| 摘要 |
Embodiments of the present invention disclose a method for spreading a deep packet inspection result. Embodiments of the present invention further disclose an identification function network element and a spread network element. The method includes: receiving, by an identification function network element, a data packet in IP network traffic; identifying the data packet; if the identification succeeds, save a first identification result obtained through identification in a local flow table of the identification function network element, and insert the first identification result in an extension field of the header of the data packet; if the identification fails, insert a second identification result in the header extension field of the data packet, where the second identification result is an initialization identification result when the identification function network element creates the local flow table; when it is determined according to a service configuration that the data packet does not need to be discarded, send the data packet carrying the first identification result or the second identification result to a first downstream device. By means of the present invention, DPI service identification does not need to be performed on all network elements, thereby reducing a delay in executing a DPI service in an entire network and lowering a maintenance cost. |
