Method and corresponding device for packets classification
Methods and corresponding devices for packets classification featuring pattern recognition, and not content recognition or port matching. The methods and corresponding devices are able to recognize traffic in the background and/or offline, without overloading the system.
1 . A method for classifying packets comprising:
(a) identifying at least one unidirectional session, and
(b) tagging the identified packets.
2 . The method of claim 1 , further comprising searching for a matched session in the opposite direction.
3 . The method of claim 1 , wherein said identifying comprising the determining at least one of the following criteria:
(a) IP address & MAC address,
(b) application port number,
(c) length of the packet,
(d) type of Service in the IP level,
(e) QoS in the MAC level,
(f) time interval between packets, or
(g) throughput per second.