Inspection context caching for deep packet inspection
AssigneeForcepoint LLC
InventorsValtteri RAHKONEN, Kari NURMELA
Life of this patent
Estimating the term…
Abstract
A method, system, and computer-usable medium are disclosed for performing deep packet inspection of network traffic, comprising: receiving a unit of one or more network packets, calculating a calculated fingerprint for data within the unit, determining a current inspection context, determining whether the calculated fingerprint and the current inspection context matches an entry stored in a cache, wherein the entry includes a stored fingerprint and a cached inspection context, and performing operations associated with deep packet inspection of the unit based on whether the calculated fingerprint and the current inspection context match the entry.
Claims15
A computer-implementable method for performing inspection of network traffic, comprising:
- receiving a unit of one or more network packets;
- calculating a calculated fingerprint for data within the unit;
- determining a current inspection context;
- determining whether the calculated fingerprint and the current inspection context matches an entry stored in a cache, wherein the entry includes a stored fingerprint and a cached inspection context;
- and
- performing operations associated with deep packet inspection of the unit based on whether the calculated fingerprint and the current inspection context match the entry.
A system comprising:
- a processor;
- a data bus coupled to the processor;
- and
- a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
- receiving a unit of one or more network packets;
- calculating a calculated fingerprint for data within the unit;
- determining a current inspection context;
- determining whether the calculated fingerprint and the current inspection context matches an entry stored in a cache, wherein the entry includes a stored fingerprint and a cached inspection context;
- and
- performing operations associated with deep packet inspection of the unit based on whether the calculated fingerprint and the current inspection context match the entry.
A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:
- receiving a unit of one or more network packets;
- calculating a calculated fingerprint for data within the unit;
- determining a current inspection context;
- determining whether the calculated fingerprint and the current inspection context matches an entry stored in a cache, wherein the entry includes a stored fingerprint and a cached inspection context;
- and
- performing operations associated with deep packet inspection of the unit based on whether the calculated fingerprint and the current inspection context match the entry.
Dependencies are inferred from the claim text.