Abstract: A method and apparatus to process exception packets is described. A signature table, secondary table and a plurality of queues are used to store exception packets which match packets that are currently being handled, such that multiple requests for exception packet handling of the same or similar packets do not overwhelm the network processor.

Abstract: A network forwarding device includes at least one physical interface, a framer and a network processor having multiple processing engines arranged as: a preparation stage provided on a first microengine of a processor having plural microengines the preparation stage to prepare the packet for processing, a processing stage provided on a second microengine of the processor, the processing stage to perform at least one crypto operation on the packet and a final stage provided on a third microengine of the processor to perform validate the packet in accordance with security associations and a switch fabric.