Abstract: A checking method for applying in the field of network packet contents of network security switch, specially, it focus on a specific designed IDP (intrusion detection/prevention) can cooperate with any L2 switch that matched some popular specifications and provide security service on the network traffic through the L2 switch. The applicant abstract the security concept from the security switch. Thus, under this architecture, we developing and improving the network security domain can focus on the security technology without take care what the L2 switch have already been well done. and the additional benefit of the proposed architecture is the cost will relatively lower than the current, and the enterprises using this solution do not need to replace the L2 switch with security switch, we can only plug the spcific designed IDP to the L2 switch we have already had, and play what we original want with security service.

Abstract: The method for providing a “Don't Care” bit to improve the speed of information matching in a digital information processing system. After the match information is input, it will be divided into multiple sub-bit-streams and then input to a correspondent selector for obtaining the content of a selected memory bank. The output of each selector is forwarded to the product module to compute an unencoded match result. Finally, the priority encoder receives the unencoded match result and performs priority encoding to generate an encoded match result and a match flag. If the match flag is positive, it indicates that there is a hit in the rule table for the match information. Thus, the match result serves as an index for looking up an information table.