Methods, systems, and computer program products for classifying a packet based on a destination address
View Patent ↗A packet is classified by associating a network layer address with a service, obtaining the data link layer address for that network layer address, and associating a packet with that service if the data link layer destination address associated with the packet matches the data link layer address associated with the service.
1. A method of classifying a packet, comprising:
detecting a routing protocol executing on an Internet router;
associating a network layer address of the Internet router with an Internet access service;
obtaining a data link layer address that is associated with the network layer address, the data link layer address being associated with the service; and
classifying the packet as being associated with the service if a data link layer destination address associated with the packet matches the data link layer address.
2. The method of claim 1 , wherein the network layer address is an Internet Protocol (IP) address.
3. The method of claim 1 , wherein the data link layer address and the data link layer destination address are Medium Access Control (MAC) addresses.
4. The method of claim 3 , wherein obtaining the data link layer address that is associated with the network layer address, comprises:
sending an Address Resolution Protocol (ARP) request for the data link layer address that is associated with the network layer address; and
receiving a Medium Access Control (MAC) address corresponding to the data link layer address, responsive to the ARP request.
5. A method of classifying a packet, comprising:
snooping a Dynamic Host Configuration Protocol (DHCP) packet containing a network layer address of an Internet router;
associating a network layer address of the Internet router with an Internet access service;
obtaining a data link layer address that is associated with the network layer address, the data link layer address being associated with the service; and
classifying the packet as being associated with the service if a data link layer destination address associated with the packet matches the data link layer address.
6. A method of classifying a packet, comprising:
determining at least one Internet Protocol (IP) subnet address used in a private network;
determining an IP address of an Internet gateway device;
examining a destination IP address associated with the packet; and
classifying the packet as Internet traffic if the destination IP address corresponds to an address other than the at least one IP subnet address used in the private network, otherwise, classifying the packet as non-Internet traffic if the packet is an IP packet.
7. The method of claim 6 , further comprising:
classifying the packet as Internet traffic if the packet is an Address Resolution Protocol (ARP) packet having a destination Internet Protocol (IP) address associated therewith that corresponds to the IP address of the Internet gateway device.
8. A system for classifying a packet, comprising:
means for detecting a routing protocol executing on an Internet router;
means for associating a network layer address of the Internet router with an Internet access service;
means for obtaining a data link layer address that is associated with the network layer address, the data link layer address being associated with the service; and
means for classifying the packet as being associated with the service if a data link layer destination address associated with the packet matches the data link layer address.
9. The system of claim 8 , wherein the network layer address is an Internet Protocol (IP) address.
10. The system of claim 8 , wherein the data link layer address and the data link layer destination address are Medium Access Control (MAC) addresses.
11. The system of claim 10 , wherein the means for obtaining the data link layer address that is associated with the network layer address, comprises:
means for sending an Address Resolution Protocol (ARP) request for the data link layer address that is associated with the network layer address; and
means for receiving a Medium Access Control (MAC) address corresponding to the data link layer address, responsive to the ARP request.
12. A system for classifying a packet, comprising:
means for snooping a Dynamic Host Configuration Protocol (DHCP) packet containing a network layer address of an Internet router;
means for associating a network layer address of the Internet router with an Internet access service;
means for obtaining a data link layer address that is associated with the network layer address, the data link layer address being associated with the service; and
means for classifying the packet as being associated with the service if a data link layer destination address associated with the packet matches the data link layer address.
13. A system for classifying a packet, comprising:
means for determining at least one Internet Protocol (IP) subnet address used in a private network;
means for determining an IP address of an Internet gateway device;
means for examining a destination IP address associated with the packet; and
means for classifying the packet as Internet traffic if the destination IP address corresponds to an address other than the at least one IP subnet address used in the private network, otherwise, classifying the packet as non-Internet traffic if the packet is an IP packet.
14. The system of claim 13 , further comprising:
means for classifying the packet as Internet traffic if the packet is an Address Resolution Protocol (ARP) packet having a destination Internet Protocol (IP) address associated therewith that corresponds to the IP address of the Internet gateway device.
15. A computer program product for classifying a packet, comprising:
a computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising:
computer readable program code configured to detect a routing protocol executing on an Internet router;
computer readable program code configured to associate a network layer address of the Internet router with a an Internet access service;
computer readable program code configured to obtain a data link layer address that is associated with the network layer address, the data link layer address being associated with the service; and
computer readable program code configured to classify the packet as being associated with the service if a data link layer destination address associated with the packet matches the data link layer address.
16. The computer program product of claim 15 , wherein the network layer address is an Internet Protocol (IP) address.
17. The computer program product of claim 15 , wherein the data link layer address and the data link layer destination address are Medium Access Control (MAC) addresses.
18. The computer program product of claim 17 , wherein the computer readable program code configured to obtain the data link layer address that is associated with the network layer address, comprises:
computer readable program code configured to send an Address Resolution Protocol (ARP) request for the data link layer address that is associated with the network layer address; and
computer readable program code configured to receive a Medium Access Control (MAC) address corresponding to the data link layer address, responsive to the ARP request.
19. A computer program product for classifying a packet, comprising:
computer readable program code configured to snoop a Dynamic Host Configuration Protocol (DHCP) packet containing a network layer address of an Internet router;
computer readable program code configured to associate a network layer address of the Internet router with an Internet access service;
computer readable program code configured to obtain a data link layer address that is associated with the network layer address, the data link layer address being associated with the service; and
computer readable program code configured to classify the packet as being associated with the service if a data link layer destination address associated with the packet matches the data link layer address.
20. A computer program product for classifying a packet, comprising:
a computer readable storage medium having computer readable program code embodied therein, the computer readable program code comprising:
computer readable program code configured to determine at least one Internet Protocol (IP) subnet address used in a private network;
computer readable program code configured to determine an IP address of an Internet gateway device;
computer readable program code configured to examine a destination IP address associated with the packet; and
computer readable program code configured to classify the packet as Internet traffic if the destination IP address corresponds to an address other than the at least one IP subnet address used in the private network, otherwise, configured to classifying the packet as non-Internet traffic if the packet is an IP packet.
21. The computer program product of claim 20 , further comprising:
computer readable program code configured to classify the packet as Internet traffic if the packet is an Address Resolution Protocol (ARP) packet having a destination Internet Protocol (IP) address associated therewith that corresponds to the IP address of the Internet gateway device.