| 摘要 |
Disclosed in an embodiment of the present invention is a deep packet inspection (DPI) result dissemination method. Also disclosed in the embodiment of the present invention are a network element having recognition function and a dissemination network element. The method comprises: the network element having recognition function receives a data packet from an IP network flow; recognizing the data packet; if the recognition succeeds, then saving a first recognition result obtained from the recognition in the local flow table of the network element having recognition function, and interpolating the first recognition result into the extended field of the data packet header; if the recognition fails, then interpolating a second recognition result into the extended field of the data packet header, the second recognition result being the initial value of the recognition result when the network element having recognition function creates the local flow table; and when the data packet is determined not to be discarded according to service configuration, transmitting the data packet carrying the first recognition result or the second recognition result to a first downstream device. The present invention does not require all the network elements to conduct DPI service recognition, thus reducing the time delay of the entire network in DPI execution, and reducing maintenance cost. |
