摘要 |
A method and apparatus for filtering data packets from a network device, such as a LAN switch, onto a network coupled thereto based on the content of the data packets. A pattern is defined and a forwarding action performed on data packets whose contents match or do not match the pattern, according to a specified condition. Filters may be configured on a per port basis, i.e., a filter can be applied to data packets entering or exiting a specific port on a networking device such as a LAN switch. A data packet received or transmitted at a port of a network device whose contents meet a condition specified by a filter may be processed in a number of ways: the packet may be forwarded to a normal destination port according to normal forwarding rules, forwarded to additional destination ports, forwarded to a monitor destination port, dropped, or subjected to another filter. The next filter may define a different forwarding action for data packets that do not meet the condition specified by the present filter.
|