Method for automatically classifying traffic with enhanced hierarchy in a packet communications network

A method for automatically classifying traffic in a packet communications network, said network having any number of flows, including zero, comprising the steps of:

• determining application type of a flow;
• thereafter
• for said application type of said flow, parsing a packet of said flow into a first flow specification, said first flow specification containing information as attributes, said attributes being specific to said application type and wherein selected ones of said attributes are discoverable;
• thereupon
• matching the first flow specification of the parsing step to a plurality of classes represented by a plurality of nodes of a classification tree type, each said classification tree type node having a traffic specification;
• thereupon
• if a matching classification tree type node was found in the matching step and said matching classification tree type node indicates that further nodes can be created as a consequence of attributes thereof that are discoverable, then
• creating at least one new classification tree type node;
• thereupon
• associating said first flow specification with said at least one newly-created classification tree type node;
• and thereupon
• incorporating said at least one newly-created classification tree type node into said plurality of classification tree type nodes so that policies can be applied to traffic based only on said discoverable attributes of said at least one newly-created classification tree type node.

A system for automatically classifying traffic in a packet telecommunications network, said network having any number of flows, including zero, comprising:

• a plurality of network links upon which said traffic is carried;
• a network routing means;
• and
• a processor means operative to:
• determine application type of a flow;
• for said application type of said flow, parse a packet of said flow into a first flow specification, said first flow specification containing information as attributes, said attributes being specific to said application type and wherein selected ones of said attributes are discoverable;
• thereupon
• match the first flow specification of the parsing step to a plurality of classes represented by a plurality of nodes of a classification tree type, each said classification tree type node having a traffic specification;
• thereupon
• if a matching classification tree type node was found in the matching step and said matching classification tree type node indicates that further nodes can be created as a consequence of attributes thereof that are discoverable, then
• associate said first flow specification with said at least one newly-created classification tree type node;
• thereupon
• create at least one new classification tree type node;
• and thereupon
• incorporate said at least one newly-created classification tree type node into said plurality of classification tree type nodes so that policies can be applied to traffic based only on said discoverable attributes of said at least one newly-created classification tree type node.

A method for classifying traffic in a packet telecommunications network, said network having any number of flows, including zero, said method comprising the steps of:

• parsing a packet into a first flow specification, said first flow specification having discoverable attributes;
• thereupon,
• matching the first flow specification of the parsing step to a plurality of classes represented by a plurality of classification tree type nodes, each said classification tree type node having a traffic specification;
• thereupon,
• if a matching classification tree type node was found in the matching step and said matching classification tree type node indicates through said discoverable attributes that further nodes can be created, creating at least one new classification tree type node;
• thereupon
• associating said first flow specification with at least one more newly-created node;
• thereupon,
• displaying to a network administrator a representation of traffic according to said traffic specification for use in manual intervention.