Field content based packet classification

摘要

An ordered classification procedure includes receiving a packet including a plurality of packet fields having corresponding field values. At least some of the packet fields are parsed to extract at least some of the field values of the packet. The extracted field values are examined using the ordered classification procedure to classify the packet into a flow. An order of the field examinations scheduled within the ordered classification procedure to examine the field values is based at least in part on the field values themselves.