Patent ID: 8340091

Claim:
A method for packet processing, the method comprising: using logic embedded in an application specific integrated circuit (ASIC) on a network device to: forward a first number of packets received by the network device from a first client via a particular port to a location different than a destination address of the first number of packets; receive information from the location including rules to encode in an access control list (ACL) to adjust the ACL; encode the rules in the ACL; handle a second number of packets received from the particular port later than the first number of packets differently than the first number of packets according to the rules encoded in the ACL in response to the second number of packets being from the first client and in response to the second number of packets not indicating a change in behavior of the first client; and forward the second number of packets to the location in response to the second number of packets being from a second client or in response to the second number of packets indicating a change in behavior of the first client.