Abstract: A method and an apparatus for building a decision tree for packet classification are provided. According to an example of the present disclosure, a first type decision tree is generated by performing tree building for a classification rule set based on a non-template dimension of the classification rule set; a second type decision tree is generated by performing tree building for each leaf node in the first type decision tree based on a template dimension of the classification rule set; a plurality of leaf nodes that are mutually of the to each other in the first type decision tree are associated with a same second type decision tree. The plurality of leaf nodes that are SPSR to each other indicate that classification rule sets respectively included in the plurality of leaf nodes are SPSR to each other.

Abstract: A Multibit Trie is created for routing distribution of IP prefixes in each Virtual Private Network (VPN); and each Multibit Trie is divided into multiple layers. When routing search is performed for an IP address of a VPN, an input key is generated for each layer respectively, the input key of the layer comprises a VPN identifier of the VPN and bits corresponding to all of at least one layer before the layer in the IP address. A calculation is performed for the generated input key of each layer by using a Hash function of the layer, and routing is searched for according to a data structure information pointer of a Sub_Trie node corresponding to a longest Hash hit result.

Abstract: A method and an apparatus for building a decision tree for packet classification are provided. According to an example of the present disclosure, a first type decision tree is generated by performing tree building for a classification rule set based on a non-template dimension of the classification rule set; a second type decision tree is generated by performing tree building for each leaf node in the first type decision tree based on a template dimension of the classification rule set; a plurality of leaf nodes that are mutually of the to each other in the first type decision tree are associated with a same second type decision tree. The plurality of leaf nodes that are SPSR to each other indicate that classification rule sets respectively included in the plurality of leaf nodes are SPSR to each other.

Abstract: A Multibit Trie is created for routing distribution of IP prefixes in each Virtual Private Network (VPN). Routing of IP prefixes in the highest level 1˜m of the Multibit Trie is expanded to IP prefixes in level m+1 according to a prefix expansion method, wherein m is an integer larger than 1. Each branch of the IP prefixes in the level m+1 of the Multibit Trie is taken as a Branch_Tree, and data structure information of each Branch_Tree is saved. When routing of an IP address in a VPN is to be searched, a Branch_Tree is searched in a Multibit Trie corresponding to the VPN according to the highest m+1 bits of the IP address, and the routing of the IP address is searched in the Branch_Tree.

Abstract: A method and device for processing a message are provided. According to an example of the method, after an operation message is generated, it is determined whether a block cache matching the operation message exists in a cache pool, where the cache pool includes a plurality of block caches for caching different operation messages, respectively. When the matched block cache exists in the cache pool, a condition parameter in the block cache is updated. It is then determined whether the matched block cache satisfies a preset output condition according to the condition parameter in the block cache. If the block cache satisfies the preset output condition, the operation message in the block cache is output.

Abstract: A programming file including a first module is loaded to a programmable component. And then, the programmable component is dis-reset. Subsequently, first data is loaded to a memory connecting with the programmable component, to enable the first module in the programmable component to convert the first data of the memory into second data. After the first module of the programmable component converts the first data of the memory into the second data, a second module is loaded to the programmable component. The first module in the programming file is then replaced with the second module, to enable the second module to access the second data.

Abstract: A Multibit Trie is created for routing distribution of IP prefixes in each Virtual Private Network (VPN). Routing of IP prefixes in the highest level 1˜m of the Multibit Trie is expanded to IP prefixes in level m+1 according to a prefix expansion method, wherein m is an integer larger than 1. Each branch of the IP prefixes in the level m+1 of the Multibit Trie is taken as a Branch_Tree, and data structure information of each Branch_Tree is saved. When routing of an IP address in a VPN is to be searched, a Branch_Tree is searched in a Multibit Trie corresponding to the VPN according to the highest m+1 bits of the IP address, and the routing of the IP address is searched in the Branch_Tree.

Abstract: A Multibit Trie is created for routing distribution of IP prefixes in each Virtual Private Network (VPN); and each Multibit Trie is divided into multiple layers. When routing search is performed for an IP address of a VPN, an input key is generated for each layer respectively, the input key of the layer comprises a VPN identifier of the VPN and bits corresponding to all of at least one layer before the layer in the IP address. A calculation is performed for the generated input key of each layer by using a Hash function of the layer, and routing is searched for according to a data structure information pointer of a Sub_Trie node corresponding to a longest Hash hit result.

Abstract: A programming file including a first module is loaded to a programmable component. And then, the programmable component is dis-reset. Subsequently, first data is loaded to a memory connecting with the programmable component, to enable the first module in the programmable component to convert the first data of the memory into second data. After the first module of the programmable component converts the first data of the memory into the second data, a second module is loaded to the programmable component. The first module in the programming file is then replaced with the second module, to enable the second module to access the second data.

Abstract: According to an example, a packet to be processed is compared with a rule in a combined access control list (ACL), wherein the combined ACL includes rules corresponding to different service types.

Abstract: An apparatus for packet processing is provided. The apparatus is to be implemented in a server and includes: a preprocessor and at least two processors which are respectively connected with the preprocessor. The preprocessor is to classify packets received externally from the server, and to distribute the classified packets to the respective processors, wherein packets in a same flow are distributed to a same processor. Each of the processors is to receive and process a packet distributed by the preprocessor.

Abstract: The present invention provides a method and apparatus for packet transmission in the network. When the network device receives data packets from the first user, the network device extracts and saves the data encapsulated in the data packets and then forwards the packets according to the destination addresses of the data packets. When it receives the request from a second user for the data mentioned above, it encapsulates the saved data in data packets and sends the data packets to the second user. With the present invention deployed, the uploaded data packets are saved on network devices and can be directly transmitted to users requesting them. In this way, the present invention avoids repeated traffic upload, reduces upload traffic in the network, decreases network bandwidth occupied by traffic, and thus improves the overall network performance.

Abstract: The present invention provides a method and apparatus for packet transmission in the network. When the network device receives data packets from the first user, the network device extracts and saves the data encapsulated in the data packets and then forwards the packets according to the destination addresses of the data packets. When it receives the request from a second user for the data mentioned above, it encapsulates the saved data in data packets and sends the data packets to the second user. With the present invention deployed, the uploaded data packets are saved on network devices and can be directly transmitted to users requesting them. In this way, the present invention avoids repeated traffic upload, reduces upload traffic in the network, decreases network bandwidth occupied by traffic, and thus improves the overall network performance.

Abstract: The present invention discloses a method and an apparatus for collecting information. The technical solution of the invention enables the search engine database to collect dynamic web page access information by sending web page access information to it. As the collected information shows statistics about actual web page access information usage, it is an important reference for the search engine to sequence web pages.

Abstract: The present invention discloses a method for monitoring network multimedia data, comprising: analyzing network packets, identifying multimedia data carried in the packets; separating the multimedia data from the packets, and saving the data and the associated access information to a monitoring information base to be utilized for illegal information detection. This invention also discloses a monitoring apparatus to implement the network multimedia monitoring. The method and apparatus in this invention implement monitoring of the multimedia information travelling in the network.