more of the data packets.

35. A medium as recited in claim 17, wherein at least one of the one or more actions comprises preventing the one or more data packets from being delivered to a destination for which the one or more data packets are destined.

36. A medium as recited in claim 17, wherein at least one of the one or more actions comprises signing at least a portion of the message.

37. A medium as recited in claim 17, wherein at least one of the one or more actions comprises sending, to a source from which the one or more data packets originated, a response that is cached at the network element.

38. A medium as recited in claim 17, wherein the portion of the message is formatted, changed, or transformed in a message format that differs from a message format in which the portion of the message was formatted, changed, or transformed when the one or more data packets were received at the network element.

39. A medium as recited in claim 17, wherein the portion of the message is carried in an application layer protocol that differs from the application layer protocol in which the message was carried when the one or more data packets were received at the network element.

18. An apparatus for performing message payload processing functions in a network element on behalf of an application, comprising:

a network interface that is coupled to a data network for receiving one or more packet flows therefrom;

a processor;

one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of;

receiving user-specified input at the network element;

intercepting, at the network element, one or more data packets comprising network layer or transport layer headers having an address of a destination which destination differs from the network element;

determining, based on the one or more data packets, whether an application layer message, collectively contained in one or more payloads of the one or more data packets, matches a message classification;

in response to determining that the application layer message does not match a message classification, forwarding the data packets to the destination address without performing any user-specified actions; and

in response to determining that the application layer message matches a particular message classification, processing at least a portion of the application layer message by performing, relative to the portion of the message, one or more actions that are (a) specified in the user-specified input and (b) associated with the particular message classification;

wherein the application layer message comprises a multi-part MIME message, and wherein processing at least a portion of the application layer message includes handling each part of the multi-part MIME message separately from each other part;

wherein the message is directed to the application, and wherein the actions are performed on behalf of the application;

wherein at least one of the one or more actions comprises modifying the portion of the message to produce a modified message;

forwarding the modified message in new data packets to the destination;

wherein the one or more data packets are destined for a first destination, and wherein the new data packets are destined for one or more destinations that include a second destination that differs from the first destination.

19. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out separating the contents of the application layer message from the remainder of the one or more data packets and inspecting the contents in a manner that is based on semantics associated with the contents.

20. An apparatus as recited in claim 18, wherein the user-specified input indicates that the one or more actions are to be associated with the particular message classification.

21. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out sending, from the network element, one or more data packets that contain the modified message.

22. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out performing the one or more actions in an order indicated in the user-specified input.

23. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out assembling, at the network element, contents of payload portions of two or more of the data packets.

24. An apparatus as recited in claim 18, wherein at least one of the one or more actions comprises preventing the one or more data packets from being delivered to a destination for which the one or more data packets are destined.

25. An apparatus as recited in claim 18, wherein at least one of the one or more actions comprises signing at least a portion of the message.

26. An apparatus as recited in claim 18, wherein at least one of the one or more actions comprises sending, to a source from which the one or more data packets originated, a response that is cached at the network element.

27. An apparatus as recited in claim 18, wherein the portion of the message is formatted, changed, or transformed in a message format that differs from a message format in which the portion of the message was formatted, changed, or transformed when the one or more data packets were received at the network element.

28. An apparatus as recited in claim 18, wherein the portion of the message is carried in an application layer protocol that differs from the application layer protocol in which the message was carried when the one or more data packets were received at the network element.

29. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions comprise instructions which, when executed by the processor, cause the processor to carry out encapsulating the portion of the message within a message that contains a header that indicates one or more actions taken by a previous node.