FIELD: data networks.
SUBSTANCE: invention relates to the field of systems for monitoring and analyzing data networks. The effect is achieved by extracting Ethernet, IP and TCP/UDP headers from the packet and forming a descriptor based on them. Based on the header fields of the IP address packet, L4 protocol code, TCP/UDP ports, the HASH sum of the session is calculated. In the RAM cell, the address of which is equal to the received HASH sum of the session, a search is made for information about the already received packet with the same HASH sum of the session. Based on the results of comparison with the data from the descriptor, the package is assigned an identifier - the value of the ACTION field, on the basis of which a decision is made about further actions on the package.
EFFECT: enabling the operation of traffic pre-processing devices with ensuring the integrity of information flows transmitted via TCP/UDP sessions.
1 cl, 7 dwg, 1 tbl
| Title | Year | Author | Number |
|---|---|---|---|
| METHOD FOR DYNAMIC FILTERING OF NETWORK PACKETS BY SESSIONS | 2022 |
|
RU2779135C1 |
| A WAY TO TRACK FRAGMENTS OF PACKETS IN NETWORK TRAFFIC | 2022 |
|
RU2778462C1 |
| METHOD FOR FILTERING A PART OF PACKETS IN A NETWORK SESSION | 2022 |
|
RU2790635C1 |
| METHOD FOR DETECTING DUPLICATE PACKETS IN A NETWORK TRAFFIC FLOW | 2022 |
|
RU2790636C1 |
| METHOD FOR ENSURING BALANCING IDENTITY FOR BIDIRECTIONAL NETWORK SESSION DATA FLOW | 2022 |
|
RU2786629C1 |
| BALANCING METHOD WHILE MAINTAINING INTEGRITY OF DATA FLOWS | 2023 |
|
RU2807656C1 |
| METHOD FOR FILTERING NETWORK TRAFFIC BASED ON RULES WITH A MASK DURING PACKET SWITCHING | 2022 |
|
RU2795295C1 |
| METHOD FOR SECURITY GATEWAY CLUSTER OPERATION | 2021 |
|
RU2757297C1 |
| METHOD FOR ISOLATING DATA PACKETS TRANSMITTED OVER PUBLIC NETWORKS IN THE TCP/IP FAMILY PROTOCOL FORMAT USING A COMBINATION OF MASKING, ENCRYPTION AND CONTROL METHODS FOR THE RECEIVED DATA | 2021 |
|
RU2762157C1 |
| METHOD OF MANAGING CONNECTIONS IN FIREWALL | 2012 |
|
RU2517411C1 |
