Multimatch packet classification schemes

摘要

Traditional network applications only require best or highest matched rule to be reported. The newer network applications like load balancing, packet level accounting and Intrusion detection demands multiple matches of an incoming packet rather than a single match. In high speed routers the packet classification becomes a bottleneck due to the significant growth of the Internet. A high throughput with minimum memory requirement is optimal for any of the proposed scheme so that to work effectively at line rate. This paper contains the survey of schemes for multi match packet classification. Multimatch packet classification is used in intrusion detection systems and denial of service attacks. The methods considered are Hypercuts, Ternary Content Addressable Memory (TCAM) based approaches, B2PC and distributed and pipelined hash tables.