FILTERING NETWORK DATA TRANSFERS

摘要

Aspects of this disclosure relate to filtering network data transfers. In some variations, multiple packets may be received. A determination may be made that a portion of the packets have packet header field values corresponding to a packet filtering rule. Responsive to such a determination, an operator specified by the packet filtering rule may be applied to the portion of packets having the packet header field values corresponding to the packet filtering rule. A further determination may be made that one or more of the portion of the packets have one or more application header field values corresponding to one or more application header field criteria specified by the operator. Responsive to such a determination, at least one packet transformation function specified by the operator may be applied to the one or more of the portion of the packets.

主权项

1. A method, comprising:
at a computing platform comprising at least one processor, memory, and communication interface:
receiving, via the communication interface, a plurality of packets;determining, by the processor, that at least a portion of the plurality of packets have packet header field values corresponding to a packet filtering rule stored in the memory;responsive to determining that the at least a portion of the plurality of packets have packet header field values corresponding to the packet filtering rule stored in the memory, applying an operator specified by the packet filtering rule to the at least a portion of the plurality of packets, wherein the operator specifies one or more application header field value criteria;determining, by the processor, that one or more of the at least a portion of the plurality of packets have one or more application header field values corresponding to the one or more application header field value criteria specified by the operator; andresponsive to determining that the one or more of the at least a portion of the plurality of packets have one or more application header field values corresponding to the one or more application header field criteria specified by the operator, applying at least one packet transformation function specified by the operator to the one or more of the at least a portion of the plurality of packets.