Patent ID: 7894436
Filing Date: 2011-02-22
Classification: H04L

Abstract:
1. A method, including steps of determining a set of message pattern features; detecting one or more application protocols in response to those message pattern features; treating one or more packets included in those application protocols in response to those steps of detecting; and detecting more and more application protocols in response to inspection of packets; and wherein those steps of treating are responsive to those steps of detecting in response to inspection of packets; wherein those steps of detecting include steps of first maintaining a counter of messages expected to arrive within a first known time duration; second maintaining a set of messages actually arriving within a second known time duration, that second known time duration being responsive to that first known time duration; and comparing a result of those steps of first maintaining with a result of those steps of second maintaining wherein those steps of first maintaining include steps of increasing that counter according to a selected distribution, between first selected minimum and maximum counter values; and decreasing that counter each time a message is released from a queue, between second selected minimum and maximum counter values; wherein those steps of decreasing that counter include a selected mapping between those steps of increasing and those steps of decreasing.