Patent attributes
A system adaptably directs packet flows to packet processing elements based on OSI layer characteristics and, when necessary, inspection of data payloads. Characteristics of parsed data flows are identified. A comparison ensues. Upon recognition of a match, the entirety of the packet flow is directed to a linked packet processing element. When a match does not occur, the packet flow is directed to a second analysis tier whereby data payloads of the flow are examined. Characteristics from the data payload analysis are compared to entries in a database. Upon a match being recognized the matching packet flow is directed to the packet processing element. Features of packet flow having undergone data payload analysis are captured and used to update the database of prior associations so that any subsequent receipt of similar packet flows will be forwarded to the linked packet processing element without having to conduct a data payload analysis.