Patent ID: 9565120
Date: 2017-02-07
CPC Classifications: H04L

Claim:
1. A method for deep-packet inspection (DPI) of packets received at an end-unit from among a plurality of end-units in a point-to-multipoint network, the plurality of end-units being coupled to a central unit, the method comprising: classifying, by the end-unit, a packet received at the end-unit based on a flow-identification (ID) and a Media Access Control (MAC) address that the packet is received from to determine whether the packet should be deep-packet inspected; duplicating in real-time at a traffic rate, by the end-unit, the packet and subsequent packets belonging to the flow-ID and the MAC address when the packet is determined to be deep-packet inspected; saving, by a packet processor in the end-unit, the duplicated packet and the duplicated subsequent packets in a memory that is external to the end-unit; transmitting, by the packet processor, the flow-ID and the MAC address, indexed to the memory, to a microprocessor in the end-unit; upon collection of a predefined number of duplicated packets belonging to the flow-ID and the MAC address, retrieving by the microprocessor the predefined number of duplicated packets belonging to the flow-ID and the MAC address from the memory; performing, by the end-unit, off-line deep-packet processing of the predefined number of duplicated packets based on a DPI application; and saving, by the end-unit, deep-packet processing results in the memory.