US 5,481,735 AGranted

Method for modifying packets that meet a particular criteria as the packets pass between two layers in a network

AssigneeApple Computer, Inc.

InventorsCraig Mortensen, Logan Roots, Klaus Strelau

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method and apparatus in a computer system coupled to a network for altering information in said network by the computer system. A process is inserted between two lower layers of the ISO/OSI model. The process then receives a packet from a first layer of the ISO/OSI model, and determines whether a criteria comprising a set of conditions has been determined in the packet. If any of the set of criteria is present in the packet then the packet is transformed into a modified packet according to a predefined action. Then, the modified packet is transmitted to a second layer of the ISO/OSI model. In different embodiments the layers may be either higher or lower relative to one another in order that incoming or outgoing packets be modified. The method may also be performed under control of a user-generated script, or by remote control from another node. The method may also employ user-generated processes for condition (criteria) checking and/or modifications.

Claims17

Dependent claims

A method for selectively modifying packets or the transmission of packets transmitted between a first layer in the ISO/OSI model in a network system and a second layer in the ISO/OSI model in a network system, the first layer in the ISO/OSI model being different from and adjacent to the second layer in the ISO/OSI model, the network system including a first process for translating packets from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, the packet having a plurality of properties including a packet size, a packet offset and a plurality of packet traits, the method comprising the steps of:

A) receiving from a user a set of user-specified conditions and a user-specified operation associated with a set of user-specified conditions by:
A1) generating a first display of a first plurality of user interface controls for specifying said set of user-specified conditions;
A2) receiving through user interaction with said first plurality of user interface controls user input that specifies said set of user-specified conditions, wherein each of said user-specified conditions designates an arithmetic relationship between a property of packets and a specified value;
A3) generating a second display of a second plurality of user interface controls for specifying said user-specified operation associated with said set of user-specified conditions;
A4) receiving through user interaction with said second plurality of user interface controls user input that specifies said user-specified operation, said user-specified operation being an operation that either modifies the packet or modifies transmission of the packet;
B) causing a second process to execute when an attempt is made to transmit a packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said second process performing the steps of:
B1) inspecting said packet to determine whether the packet satisfies said set of user-specified conditions;
B2) if said packet satisfies said set of user-specified conditions, then performing a user-specified operation on said packet;
and
C) invoking said first process after executing said second process.

7 more elements

A method for selectively modifying packets or transmission between a first layer in the ISO/OSI model and a second layer in the ISO/OSI model in a network system, the first layer in the ISO/OSI model being different from and adjacent to the second layer in the ISO/OSI model, the network system including a first process for translating packets from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, the network system executing code indicated by an address stored at a predetermined location when an attempt is made to transmit a packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said address initially indicating the location of a first portion of code corresponding to said first process, the packet having a plurality of properties including a packet size, a packet offset and a plurality of packet traits, the method comprising the steps of:

A) revising said address to indicate the location of a second portion of code corresponding to a second process, wherein revising said address causes said network system to execute said second process when said attempt is made to transmit said packet from said first layer in the ISO/OSI model to said second layer in the ISO/OSI model, said second process performing the steps of:
A1) inspecting said packet to determine whether the packet satisfies a set of user-specified conditions, wherein each of said user-specified conditions designates an arithmetic relationship between a property of said packet and a specified value;
A2) if said packet satisfies said set of user-specified conditions, then performing a user-specified operation on said packet, said user-specified operation being an operation that a user has associated with said set of user-specified condition that either modifies the packet or affects transmission of the packet;
and
B) invoking said first process after executing said second process.

2 more elements

Dependencies are inferred from the claim text.