Method and apparatus for providing multi-protocol, multi-stage, real-time frame classification

A multi-protocol, multi-stage, real-time frame classifier, comprising:

• a preliminary multi-protocol frame composition analyzer for performing preliminary multi-protocol frame classification for incoming frames;
• a parsing instruction generator for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions;
• and
• a multi-stage parsing engine for providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.

An article of manufacture comprising a program storage medium readable by a computer, the medium tangibly embodying one or more programs of instructions executable by the computer to perform a method for parsing frames in a network flow, the method comprising:

• performing preliminary multi-protocol frame classification for incoming frames;
• processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions;
• and
• providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.

A method for handling packets, comprising:

• performing preliminary multi-protocol frame classification for incoming frames;
• processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions;
• and
• providing parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.

An article of manufacture comprising a program storage medium readable by a computer, the medium tangibly embodying one or more programs of instructions executable by the computer to perform a method for parsing frames in a network flow, the method comprising:

• performing preliminary multi-protocol frame classification for incoming frames;
• processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions;
• and
• providing parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.

A multi-protocol, multi-stage, real-time frame classifier, comprising:

• a preliminary multi-protocol frame composition analyzer for performing preliminary multi-protocol frame classification for incoming frames;
• a parsing instruction generator for processing at least the incoming frame and the preliminary multi-protocol frame classification to provide parsing instructions;
• and
• a parsing engine for providing multi-stage parsing of the incoming frame according to the parsing instructions to generate search results presenting information about the incoming frame.