APPARATUS AND METHOD FOR MANAGING IPV6 SESSION BASED HARDWARE

摘要

An apparatus and a method for managing a hardware-based IPv6 session are provided to accurately block or detect an abnormal or attacking packet by inspecting packets by using state information of a session. A packet parser(110) parses an inputted packet, and extracts fields(5-tuple information) necessary for the session management. A hash generator(120) generates a hash address pointing a session entry to which an input packet belongs by performing two-step hash calculation by using information required for session management extracted from the input packet. A session manager(130) generates and deletes a session entry, and searches a corresponding session from pre-set session entries by using the generated hash address. If the corresponding session exists, a session state information generator(140) generates state information about the corresponding session by using information included in a session entry with respect to the corresponding session. A state-based packet inspector(150) inspects packets in real time by using the generated state information and the information about the input packet.