US 12,231,305 B2
Method and system for deep packet inspection in software defined networks
Yossi Barsheshet, Ashdod (IL); Simhon Doctori, Gan-Yavne (IL); and Ronen Solomon, Ramat-Gan (IL)
Assigned to ORCKIT CORPORATION
Filed by ORCKIT CORPORATION, West Newbury, MA (US)
Filed on May 2, 2022, as Appl. No. 17/734,148.
Application 17/734,148 is a continuation of application No. 16/865,361, filed on May 3, 2020.
Application 16/865,361 is a continuation of application No. 15/126,288, granted, now 10,652,111, issued on May 12, 2020, previously published as PCT/US2015/026869, filed on Apr. 21, 2015.
Claims priority of provisional application 61/982,358, filed on Apr. 22, 2014.
Prior Publication US 2022/0263736 A1, Aug. 18, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 43/028 (2022.01); H04L 12/64 (2006.01); H04L 43/026 (2022.01); H04L 47/2483 (2022.01); H04L 49/00 (2022.01); H04L 69/16 (2022.01)
CPC H04L 43/028 (2013.01) [H04L 12/6418 (2013.01); H04L 43/026 (2013.01); H04L 47/2483 (2013.01); H04L 49/70 (2013.01); H04L 69/161 (2013.01)] 21 Claims
OG exemplary drawing
 
1. A network node for use with a packet network that is an Internet Protocol (IP) network and that transports Internet Protocol (IP) packets between distinct first, second entities over a packet network under control of a controller that is external to the network node, the network node comprising:
a first connection for receiving, from the controller over the packet network, an instruction that comprises an identifier of an entity other than the second entity and a criterion; and
a second connection for receiving, from the first entity over the packet network, an IP packet addressed to the second entity,
wherein the network node is configured to check if the packet satisfies the criterion,
wherein the packet comprises distinct header and payload fields and the header comprises one or more flag bits,
wherein the criterion is that one or more of the flag bits is set,
wherein, in response to the packet not satisfying the criterion, the network node is configured to send the packet to the second entity over the packet network, and
wherein, in response to the packet satisfying the criterion, the network node is configured to send the packet to the entity other than the second entity over the packet network.