Patent ID: 8312541
Filing Date: 2012-11-13
Classification: H04L,H04W

Abstract:
1. A method comprising: receiving, by a router, a data packet specifying an Internet Protocol (IP) destination address having an address prefix assigned to the router; initiating neighbor discovery by the router in response to detecting an absence of the IP destination address within a neighbor cache in the router, including outputting a neighbor solicitation message targeting the IP destination address into a network served by the router, generating a hash index value based on a combination of the IP destination address with a randomized token stored in the router, and storing the data packet in a selected one of a plurality of pending message queues in the router based on the corresponding hash index value, each pending message queue distinct from the neighbor cache and configured for storing stored data packets associated with the corresponding hash index value and awaiting respective solicited neighbor advertisement messages from the network; and detecting whether the router is encountering a neighbor discovery denial of service attack based on a determined distribution of the stored data packets among the pending message queues.