Patent Document ID: 20060020600
Application ID: 10894628
Patent Flag: 0

Claim One:
1. A method for applying a plurality of rules organized into a first decision tree to data packets within a network computer system, comprising the steps of: (a) deleting one of the plurality of filter rules or adding a new rule; (b) if deleting one filter rule in step (a), then providing an incremental delete of the one filter rule from the first decision tree to a network data plane processor for application to network data packets; (c) if adding a new rule in step (a), then: (c1) determining a parameter responsive to the new rule addition; (c2) comparing the parameter to a first threshold; and (c3) responsive to the comparison of the parameter to the first threshold either: (c3i) providing an incremental insertion of the one filter rule to the first decision tree to a network data plane processor; or (c3ii)(1) rebuilding the plurality of rules and new rule into a second decision tree; and (c3ii)(2) providing the second decision tree to the network data plane processor.