Universal application decode engine
A universal application decode engine that can be programmed to decode packet streams and identify the application which is generating the packet streams is disclosed. The universal application decode engine comprises a packet receiver, a state machine execution engine for executing application decode instructions, and a session correlation lookup engine for correlating a new session to an existing session.
1. A universal application decode engine for use in a policy agent for decoding packet streams and identifying applications generating the packet streams, the universal application decode engine comprising:
a packet receiver for receiving an incoming packet and for identifying a session to which the packet belongs based on a session identifier attached to the packet;
a state machine execution engine for executing application decode instructions upon the received packet in accordance with a state of the session so as to output application decode information, the application decode instructions being stored in and retrieved from a static application decode database; and
a session correlation lookup engine coupled to the state machine execution engine for correlating a new session to an existing session by use of session correlation data of a dynamic application decode database during the execution of application decode instructions by the state machine execution engine.
2. The universal application decode engine of claim 1 , further comprising:
a stream manager coupled to the packet receiver and the state machine execution engine for providing to the state machine execution engine the packet received by the packet receiver and storing the application decode information output from the state machine execution engine, the stream manager maintaining a session cache which stores the application decode information output from the state machine execution engine.