The Design And Implementation Of Packet Classification Based On Rule Table

With the rapid development of Internet, various net traffics are emerging, and this requires the network device to provide wider bandwidth and quicker process ability. Packet classification is essential for policy-based firewall deployment, intrusion detection, differentiated services, and Virtual Private Network. So the research in packet classification is significant.This thesis firstly introduces the PMON (Packet over SONET Monitor) project, such as the hardware and software structure, functions and applications. Then it evaluates and analyzes the background of packet classification techniques, describes the main idea and performance of some typical algorithms such as estimate principle. What is more, the realization way is also given.After that, the thesis brings forward the design and implementation of a rule-based packet classification algorithm. According to the layered structure of TCP/IP networks, it discusses the relations between muti-protocols, the packet header position, the packet information extracting, the next header extraction by rule table, and the production of internal search key. Based on the aforementioned algorithm, this thesis brings forward the detailed implementation of the rule-based packet classification system, the performance of the system and the system test scheme. In a word, this thesis presents a whole packet classification solution scheme.