Data stream protocol analysis with queue management

摘要

Queue management in performing protocol analysis on network data with multiple analysis processors. Each analysis processor is associated with a memory buffer such as a FIFO queue. Each FIFO queue maintains a status signal representing the fullness of the FIFO queue. The status signal is provided to the analysis processor connected with the FIFO queue and to a network processor that is used in routing the packets of network data. If the status signal indicates that the FIFO queue is too full, then the network processor can redirect the packets to a different analysis processor, begin excluding certain packets from analysis, or controlling the distribution of the packets. Alternatively or at the same time, the analysis processor can begin to restrict which aspects of protocol analysis are performed on the packets of data in the FIFO queue. Full analysis can resume based according to the status signal.