Recognizing application protocols by identifying message traffic patterns
US8995459B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Jun 30, 2010 |
| Grant date | Mar 31, 2015 |
| Priority date | — |
| Expiry date | Nov 15, 2030 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L49/90
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A communication system detects particular application protocols in response to their message traffic patterns, which might be responsive to packet size, average packet rate, burstiness of packet transmissions, or other message pattern features. Selected message pattern features include average packet rate, maximum packet burst, maximum future accumulation, minimum packet size, and maximum packet size. The system maintains a counter of packet tokens, each arriving at a constant rate, and maintains a queue of real packets. Each real packet is released from the queue when there is a corresponding packet token also available for release. Packet tokens overfilling the counter, and real packets overfilling the queue, are discarded. Users might add or alter application protocol descriptions to account for profiles thereof.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.