Intelligent packet slicing
Packets can be intelligently sliced by removing irrelevant portions of a packet, while retaining relevant portions. For a series of network packets, a packet is obtained from the network. The packet includes at least a header, one or more packet fields, and a first data payload. The protocol of the packet is determined. Once the protocol is known, the packet header is parsed to determine the position of the first data payload. Based on the determine positions of the first data payload, a modified packet is created by removing or masking the first data payload.
1. A method for slicing a series of network packets, the method comprising:
for each packet in the series of packets,
obtaining the packet from the network, the obtained packet having at least a packet header, one or more packet fields, and a first data payload;
determining one or more protocols used by the obtained packet;
based on the determined one or more protocols, parsing the packet header of the obtained packet to determine a position of the first data payload; and
creating a modified packet by removing or masking the first data payload based on the determined position of the first data payload.
2. The method of claim 1 , further comprising:
after creating the modified packet, transmitting the modified packet over the network.
3. The method of claim 2 , wherein creating a modified packet further comprises:
updating one or more packet fields of the modified packet.
4. The method of claim 3 , wherein updating one or more packet fields further comprises:
updating a checksum field.
5. The method of claim 1 , wherein creating a modified packet further comprises:
removing or masking a data payload of a second packet layered within the obtained packet while retaining one or more packet headers contained in the obtained packet relating to one or more layers of an Open Systems Interconnections Reference Model.
6. The method of claim 1 , wherein the obtained packet further has a second data payload, and wherein creating a modified packet by removing or masking the first data payload based on the determined position of the first data payload further comprises:
removing or masking the second data payload, the first and second data payloads being non-contiguous.
7. A non-transitory computer-readable storage medium encoded with a computer program with computer-executable instructions to:
for each packet in the series of packets,
obtain the packet from the network, the obtained packet having at least a packet header, one or more packet fields, and a first data payload;
determine one or more protocols used by the obtained packet;
based on the determined one or more protocols, parse the packet header of the obtained packet to determine a position of the first data payload; and
create a modified packet by removing or masking the first data payload based on the determined position of the first data payload.
8. The computer-readable storage medium of claim 7 , further comprising instructions to:
transmit the modified packet over the network.
9. The computer-readable storage medium of claim 8 , wherein the instructions to create a modified packet further comprise instructions to:
update one or more packet fields of modified packet.
10. The computer-readable storage medium of claim 9 , wherein the instructions to update one or more packet fields further comprise instructions to:
update a checksum field.
11. The computer-readable storage medium of claim 7 , wherein the instructions to create a modified packet further comprise instructions to:
remove or mask a data payload of a second packet layered within the obtained packet while retaining one or more packet headers contained in the obtained packet relating to one or more layers of the Open Systems Interconnections Reference Model.
12. The computer-readable storage medium of claim 7 , wherein the obtained packet further has a second data payload and the instructions to create a modified packet further comprise instructions to:
remove or mask the second data payload, the first and second data payloads being non-contiguous.
13. A packet switch appliance configured to be connected to a network, the packet switch appliance comprising:
a processor unit;
a network switch chip;
a plurality of ports; and
a computer-readable storage medium containing computer-executable instructions to:
for each packet in the series of packets,
obtain the packet from the network, the obtained packet having at least a packet header, one or more packet fields, and a first data payload;
determine one or more protocols used by the obtained packet;
based on the determined one or more protocols, parse the packet header of the obtained packet to determine a position of the first data payload; and
create a modified packet by removing or masking the first data payload based on the determined position of the first data payload.
14. The packet switch appliance of claim 13 , further comprising:
a daughter board, wherein the daughter board comprises:
a second processor unit; and
a second network switch chip, wherein the second processor unit and/or the second network switch chip execute the computer-executable instructions contained on the computer-readable storage medium.
15. The packet switch appliance of claim 13 , wherein the instructions to create a modified packet further comprise instructions to:
remove or mask a data payload of a second packet layered within the obtained packet while retaining one or more packet headers contained in the obtained packet relating to one or more layers of an Open Systems Interconnections Reference Model.
16. The packet switch appliance of claim 13 , wherein the obtained packet further has a second data payload and the instructions to create a modified packet further comprise instructions to:
remove or mask the second data payload, the first and second data payloads being non-contiguous.
17. The packet switch appliance of claim 13 , wherein creating a modified packet further comprises:
removing or masking a data payload of a second packet layered within the obtained packet while retaining one or more packet headers contained in the obtained packet relating to one or more layers of the Open Systems Interconnections Reference Model.
18. The packet switch appliance of claim 13 , wherein the computer-executable instructions comprise instructions for transmitting the modified packet over the network after the modified packet is created.
19. The packet switch appliance of claim 13 , wherein the instructions for creating the modified packet comprises instructions for updating one or more packet fields of the modified packet.
20. The packet switch appliance of claim 13 , wherein the computer-executable instructions comprise instructions for updating a checksum field.