In one embodiment, a method can include: (i) receiving an incoming probe packet in a network device; (ii) de-encapsulating the incoming probe packet to provide a packet content portion and a drop result portion; (iii) testing the packet content portion against a local access control list (ACL) to determine...http://www.google.fr/patents/US7817571?utm_source=gb-gplus-shareBrevet US7817571 - Automatic discovery of blocking access-list ID and match statements in a network
Automatic discovery of blocking access-list ID and match statements in a network