Merunetworks, Inc.

Shishir Varma

Vaduvur Bharghavan

Sung-Wook Han

A communication system detects particular application protocols in response to their message traffic patterns, which might be responsive to packet size, average packet rate, burstiness of packet transmissions, or other message pattern features. Selected message pattern features include average packet rate, maximum packet burst, maximum future accumulation, minimum packet size, and maximum packet size. The system maintains a counter of packet tokens, each arriving at a constant rate, and maintains a queue of real packets. Each real packet is released from the queue when there is a corresponding packet token also available for release. Packet tokens overfilling the counter, and real packets overfilling the queue, are discarded. Users might add or alter application protocol descriptions to account for profiles thereof.

Recognizing application protocols by identifying message traffic patterns

Flows are grouped into flow classes, each of which is assigned flow class treatment rules, which might combine application of both firewall and QoS treatments. When a flow is identified as a member of a flow class, traffic for that flow can be treated according to treatment rules collectively with other flows assigned to that flow class. New flows not already members of an already-defined flow class are examined according to a set of flow class assignment rules, which have the effect of either identifying the proper flow class for that flow, or creating a new flow class for that new flow. For each flow, a first packet determines flow assignment, after which succeeding packets are treated according that flow. For each flow class, a first flow determines flow class assignment, after which succeeding flows are collectively treated according to that flow class.

Growing community of inventors

Bengaluru, India

Shishir Varma