Delft University of Technology
A critical task in network processing is packet analysis that includes operations like packet classification, filtering, and inspection. These operations are commonly based on matching headers and/or data within packets to rules inside a rule-set database. Consequently, the matching procedure determines how packets are classified. When matched, the same database contains the actions to be taken on the matched incoming packets. Even though much research has been performed in improving the performance of these packet processing operations, a thorough inspection of rule-set databases into their characteristics is still left open for further investigation.