Verfahren, Vorrichtung und System für ein Verfahren zum Einschalten einer Überwachung von Überwachungsobjekten in einer Computer-Implementierten Telekommunikationsumgebung

Die vorliegende Erfindung betrifft ein Verfahren zum Überwachen von Überwachungsobjekten in einer Computer-integrierten Telekommunikationsumgebung, wobei das Verfahren in einer initialen Einschaltphase umfasst: – auf einen erstmaligen Aufbau einer Assoziation zwischen einer ersten Datenverarbeitungsvorrichtung (9) und einer Schaltvorrichtung (1) hin, Verwenden eines Kommunikationslinks, Senden einer ersten Nachricht (A) von der ersten Datenverarbeitungsvorrichtung (9) an die Schaltvorrichtung (1), um eine Identifikation für alle Überwachungsobjekte anzufragen, die durch die erste Datenverarbeitungsvorrichtung (9) zu überwachen sind; – in Antwort auf die erste Nachricht (A), Senden einer zweiten Nachricht (B) von der Schaltvorrichtung (1) an die erste Datenverarbeitungsvorrichtung (9), wobei sich die zweite Nachricht (B) auf eine dritte Nachricht (C) bezieht, die folgt; – Allozieren von Überwachungsobjekten, welche die erste Datenverarbeitungsvorrichtung (9) überwachen soll; und – Senden ...

System zur Identifizierung mehrerer Leitwege zwischen Netzwerkknoten

Verarbeitungssystem zum Übertragen von Datenpaketen zwischen einem Quellgerät und einem Zielgerät in einem Computernetzwerk, wobei das Computernetz eine Vielzahl von Knoten beinhaltet, um die Datenpakete zwischen den Quell- und Zielgeräten durchzuleiten, wobei das Verarbeitungssystem Folgendes umfasst: einen Speicher zum Speichern von Daten; und einen Prozessor, der zum Einlesen der Daten aus dem Speicher und zum Schreiben der Daten auf denselben operativ mit dem Speicher gekoppelt ist, wobei der Prozessor dafür konfiguriert ist, eine Untergruppe SK D aus einer Gruppe SD von Anschlüssen p, die dafür konfiguriert ist, das Zielgerät abzuhören und die Untergruppe SK D dafür konfiguriert ist, den Datenpaketverkehr zwischen dem Quellgerät und dem Zielgerät zu bedienen, und der Prozessor des Weiteren dafür konfiguriert ist, einen Anschluss p in der Gruppe SD für die Analyse auszuwählen, um festzustellen, ob der ausgewählte Anschluss p mit irgendwelchen Anschlüssen in der Untergruppe SK D kollidiert ...

Verfahren und Vorrichtung zum unmittelbaren und rückwirkungsfreien Übertragen von Log-Nachrichten

Die Erfindung betrifft ein Verfahren und eine Übertragungsvorrichtung (T) zum unmittelbaren und rückwirkungsfreien Übertragen von Log-Nachrichten aus mindestens einem ersten Netzwerk (NW1) in ein zweites Netzwerk (NW2). Log-Nachrichten werden einzeln und unmittelbar übermittelt. Mittels einer Mithöreinrichtung (2) werden die Log-Nachrichten im ersten Netzwerk (NW1) mitgehört und über eine Einweg-Datenübertragungseinheit (3) in das zweite Netzwerk (NW2) übertragen. Somit erfolgt die Übertragung rückwirkungsfrei und integritätsgeschützt. Die Erfindung umfasst außerdem einen Log-Server (LS1) mit einer Leitungsschleife (1). Log-Nachrichten werden über die Leitungsschleife (1) übermittelt und dabei gefiltert, mittels einer Mithöreinrichtung (2) mitgehört und über die Einweg-Datenübertragungseinheit (3) direkt an einen zweiten Log-Server (LS2) im zweiten Netzwerk (NW2) übertragen. Somit wird eine effiziente Übertragung von Log-Nachrichten in ein zweites Netzwerk (NW2) für eine Echtzeit-Analyse ...

Verfahren und Anordnung zur Durchführung von Dienstqualitätsmessungen auf einer Verbindung über einem Netzwerk

ELEKTRONISCHE VORRICHTUNG, SYSTEM AUF EINEM CHIP UND VERFAHREN ZUR ÜBERWACHUNG EINES DATENVERKEHRS

VERFAHREN UND GERÄT UM DEN NETZWERKVERKEHR ZU ÜBERWACHEN

Flexible Switch-Logik

Die Paketverarbeitung mithilfe von flexibler Switch-Logik umfasst das Empfangen eines mit einem bestimmten Datenverkehrsfluss verbundenen Pakets, das Generieren eines Vermittlungsentscheidungsverhaltens in einem ersten Zyklus des bestimmten Datenverkehrsflusses durch Auswählen einer oder mehrerer Verarbeitungsetagen einer programmierbaren Pipeline auf der Grundlage eines empfangenen Profilsignals, welches einen für das erste Paket erforderlichen Verarbeitungstyp angibt, und das Durchführen einer Paketverarbeitung für das erste Paket unter Verwendung der ausgewählten einen oder mehreren Verarbeitungsetagen der programmierbaren Pipeline. Bei einigen Erscheinungsformen ist eine Verarbeitungseinheit für Eintrittspakete so konfiguriert, dass sie ein erstes Vermittlungsentscheidungsverhalten unter Verwendung der ausgewählten Verarbeitungsetagen einer ersten programmierbaren Pipeline in der Verarbeitungseinheit für Eintrittspakete generiert. Bei anderen Erscheinungsformen ist eine Verarbeitungseinheit ...

System zum Kommunizieren zwischen einer Hauptvorrichtung und jeweiligen Nebenvorrichtungen

Eine Elektroniksteuereinheit (ECU) gibt Anfragesignale mit unterschiedlichen Identifizierungen nacheinander zu einer Kommunikationsleitung auf eine Art und Weise aus, dass eines der Anfragesignale zuerst ausgegeben wird und jedes der anderen Anfragesignale ausgegeben wird, wenn die ECU ein Antwortsignal, das durch die Kommunikationsleitung gesendet wird, erfasst. Jeder der Empfänger stellt unabhängig eine Überwachungszeitdauer ein, empfängt die Anfragesignale von der Kommunikationsleitung und führt eine Identifizierungseinstellungsbeurteilung bei jedem Anfragesignal durch. Bei dieser Beurteilung überwacht der Empfänger die Kommunikationsleitung während der Überwachungszeitdauer, startend bei einem Empfang des Anfragesignals, es sei denn, dass der Empfänger ein Antwortsignal ausgegeben hat, gibt ein Antwortsignal zu der Kommunikationsleitung aus, wenn der Empfänger kein Antwortsignal, das durch die Kommunikationsleitung gesendet wird, bei dem Überwachen erfasst, und stellt eine Identifizierung ...

Datensammel-System und -Verfahren für IP-Netzwerke

Ein System, das wirksam ist, um Daten in einem digitalen Netzwerk zu sammeln und zu analysieren, umfasst eine Sondenschicht, die eine Sonde aufweist, die in dem digitalen Netzwerk angeordnet ist. Die Sonde ist konfiguriert, um Daten aus Rahmen zu identifizieren und zu erfassen, die durch die Sonde passieren. Das System umfasst ferner eine Analyseschicht, die wirksam ist, um die erfassten Daten aus der Sonde zu empfangen. Zusätzlich dazu umfasst das System eine Anwendungsschicht, die einen Systemmaster aufweist, der wirksam ist, um zwischen einer Anwendung und der Sonde zu vermitteln.

Monitoring traffic in a packet switched network

Fault diagnosis

Fault conditions in a distributed system 2 are diagnosed by correlation of routine network condition reports 50 collected by the network and stored in a database 55, with reports of faults 60 identified at remote termination points, typically by end-user, which are recorded in a fault logging system 6. Correlation of fault or condition reports, by reference to the topology 8 of the system allows better identification 7 of the cause of a fault, and allows co-ordination of routine maintenance and inspection tasks 91 with ad hoc task management 90 to attend to faults recorded by the fault logging system.

Analysis of network performance

Receiver for recovering and retiming electromagnetically coupled data

Network usage metering

The present invention is directed to a method for metering Internet 100 usage, including monitoring Internet 100 usage by a customer, logging data processing resource consumption by the monitored Internet 100 usage, and determining a quantity of data processing resource consumption logged within a defined time period by the customer. It will be appreciated that network usage by more than one customer at a time may be logged and tabulated by the system and method of the present invention.

Remote monitoring

A remote monitoring system 2 is provided for the remote monitoring of a remote appliance 10, such as a utility meter. In addition to the appliance 10, the remote monitoring system comprises a control unit 6 in communication with the remote appliance via a local area wireless link 8 and a monitoring unit 20 in communication with the control unit 6 via a telecommunications link 24. The remote appliance 10 transmits monitoring information to the control unit 6 via the local area wireless link 8. The monitoring information is required by the monitoring unit 20 for the purpose of monitoring the remote appliance 10, for example the information may be a meter reading in the case of a utility meter. The control unit 6 transmits such received monitoring information to the monitoring unit 20 via the telecommunications link 24. The control unit 6 may be a digital television, set top box, personal computer, mobile phone or cell phone. The local area wireless link 8 may be Bluetooth (RTM), IEEE 802.11 ...

Determining data flows in a network

Monitoring a telecommunications network

Difficulties can arise in monitoring a network comprising many users and network elements where direct access to those elements is not available. The invention enables the network manager to accurately monitor operation and model the network by using only transactions built from network traffic between elements. Thus, a module 120 is initialised and configured via an input 161 to define network relationships to be monitored. It receives transaction events from event bus 130. Within the module120, the transactions are analyzed according to the configuration data and results generated according to desired structures and memory for storage of the results. It also provides a query interface for obtaining desired appropriate result information from the memory and outputting the results e.g. to a network management module. By using information obtained from transactions within network traffic, e.g. link set up, protocols etc. the same results can be obtained that needed direct access to network ...

Receiver for recovering and retiming electromagnetically coupled data

Traffic differentiator systems for network devices and related methods

Telecommunication network management

Methods and apparatus for collecting storing processing and using network traffic data

Data capture

An apparatus and method are provided for capturing dynamically selectable data streams from a communications network substantially at network line rates and for routing packets in selected data streams to one or more pre-assigned outputs by means of multiple selectable data processing queues. The apparatus may comprise a data probe 10. Data packets are captured from a network tap point 12 and are routed through the apparatus according to according to reconfigurable routing criteria so that they may emerge from one or more outputs 14. Captured Packets as input to a protocol finder and tuple extractor 18. Having selected data packet of a relevant protocol, module 18 passes the data packet and tuple values to a Tuple look up module 20. A distinct hash value may be provided for each tuple of interest. A hash Routing table 22 may then be used along with a Tuple lookup module 20 to route packets through queues 16 to selected outputs 14.

Continuous capturing of communication session data in a mobile communication network

A geolocation data acquisition system and method (400, Figure 4) for acquiring communication session data from a mobile radio communications network. A data extraction module 222, 226 extracts call session data continuously from a network of call processors 224, 228, each call processor supporting mobile communication units in an associated geographical region of the coverage area of the mobile radio communications network. The data extraction module provides the extracted data to one of several storage areas 260. In each storage area, a record is created of the communication session data for each call made within the coverage area of an associated set of call processors. The records stored in each storage area 260 comprise the data available for all communication sessions in the geographical region associated with the corresponding set of call processors 224, 228. The data extraction modules may comprise network probes connected to a Radio Network Controller (RNC) (322, Figure 3), or an ...

Providing reports to mobile network operators based on optimisiciency of wireless network traffic and/or battery consumption reduction

Mobile network reporting and usage analytics system and method includes generating a report for a mobile network operator, which may be implemented on a system, including tracking optimisation efficiency for traffic in a wireless network, generating the report to be provided to the network operator based on the optimization efficiency and performing functions related to traffic optimisation and management in the wireless network effectuating in traffic alleviation in the wireless network measured by the optimisation frequency. The optimisation efficiency can include efficiency information associated with different mobile applications and user-related information in a wireless network. A client side proxy on the mobile device tracks optimization efficiency for traffic, and also determines battery consumption data and performs functions related to battery consumption reduction. A server side proxy determines optimization efficiency for wireless network traffic and tracks user-related information ...

System and methods for selecting an optimum communication route in a wireless network

To achieve greater coverage in an IEEE 802.11 based Wireless Local Area Network (WLAN) relays or repeaters can be used to extend the range of connectivity between clients and Access Points (APs). In situations where a client device can establish a direct link with an AP or establish a route via a repeater it is necessary to determine which will provide the optimum data rate. A repeater device 106 determines a plurality of data transmission rates between at least one client 104, an access point 103 and the device belonging to a wireless network and determines a best communication route, from among available communication routes, for the at least one client to communicate with the access point based on the determined plurality of data transmission rates. The best route is determined based on end-to-end throughput of data from client to access point via each route.

A method and apparatus for identifier correlation

Data retention probes and related methods

Log analyzing system and method

A log analysing system and method to analyse communication logs from a control device. A control device 10 sends a communication packet via a network 40 to a network device 20. The network device replicates the packet with module 201 and sends it to monitoring device 30. The monitoring device has previously stored a stable communication pattern which represents the pattern of communication when the network is in an uncompromised state where no unauthorised access can occur. The monitoring device obtains a difference between the pattern of the packet and the stable pattern to determine whether the packet has an abnormal pattern associated with unauthorised access through malware and DOS attacks. If so, it restores the packet based on the difference and notifies the packet. The monitoring device pattern extraction modules 303/304 may generate data along a time series that indicates the transmission cycles and transmission size of a plurality of packets. A frequency conversion of the time ...

Loopback device and mirroring method

Entropy and value based packet truncation

Entropy and value based packet truncation

Network packets may be captured by a network recorder or probe and stored in a storage device to create a history of packets. There is a need to store the captured data efficiently to preserve storage space. The invention analyses the captured packets to determine if they can be reduced in size before storing. Packets in a computer network are received via an input port and the header fields and starting point of the payload are identified. The entropy of the payload is estimated and compared to a threshold. A signal (e.g. entropy exceed signal) is generated indicating if a payload may be truncated or compressed. The value of a packet may be determined based on the header, and all or some of the data stored in the storage device based on its value and estimated entropy. The user may specify policies or rules for compressing or truncating the packets. The recorded packets may be used for incident investigation (e.g. hacking) or performance evaluation. By being economical with storage one ...

Power adaption in a multi-station network

Power adaption in a multi-station network.

The invention relates to a method of operating a communication network, the network comprising a plurality of sttions which are able to transmit data to and receive data from one another. The method comprises monitoring, at each station, the transmission path quality between that station and each other station with which that station can communicate. Data corresponding to the monitored path quality is recorded at each station, thereby permitting a transmission power value based on the relevant path quality data to be selected when transmitting data to another station. Thus, the probability of transmitting data to any selected station at an optimum power level is increased. Each station transmits path quality data in its own transmissions as well as local noise/interference data, so that other stations can obtain path quality data for a particular station even if they are out of range of that particular station. The invention extends to communication apparatus which can be used to implement ...

Power adaption in a multi-station network

Power adaption in a multi-station network

GEOINTELLIGENT TRAFFIC ALARM UNIT

MONITORING LOCAL OF A NETWORK

PROCEDURE FOR THE CONTROLLING OF THE FORWARDING QUALITY IN A DATA NETWORK WORK

PROCEDURE AND DEVICE FOR THE MEASUREMENT OF THE TEMPORAL DRIFT OF A WITH A NETWORK CONNECTION OF ELECTRONIC EQUIPMENT

ESTIMATION OF THE AVAILABLE RANGE

POWER ADAPTION IN A MULTI-STATION NETWORK

PROCEDURE FOR THE QUANTIFICATION OF THE COMMUNICATION ACHIEVEMENT

SYSTEM AND PROCEDURE FOR THE AUTOMATIC DISSOLUTION OF A SEGMENT IN A LOCALEN NET

DISTRIBUTED LOCAL-AREA-NETWORK MONITORING SYSTEM

Process and apparatus for identifying and classifying video-data

A network traffic monitoring process of a communications network including: receiving data packets from a software-defined networking (SDN) flow switch; processing header of the received packets to identify its subsets belonging to respective network flows; detecting large network flows by determining a corresponding cumulative amount of data contained in the received packets for each of the network flow until it reaches or exceeds a predetermined threshold amount of data; for each detected large network flow, sending flow identification data to the SDN flow switch to identify further packets of the large network flow and to stop sending them to the network traffic monitoring component; periodically receiving from the SDN flow switch and processing the corresponding counter data and corresponding timestamp data to generate temporal metrics of the large network flow; and processing the generated temporal metrics with a trained classifier to classify the large network flow.

Systems and methods for configuring, applying and managing object-oriented policy expressions for a network device

Method and system for performance estimation of a communication link

Described is a method for performance estimation of a communication device. The method comprises: executing active probing to determine active probing data; reading operational data which includes data related to channel and its noise condition and counter values related to user data traffic between the communication device and another communication device, wherein the operational data is relevant to the current settings of the communication device; and training a performance estimation algorithm for the communication device according to the active probing data and the operational data.

Providing routing control of information over networks

Fine-grained network monitoring

In some cases, a network monitoring system may determine an operating or health condition of a node or connection link in a network (e.g., a datacenter network) by preparing an encapsulated data packet according to a tunneling protocol. Depending on a result of routing the encapsulated data packet, the network monitoring system determines whether the node or connection link is functioning normally or is experiencing an issue such as overloading or malfunctioning.

Collecting and analyzing selected network traffic

A tracking system is described herein for investigating the behavior of a network. In operation, each switch in the network (or each switch in some subset of switches) may determine whether each original packet that it processes satisfies one or more packet-detection rules. If so, the switch generates a mirrored packet and sends that packet to a load balancer multiplexer, which, in turn, forwards the mirrored packet to a processing module for further analysis. The packet-detection rules hosted by the switches can be designed to select a subset of packets that are of greatest interest, based on any environment-specific objectives. As a result of this behavior, the tracking system can effectively and quickly pinpoint undesirable (and potentially desirable) behavior of the network, without being overwhelmed with too much information.

A system and method for observing and controlling a programmable network using a remote network manager

A system and method for observing and controlling a programmable network via higher layer attributes is disclosed. According to one embodiment, the system includes one or more collectors, a network manager, and a programmable network element. The one or more collectors are configured to receive network traffic data from a plurality of network elements and extract metadata from the network traffic data. The network manager is configured to receive metadata from the one or more collectors. The network manager identifies a network control objective for the network, identifies a programmable parameter of the programmable network element to achieve the network control objective, and programs the programmable network element. The network manager further determines whether the network control objective is met after programming the programmable network element and applies a control loop based on the network control objective to program the programmable network element.

Systems and methods for detecting and preventing spoofing

Techniques for detecting application program spoofing. The techniques include: receiving a communication from an application program executing on a client device different from the at least one computer; identifying from the communication an asserted identity of the application program; and verifying the asserted identity of the application program at least in part by: interacting with the client device to obtain additional information about the application program, and determining whether the additional information about the application program is consistent with the asserted identity of the application program.

Method and system for monitoring broadband quality of services

DISTRIBUTED MONITORING AND ANALYSIS SYSTEM FOR NETWORK TRAFFIC

Techniques are disclosed for improved monitoring and analysis of VoIP communications, multimedia communications or other types of network traffic in a network-based communication system. In accordance with one aspect of the invention, endpoint devices of the network-based communication system are configurable so as to collectively implement a distributed monitoring and analysis system which does not require a centralized testing server or other centralized controller. Distributed test units associated with the endpoint devices may be utilized in implementing the distributed monitoring and analysis system, and are preferably configured to support a web-based user interface providing access to measurement data. The endpoint devices may be advantageously organized into a hierarchy comprising a plurality of zones, with each of the endpoint devices belonging to at least one zone. For each zone, one of the endpoint devices may be designated as a zone leader for controlling the periodic generation ...

SOFTWARE DEFINED NETWORK (SDN) QUALITY-OF-SERVICE (QOS)

A data communication system (100, 300) determines Software Defined Network (SDN) Quality-of-Service (QoS). SDN applications (111-113, 351) transfer SDN controller Application Programming Interface (API) calls and receive SDN controller API responses. The SDN applications (111-113, 351) measure Key Performance Indicators (KPIs) and transfer SDN application KPI data. An SDN controller (121, 352) receives the controller API calls, transfers the controller API responses, transfers SDN data machine API calls, and receives SDN data machine API responses. The SDN controller (121, 352) measures KPIs and transfer SDN controller KPI data. SDN data machines (131-133, 331-333) receive the SDN data machine API calls, perform SDN actions on user data responsive to the data machine API calls, and transfer the data machine API responses. The SDN data machines (131-133, 331-333) measure KPIs and transfer SDN data machine KPI data. An SDN QoS server (103, 361) processes the SDN KPI data to generate an SDN ...

METHOD AND SYSTEM FOR PERFORMING OPERATIONS USING COMMUNICATIONS

A method and system are described for communicating within a system, which may be along tubular members. The method includes constructing a communication network for tubular member, such as a wellbore accessing a subsurface region or a pipeline, and using the communication network in hydrocarbon operations, such as hydrocarbon exploration, hydrocarbon development, and/or hydrocarbon production.

CONGESTION CONTROL IN LTE-V2V FOR PRIORITIZED TRAFFIC ACCORDING TO A CHANNEL RESOURCE UTILIZATION

Improvements may be made for the congestion control considering different technologies, types of radio resources, and priorities of different packets. The apparatus may be a User Equipment, UE. The UE determines a channel busy ratio (CBR). The UE further determines one or more channel resource utilization limits based on the CBR, wherein each channel resource utilization limit of the one or more channel resource utilization limits corresponds to a respective packet priority. The UE controls transmission of a plurality of packets based on the one or more channel resource utilization limits, each packet of the plurality of packets being associated with a respective packet priority.

CLOUD COMPUTING ENVIRONMENT SYSTEM FOR AUTOMATICALLY DETERMINING OVER-THE-TOP APPLICATIONS AND SERVICES

A cloud computing system for determining Over-The-Top (OTT) applications includes a cloud computing environment partitioned into a plurality of partitions. The cloud partitions include at least a first wireless network operator's cloud, a second wireless network operator's cloud and a shared partition configured to receive and store information uniquely identifying OTT applications supported by at least one of the first and second wireless network operators. The system further includes a plurality of active agents. Each active agent receives a list of OTT service platforms supported by a corresponding wireless network operator. The received list includes a plurality of URLs associated with various applications that are delivered by the OTT service platforms. The active agent(s) connect to the plurality of URLs to determine information uniquely identifying each of the OTT applications and to store the information in the shared partition of the cloud computing environment.

CONGESTION CONTROL FOR LTE-V2V WITH DECODE-BASED CHANNEL BUSY RATIO DETERMINATION

Improvements may be made for the Channel Busy Ratio, CBR, based congestion control considering different technologies, types of radio resources, and priorities of different packets. The apparatus may be a User Equipment, UE. The UE determines an energy-based channel busy ratio (CBR) based on a number of probes on a set of radio resources having respective energy levels greater than an energy threshold. The UE performs congestion control based on the energy-based CBR by adjusting at least one transmission parameter of one or more transmission parameters or transmission power of the UE based on the energy-based CBR.The adjusting may be carried out taking into account a usage limit, or CBR limit. In addition, the UE may detect that a second technology different from a first technology is also using the channel, and in addition consider a decode-based CBR for the purpose.

SYSTEM AND METHOD OF DETECTING EVENTS

Apparatus for classifying network traffic events in accordance with one or more conditions comprising categorising means for catergorising a plurality of network traffic events, analysing means for analysing at least one aspect of the network traffic events and identifying groups in accordance with the analysis, group determining means for determining group allocation for the categorised network traffic events, generating means fo generating one or more conditions in relation to the group and category of analysed network traffic events, and classifying means for classifying a newly detected network traffic event in accordance with the one or more conditions generated.

COLLECTING AND ANALYZING SELECTED NETWORK TRAFFIC

A tracking system is described herein for investigating the behavior of a network. In operation, each switch in the network (or each switch in some subset of switches) may determine whether each original packet that it processes satisfies one or more packet-detection rules. If so, the switch generates a mirrored packet and sends that packet to a load balancer multiplexer, which, in turn, forwards the mirrored packet to a processing module for further analysis. The packet-detection rules hosted by the switches can be designed to select a subset of packets that are of greatest interest, based on any environment-specific objectives. As a result of this behavior, the tracking system can effectively and quickly pinpoint undesirable (and potentially desirable) behavior of the network, without being overwhelmed with too much information.

COMMUNICATION NETWORK AGGREGATION TEST PAYLOAD

A first node (2) of a first network using a first radio access technology signals (SI) a second node (3) of a second network using a second radio access technology start and stop of a test data session and to send test data packets to a UE (1) in an aggregation mode via the second node (3) in the test data session. The UE (1) is associated with the second node (3). The test data packets comprise payload and an aggregation header including an indication that the payload comprises test data. The first node (2) determines (S4) a service level of the UE (1) with respect to the second node (3) based on a report on a throughput of the test data packets sent by the second node (3) in the test data session.

SAMPLING PACKETS TO MEASURE NETWORK PERFORMANCE

Disclosed are system, method, and computer-readable medium embodiments for a network to provide network applications and services and estimate network metrics for individual applications and services. In an embodiment, a first routing device receives a packet and determines that the packet is to be sampled. The first routing device samples the packet by storing first information associated with the packet and transmits the first information to a measurement server. The first routing device transmits the packet towards a destination according to routing information. A second routing device receives the packet and determines that the packet is to be sampled. The second routing device samples the packet by storing second information associated with the packet and transmitting the second information to the measurement server. The measurement server determines a measurement based on the first information and second information.

SAMPLING PACKETS TO MEASURE NETWORK PERFORMANCE

Disclosed are system, method, and computer-readable medium embodiments for a network to provide network applications and services and estimate network metrics for individual applications and services. In an embodiment, a first routing device receives a packet and determines that the packet is to be sampled. The first routing device samples the packet by storing first information associated with the packet and transmits the first information to a measurement server. The first routing device transmits the packet towards a destination according to routing information. A second routing device receives the packet and determines that the packet is to be sampled. The second routing device samples the packet by storing second information associated with the packet and transmitting the second information to the measurement server. The measurement server determines a measurement based on the first information and second information.

SYSTEM AND METHOD FOR TESTING MULTIPLE PACKET DATA TRANSMITTERS

A system and method for testing a plurality of packet data transmitters i n which multiple devices-under-test (DUTs) are tested by providing similar t ransmit data streams to the DUTs each of which, in response thereto, provide s a respective packet data signal. At least a portion of each packet data si gnal is captured to provide captured data packets, which are processed to pr ovide multiple sets of test data respective ones of which, in turn, are anal yzed in view of the transmit data to determine an operational status of each DUT.

SMALL FORM FACTOR PLUGGABLE UNIT WITH SIGNAL MONITORING CAPABILITIES

The present disclosure relates to small form factor pluggable units (SFP) having a monitoring probe. The monitoring probe is capable of monitoring a signal received by the SFP unit, in order to analyze the received signal and to generate a status signal. The monitoring probe may monitor a received signal directly or a copy thereof. The monitoring probe may be non-intrusive of the received signal, or intrusive. The monitoring probe may further generate a diagnostic of the received signal.

CORRELATION OF MEDIA PLANE AND SIGNALING PLANE OF MEDIA SERVICES IN A PACKET-SWITCHED NETWORK

This invention relates to methods for correlating media streams and signaling sessions of services, for example, in a passive monitoring system of a packet-switched network. Furthermore, the invention also relates to an implementation of these methods in hardware and software, and provides a signaling plane probe, a media plane probe and a correlation unit. Moreover, a passive monitoring system comprising one or more of these hardware devices is provided. To correlate media streams and signaling sessions of services, the invention proposes to independently generate correlation keys in a media plane probe for monitored media streams and correlation keys for signaling sessions that are monitored by a signaling plane probe in a fashion that matching correlation keys are generated for a respective service. By identifying reports on the media streams and reports on the signaling session that contain matching correlation keys respectively, the media streams and the signaling streams are correlated ...

WIRELESS DIAGNOSTIC SYSTEM

Results of field testing of portions of a distributed system such as a Broadband Communications System are communicated from a testing device capable of operating in a stand-alone manner to a device including a display which downloads programmed test protocols and sequences thereof to the separate testing device over a wired or wireless link. The testing device can thereafter operate in a stand-alone manner and transfer the results of testing and analysis to a device including a display that may comprise virtually any wireless communication device by storing an application or information therein that interprets operator actions to manipulate the display. The testing device identifies and/or encodes data captured during the test protocols and sequences for transfer to the device including a display where they are interpreted by commands specific to the communication device such that the data can be properly displayed and the display manipulated by a user. The communication device can transfer ...

METHOD AND APPARATUS FOR NON-INTRUSIVE MEASUREMENT OF ROUND TRIP DELAY IN COMMUNICATIONS NETWORKS

Measurement of round-trip delay or travel time in a communications network during in-service operation is accomplished by use of two probes (12, 13), situated at respective points of interest along the communication network, and a processor. The probes (12, 13) receive identifiable data patterns normally transmitted over the communications network and generate a time stamp when each pattern arrives at or leaves the respective point. Each probe further generates a pattern identifier based on the data in the pattern and stores the identifier and time stamp as a pair in a buffer internal to each probe. Once the internal buffer contents exceed a predetermined amount of data, the processor receives the data from the buffers to locate the departure and arrival time stamps of each pattern traveling between the probe points.

Location-based social software hotspot acquisition system and method thereof

Systems and methods for detecting and preventing spoofing

Dynamic monitoring system of flow splitting equipment

Throughput measuring method and end node

Re-timer data communication device

Method and device for automated management of virtualization stream mirror image strategy, and medium

METHOD FOR DETERMINING THE NUMBER AND POSITIONING OF PROBES DPI IN A COMMUNICATION NETWORK.

Ce procédé comporte les étapes consistant à : a)- à partir d'un groupe d'individus parents (GPi), générer (1000) une population d'individus enfants (PEi), chaque individu correspondant à une configuration possible de la composante DPI dans le réseau ; b)- pour chaque individu (Ij) de la population d'individus enfants (PEi), simuler (1100) le comportement du réseau équipé de la composante DPI correspondant audit individu ; c)- évaluer une fonction de coût (H) pour ledit individu ; d)- sélectionner (1300) un groupe d'individus enfants (GEi) présentant les valeurs les plus faibles de la fonction de coût ; et, tant qu'une condition de convergence n'est pas respectée, itérer les étapes a) à d) en considérant en tant que groupe d'individus parents pour l'itération suivante (GPi+1), le groupe d'individus enfants de l'itération courante (GEi).

METHODS AND SYSTEMS FOR MONITORING COMPUTER SERVERS

METHOD OF DETECTING EVENTS IN A TELECOMMUNICATIONS NETWORK

RESIDENTIAL GATEWAY RELAY BETWEEN A TERMINAL DEVICE AND A SERVER

ROUTING SYSTEM FOR FILTERING DATA FOR THE INTEGRATION AND TESTING EQUIPMENT OPERATIONAL

Method and device for estimating values of an additive metric

Performance monitoring of distributed storage system

WIRELESS PROBE MANAGEMENT SYSTEM, CONCERNED WITH MANAGEMENT OF PROBE MEASUREMENTS COMMUNICATED OVER WIRELESS NETWORKS

PURPOSE: A wireless probe management system is provided to monitor wireless probes in a monitoring system. CONSTITUTION: A monitoring system comprises: a central processing server, which performs one or more of: issues measurement requests for measuring conditions of a monitored area; and processes data received in response to the measurement requests; a plurality of intermediate monitor sites connected to the central processing server for relaying the measurement requests; and a plurality of smart probes(124,134,135) in communication with the plurality of intermediate monitor sites for measuring the data in response to the measurement request, wherein each one of the plurality of smart probes determines a set of conditions for the each one prior to the measuring. © KIPO 2006 ...

METHOD AND A DEVICE FOR CONTROLLING THE LOAD OF A PACKET INSPECTION DEVICE, PARTICULARLY FOR REDUCING THE ENTIRE LOAD OF A SYSTEM

PURPOSE: A method and a device for controlling the load of a packet inspection device are provided to reduce DDoS(Distributed Denial of Service) effect and prevent the overload caused by packet detection. CONSTITUTION: A packet flows through a packet input unit(10). If the packet is over a predetermined level, a load control unit(20) blocks or passes some of the packet. The amount of packet within a range which allows the processing of the packet is transmitted to an existing packet inspection unit(40). The existing packet inspection device inspects the packet. If the packet is harmful, the existing packet is transferred to a blocking unit(30). The blocking unit abolishes all harmful packets. COPYRIGHT KIPO 2011 ...

ACCELERATING NETWORK SECURITY MONITORING

Systems, devices, and methods for network security monitoring (NSM) are discussed generally herein. A hardware queue manager (HQM) includes: an input interface receiving first data from at least a first worker thread; a queue replication circuit unit generating a copy on a part of the first data to generate first copied data; and an output interface having (a) providing the first copied data to a second worker thread, and/or (b) providing a part of the first data to a third worker thread. COPYRIGHT KIPO 2019 (102) NFV infrastructure (104) Orchestrator (112) Network analysis tools (114) SDN controller (118) Switch/Router (120) Operator infrastructure (122) Host (123) Firmware interface (126A) Platform P1 (126B) Platform PN (128) Interconnect circuit unit (130) Memory ...

Communication system

METHOD FOR DYNAMIC SENSOR NETWORK PROCESSING

Described are a method and a sensor aware network (10) for dynamic processing of sensor data (14). Network context data are inserted into data packets from sensors (14) or local sensor networks coupled to the sensor aware network (10). Sensor aware nodes in the sensor aware network can read and context data and can respond by performing specific network actions. The sensor data and network context data can be stored in a database and later searched according to the network context data. Advantageously, sensor data flows can be treated differently by the sensor aware network (10) the application and the user, depending on the type of sensor data and the actual data values. Thus critical responses to certain sensor data flows can be implemented more efficiently than otherwise possible using conventional network configuration.

ADDRESS MAPPING AND IDENTIFICATION

Methods for detecting assignment changes as well as address changes in address identifiers (particularly fibre channel - FC-2- address identifiers such as D ID, S ID) are disclosed. When such changes are detected, and a probe is in place monitoring at least a portion of a system (i.e., at least one port associated therewith), the detection of a change in address or port assignment triggers a command to map the change to ensure the user defined port name is always correct. The present invention is further directed to methods for monitoring a storage area network, in particular, at least one port associated therewith using user defined port names as a field in any data reported by the monitoring system. The invention is yet further directed to probes and monitoring systems that are capable of generating data that employ statistics or data referring to user-defined port names at least for purposes of archiving and/or viewing such data or statistics.

METHOD AND APPARATUS FOR PERFORMING SERVICE LEVEL ANALYSIS OF COMMUNICATIONS NETWORK PERFORMANCE METRICS

A data transmission system includes probes (probe A, probe B) connected between end user sites (site A, site B) and a data switching network (12). Each probe is connected to the switching network (12) via an access channel (20, 21, 26 or 27) wherein transmission circuits establish paths between the sites through the access channel (20, 21, 26 or 27) and switching network (12). The probes capture and retransmit data traveling between the sites over respective transmission circuits, and can thereby insert service level anaylsis (SLA) messages into data traffic in order to actively communicate network performance information to other probes. For each transmission circuit, the probes periodically collect measurements related to one or more network performance metrics, including round-trip delay (RTD), data delivery ratio (DDR) and network availability. During each SLA measurement cycle, a sequence of SLA messages is exchanged over each transmission circuit, which messages contain data used ...

SYSTEMS AND METHODS FOR MONITORING DISTRIBUTED APPLICATIONS

Systems and methods for automated monitoring and management of distributed applications, client/server databases, networks and systems across heterogenous environment. The invention employs distributed, automated intelligent monitoring agents with embedded sensing technology which is knowledgeable of application protocols, to monitor continuously the network environment in real time. To this end, the monitoring agent can be located on each client and server in the network. The monitoring agent can couple to the communications stack for monitoring the data that is being passed between the client and the network, of a server in the network. The data can be collected and employed for trouble shooting trend analysis, resource planning, security auditing, accounting and chargeback, as well as other applications.

Method and apparatus for diagnosing faults in a hybrid internet protocol network

An Ethernet switch can receive an internet protocol query packet generated by a receiver for collecting telemetry data between a source and the receiver in a multicast network, translate the internet protocol query packet to an Ethernet query packet, collect in the Ethernet query packet telemetry data from the Ethernet switch where at least one telemetry field of the Ethernet Switch includes an arrival time of the Ethernet query packet at the Ethernet switch, and submit the Ethernet query packet to the next network element of the multicast network. An internet protocol router can receive an Ethernet query packet generated by an Ethernet switch having at least one field for telemetry for collecting telemetry data between a source and a receiver, translate the Ethernet query packet to an internet protocol query packet, and submit the internet protocol query packet to the next network element. Additional embodiments are disclosed.

System with on-demand state for applications

Resources used by a plurality of applications that are located in system memory can be managed by monitoring usage statistics for the plurality of applications running on a hardware platform. Usage statistics for a particular application that are outside of a usage threshold profile can result in the creation of an on-demand profile that specifies a set of resources used by the particular application and a set of destination inputs mapped to the particular application. The destination inputs can be mapped to a management module. At least some of the resources of the set of resources used by the particular application can be released. Using the management module, an access to an input of the set of destination inputs can be detected. In response, resources of the set of resources can be allocated to the particular application.

ENHANCED TRACING AND/OR MONITORING OF THE NETWORK NODES OF A COMMUNICATION NETWORK

A method for enhanced tracing and/or monitoring of network nodes of a communication network includes tracing or capturing, by at least one tracing functionality agent corresponding to at least one virtual machine, first data packets being sent by at least one virtual machine and/or second data packets being received by the at least one virtual machine; and transmitting, by the at least one tracing functionality agent corresponding to the at least one virtual machine, the first data packets and/or the second data packets to a monitoring entity or to a data layer of the communication network.

Asymmetric packet switch and a method of use

The present invention relates to a packet switch and a packet switching method. An example embodiment of the present invention comprises at least three network ports, at least one instrument port, a mux-switch, a packet switch fabric, and an address table. The embodiment updates the address table to include the source address of each ingress packet of each network port and associate the source address with that network port. The mux-switch routes the ingress packet traffic of each network port according to the identity of the network port so that at least a copy of the packet traffic of one of the network ports is routed to an instrument port. The packet switch fabric routes the packets from the instrument ports to the network ports according the destination address of the packet and the identity of the network port that is associated with the destination address as recorded in the address table.

Time-based processing of messages arriving from multiple gateways using gateway-based time perimeters

Systems and methods are disclosed herein for performing a time-ordered operation on messages transmitted from multiple sources to a region of networked machines. In an embodiment, the system runs a software-based synchronization process to synchronize each of a plurality of gateways with a reference clock, where each gateway is a machine on a perimeter of the region of networked machines and is connected to receive messages from multiple sources. The system receives messages that enter the region through one of the gateways, where the gateway timestamps the message. The system then performs the time-ordered operation on the received messages in an order based on an absolute time of entry into the region, where the absolute time of entry is relative to the reference clock and is determined based on the timestamp from the gateway.

PACKET SNIFFING WITH PACKET FILTERING HOOKS

Systems, methods, and other embodiments associated with packet sniffing using packet filter hooks are described. In one embodiment, a method includes re-directing a network packet at a filter hook point in an Internet Protocol processing stack. The example method may also include re-directing the network packet to a packet sniffer.

DETERMINE VULNERABILITY USING RUNTIME AGENT AND NETWORK SNIFFER

Example embodiments disclosed herein relate to determination of vulnerability of an application under test using a runtime agent and network sniffer during a security test. A runtime agent monitors execution of an application under test. A network sniffer is used to identify a probe value for determination of the vulnerability.

METHODS AND SYSTEMS FOR DETECTING PATH BREAK CONDITIONS WHILE MINIMIZING NETWORK OVERHEAD

Disclosed herein are systems and methods for detection of a path break in a communication network by one network appliance of a plurality of network appliance. A communication path that is transitioning from active to idle state can be quickly determined by evaluating network data traffic within a predetermined time interval after the end of a data transmission. By strategically utilizing health probes at only a set predetermined time interval after a data transmission, a path break condition can be quickly determined without significant use of network bandwidth. Further, the path break condition can be determined unilaterally by one network appliance.

TECHNIQUES FOR STEERING NETWORK TRAFFIC TO REGIONS OF A CLOUD COMPUTING SYSTEM

In various embodiments, domain name system (DNS) servers are implemented on a content distribution network (CDN) infrastructure in order to facilitate centralized control of traffic steering. Each server appliance in the CDN infrastructure acts as both an authoritative DNS nameserver and a dynamic request proxy, and each such server appliance is assigned to one of multiple cloud computing system regions. The assignment of server appliances to cloud regions is based on latency measurements collected via client application probes and an optimization that minimizes an overall latency experienced by the client applications subject to constraints that the maximum traffic to each cloud region is less than a capacity constraint for that region, the maximum deviation of traffic to each cloud regions at any point in time is less than a given percentage, and the maximum deviation of traffic between direct and indirect paths is less than a given percentage.

Liquid drop ejection using dual feed ejector

A printer includes a printhead die including liquid ejectors separated by walls. Each liquid ejector includes a nozzle orifice and an associated drop forming mechanism. First and second liquid feed channels, extending in opposite directions, are in fluid communication with each liquid ejector. A liquid inlet includes a plurality of first and second segments in fluid communication with the first liquid feed channels and the second liquid feed channels, respectively. The first and second segments are located on opposite sides of the nozzle orifice. For a given liquid ejector, both of the first and second segments are directly in line with the liquid ejector. An electrical lead extends from each drop forming mechanism toward an edge of the printhead die. At least one of the electrical leads is positioned between neighboring segments of at least one of the first and second segments of the liquid inlet.

Replaying captured network traffic

Systems, methods, and machine readable and executable instructions are provided for replaying captured network traffic. A method for replaying captured network traffic can include replaying multiple captured network traffic files simultaneously on the same network device, the captured network traffic files including original network traffic captured from N original connections between C original clients and S original servers. During replaying, rewriting IF addresses and/or port number information of data packets comprising the original network traffic to reflect test network traffic from M test connections between X test clients and Y test servers, where at least X is different than C or Y is different than S. The method further includes modifying checksums, during replaying, to correct values corresponding to the rewritten IF addresses and port number information. N, C, S, M, X, and Y are positive integers.

Active probing for real-time diagnosis

Improved problem diagnosis techniques for use in accordance with computing systems, e.g., distributed computing systems, are disclosed. In one aspect of the invention, a technique for diagnosing a problem associated with a computing system comprises the following steps/operations. One or more probes are executed in accordance with at least a portion of a previously selected probe schedule. When a result of one or more of the probes of the previously selected probe schedule indicates, at least, a potential problem associated with the computing system, one or more probes which optimize at least one criterion are selected in real-time. The one or more selected probes are executed so as to diagnose the potential problem.

Restarting Network Reachability Protocol Sessions Based on Transport Layer Authentication

In an embodiment, a method comprises establishing a first data communications session with a first router. In response to receiving a first request to establish a second data communications session, a probe message that is configured to test whether the first data communications session or the first router is responsive is sent to the first router. In response to determining that the first router has not acknowledged the probe message before a probe timer has expired, and receiving a second request to establish the second data communications session, the second data communications session with the first router is established and a state for the first data communications session is deleted.

Method and apparatus for correlating end to end measurements through control plane monitoring of wireless traffic

A method, computer readable medium and apparatus for correlating measures of wireless traffic are disclosed. For example, the method obtains the wireless traffic, and processes the wireless traffic by a plurality of probe servers, where each of the plurality of probe servers generates a plurality of feeds, wherein the plurality of feeds comprises a data feed and a control feed. The method correlates the plurality of feeds from the plurality of probe servers by a plurality of aggregator servers, where the data feed and the control feed of each of the plurality of probe servers are correlated with at least one other probe server of the plurality of probe servers to provide a correlated control plane and a correlated data plane, and extracts at least partial path information of a flow from the correlated control plane. The method then correlates performance information from the correlated data plane for the flow.

Evolved Packet System Non Access Stratum Deciphering Using Real-Time LTE Monitoring

A monitoring system is coupled to interfaces in an LTE network and passively captures packets from the network interfaces. First data packets associated with an authentication and key agreement procedure are captured on a first interface. Second data packets associated with the authentication and key agreement procedure are captured on a second interface. Individual ones of the first data packets are correlated to individual ones of the second data packets based upon a same parameter. An authentication vector table is created comprising information from the correlated first data packets and second data packets, wherein entries in the table comprise authentication data for a plurality of security contexts. A cipher key is identified to decipher additional packets for the user. The cipher key can also be identified in case of Inter Radio Access Technology Handover by the user equipment.

Device and method for identifying the location of anomaly link with link candidates refined by means of the number of overlapping abnormal flows

In an anomaly locating device, a flow information collector collects flow information on flows between terminal devices from observation nodes arranged at observation points over a telecommunications network, and an anomaly location narrow-downer counts, based on the flow information, the number of overlapping abnormal flows passing through each link connected to the observation points to determine a link having the largest number of overlapping abnormal flows from among the links connected to the observation points. The anomaly location narrow-downer then collects link candidates reachable by routing via the link thus determined. An anomaly link identifier narrows down the collected link candidates to an abnormal link.

Determining Network Node Performance Data Based on Location and Proximity of Nodes

In an embodiment, a method comprises receiving a request to obtain network performance data for a plurality of target nodes; determining geo-locations of the plurality of target nodes; based on the geo-locations, determining a set of the plurality of target nodes that are within a specified proximity radius; selecting one particular target node in the set; sending a probe packet, requesting network performance data, to the one particular target node in the set and not to all other target nodes in the set; applying, to all the target nodes in the set, network performance data that is received in response to the probe packet; wherein the method is performed by one or more processors.

Fault detection and recovery as a service

The monitoring by a monitoring node of a process performed by a monitored node is often devised as a tightly coupled interaction, but such coupling may reduce the re-use of monitoring resources and processes and increase the administrative complexity of the monitoring scenario. Instead, fault detection and recovery may be designed as a non-proprietary service, wherein a set of monitored nodes, together performing a set of processes, may register for monitoring by a set of monitoring nodes. In the event of a failure of a process, or of an entire monitored node, the monitoring nodes may collaborate to initiate a restart of the processes on the same or a substitute monitored node (possibly in the state last reported by the respective processes). Additionally, failure of a monitoring node may be detected, and all monitored nodes assigned to the failed monitoring node may be reassigned to a substitute monitoring node.

Communication apparatus and method of controlling same, and storage medium

In a communication apparatus for communicating with a network device and a method of controlling this apparatus, a filter condition that includes an address of the communication apparatus is enabled if a setting has been made so as to capture a packet addressed to the communication apparatus. On the other hand, if a setting has been made so as to capture a packet relating to the communication apparatus, then a filter condition that includes a broadcast address and/or a multicast address in addition to the address of the communication apparatus is enabled. If a received packet satisfies the filter condition, then this packet is captured.

Multiple Protocol Correlation And Topology Detection in eHRPD Networks

Network nodes and interfaces are identified in a combined CDMA/eHRPD and LTE network. Messages captured by a monitoring system on different interfaces are combined in session records. The session records associated with the same network nodes correlated using parameters in the session records. Session records on an A11, A10 and S2a interfaces are correlated using a home network prefix and interface identifier data or home address information.

System and Method for Hierarchical Visualization of Data

A system and method for monitoring IP flows in a network is disclosed. A plurality of monitor probes are coupled to links in the network, the monitor probes capture data packets from the links and determine protocols in OSI Layers 3, 4, and 5/7 of the packets. A user interface receives user inputs selecting the links and protocols for analysis. A display is coupled to the monitor probes and the user interface. The display and user interface receiving a user selection of links for analysis and display a first protocol analysis to the user, the first protocol analysis display comprising a pie chart representing all OSI Layer 3 protocols captured on the selected links, a pie chart representing all OSI Layer 4 protocols captured on the selected links, and a pie chart representing all OSI Layer 5/7 protocols captured on the selected links.

Network Transmission Capacity Measurement

Transmission capacity from a first node to a second node through a communication network is measured. First and second probe message from the first node to the second node, a first and second amount of data in the first and second probe message respectively being mutually different, at least one of the first and second amount exceeding a fragmentation threshold of the communication network. First and second round trip time durations are measured between transmission of the first and second probe message from the first node and reception back at the first node of a first and second response message from the second node to the first and second probe message respectively. The capacity is computed from a difference between the first and second round trip time duration.

Method and apparatus for dynamic frequency selection in wireless local area network system

A method of dynamic frequency selection by an access point (AP) in a basic service set (BSS) in a wireless local area network is provided. The access point configured to communicate over a primary subchannel and a secondary subchannel. The method includes: transmitting a frame including a quiet element and a quiet channel element; and performing channel measurements in the quiet interval. The quiet element defines an quiet interval during which no transmission occurs, the quiet channel element indicates that the secondary subchannel is to be quieted during the quiet interval, and the quiet channel element indicates a condition under which the primary subchannel may be used during the quiet interval.

System and Method for Data Acquisition in an Internet Protocol Network

A communication network system for monitoring data traffic is disclosed, in which at least one switch serving as an intermediary to a plurality of data input streams and a plurality of data output streams; a capture server in communication with the switch; and a data acquisition control engine operable to receive data acquisition instructions from a user and cause the received instructions to be implemented at the switch.

Remote management hardware platform for site monitoring with smart block i/o device

A system for monitoring a remote site includes a remote management module including a processor and memory configured to receive and store definitions of the measurements and alarms, and a communication system for reporting collected measurements and alarms to upstream systems, and at least one remote measuring block including port connectors for communicating the remote measuring block with downstream collection devices that collect measurements and alarms at the remote site. A networking connection such as an Ethernet connection is provided between the remote management module and the remote measuring block for transferring data therebetween. The blocks can be located near terminations of the collection devices to reduce the amount of required cabling. The remote management module can store configuration and operating software for the blocks so that new blocks can be automatically configured upon replacement of failed blocks.

Network traffic distribution

A switch for a switching network includes a plurality of ports for communicating data traffic and a switch controller that controls switching between the plurality of ports. The switch controller selects a forwarding path for the data traffic based on at least topological congestion information for the switching network. In a preferred embodiment, the topological congestion information includes sFlow topological congestion information and the switch controller includes an sFlow client that receives the sFlow topological congestion information from an sFlow controller in the switching network.

System for organizing and fast searching of massive amounts of data

A system to collect and analyze performance metric data recorded in time-series measurements, converted into unicode, and arranged into a special data structure. The performance metric data is collected by one or more probes running on machines about which data is being collected. The performance metric data is also organized into a special data structure. The data structure at the server where analysis is done has a directory for every day of performance metric data collected with a subdirectory for every resource type. Each subdirectory contain text files of performance metric data values measured for attributes in a group of attributes to which said text file is dedicated. Each attribute has its own section and the performance metric data values are recorded in time series as unicode hex numbers as a comma delimited list. Analysis of the performance metric data is done using regular expressions.

Stream application performance monitoring metrics

Techniques are disclosed for calculating performance metrics associated with a data stream. A processing element configured to process data tuples flowing through a stream-based computing system receives data tuples via the data stream. Each of the one or more tuples is processed at the processing element, and each of the one or more tuples are associated with metadata that includes information related to the processing of the tuple by the processing element. Performance metrics are then calculated for the data stream based on the metadata associated with the one or more tuples.

Upgrading enterprise managers

Techniques are described for upgrading systems that include a first set of agents for collecting target data from a plurality of targets and sending the target data to a first management server. In an embodiment, a second set of agents is pre-deployed. Each pre-deployed agent is configured to, upon activation, collect target data from a respective target of the plurality of targets and send the target data to a second management server. While the pre-deployed agent remains inactive, an agent from the first set of agents collects and sends the target data to the first management server. When a first batch of one or more pre-deployed agents is activated, each activated agent begins collecting target data and sending the target data to the second management server. For agents not in the first batch, the first set of agents continues to collect and send the target data.

DISTRIBUTED MONITORING AND CONTROL OF NETWORK COMPONENTS

A distributed monitoring system and a computer-implemented method monitors and controls locally situated network components through a monitoring and control device or processor querying the network component operating parameters and sending control commands for controlling the parameters queried. Reports of the status of the monitored network components are periodically generated from throughout the network and sent to a remotely located status viewing station configured to generate a monitoring interface and display the operational status of the network based on the status reports. If necessary, the status viewing station automatically transmits instructions, or a user enters instructions into the status viewing station, for instructing action be taken by the monitoring and control device or processor, e.g., to adjust one or more operating parameters queried. The distributed monitoring system may be particularly useful in monitoring and managing the health of a digital signage network. 1. A distributed monitoring system for monitoring and controlling network components , the distributed monitoring system comprising:a plurality of display devices, each display device comprising a display screen configured to display content;a monitoring and control device comprising a memory and a processor communicatively coupled to the plurality of display devices, wherein the monitoring and control device processor executes instructions stored in the monitoring and control device memory for querying one or more parameters of the plurality of display devices and for sending control commands to one or more of the display devices for controlling the one or more parameters queried; anda status viewing device comprising a memory, a processor and a display monitor, the status viewing device processor configured to receive status reports generated by the monitoring and control device, the status reports comprising an operational status for the one or more parameters queried, wherein the ...

Access point having multichannel and multi transmission power, cell formation method

Described embodiments provide an access point for forming multiple service zones within a corresponding cell. The access point may include a first access point module and a second access point module. The first access point module may be configured to form a first service zone for first user equipment located at a center area of the cell. The second access point module may be configured to form a second service zone for second user equipment located at an edge area of the cell.

Method for Measuring Throughput and Maintenance End Point

The disclosure claims a method for measuring throughput and a Maintenance End Point (MEP). The method is applied in the Multi-Protocol Label Switching-Transport Profile (MPLS-TP) network. The method comprises the following steps: a first MEP in the MPLS-TP network performs the transmission of the data packets with a second MEP in the MPLS-TP network in a preset time period; after the preset time period, the first MEP receives measurement information fed back by the second MEP, wherein the measurement information indicates the number of data packets transmitted by the second MEP in this transmission; according to the measurement information, the first MEP judges that packet loss does not occur in this transmission of the data packets and the transmission rate meets the requirement of target precision, and then obtains the throughput of the transmission of the data packets in the transmission direction. According to the technical solutions provided by the disclosure, measurement cost can be saved and operation and maintenance can be simplified.

Communication quality monitoring system, communication quality monitoring method and recording medium

Conventional network quality monitoring systems require high monitoring cost, because: physical maintenance cost is high, since monitors are required to install on many portion of the network; the number of monitoring flows is apt to increase; the cost for information synchronization between monitors is required; and the network cost to collect information from apparatuses is required. In the present invention, based on a network whose route is definable by an external controller and changing the monitoring flow route appropriately, it is possible to perform monitoring of the communication quality under a small number of monitoring terminals and flows. Further, the role of the monitoring flow is divided into the monitoring flows to monitor the quality degradation occurrence and to specify the quality degradation point. The former is used for normal time, and the latter is for the quality degradation time. Consequently, the network monitoring system reducing the cost is proposed.

Detection of Encrypted Packet Streams Using Feedback Probing

Methods, systems, and devices are disclosed for detecting encrypted Internet Protocol packet streams. A probe stream having a known observable parameter is generated. The observable parameter exhibits a known characteristic of a known type of data encrypted within a stream of packets. The probe stream is communicated to a network element via a communications network. When the probe stream is received by the network element, the network element can compare the known observable parameter to an actual value. Any difference between the known observable parameter and the actual value can be used to correct for network-induced variation and other effects, thus ensuring accurate detection and identification of data types within encrypted streams of packets. 1. A method comprising:measuring variation in a time interval between probe stream adjacent packets using an inserted known observable parameter as part of a probe stream transmitted via a communications network to determine a network-induced time variation;changing a time interval inserted between subsequent actual data packets transmitted via the communications network based on the network-induced time variation;periodically generating the probe stream corresponding to a zone within the communications network; andperiodically transmitting respective probe streams from different respective zones within the communications network to other zones within the communications network to determine respective zone network-induced time variations.2. A method according to claim 1 , wherein the respective zone network-induced time variations comprise respective zone network-induced time variations corresponding to transmissions from ones of the different respective zones to ones of the other zones.3. A method according to claim 2 , further comprising:changing the time interval inserted between subsequent actual data packets transmitted based on the respective zone network-induced time variations corresponding to the transmissions ...

Network traffic distribution

A switch for a switching network includes a plurality of ports for communicating data traffic and a switch controller that controls switching between the plurality of ports. The switch controller selects a forwarding path for the data traffic based on at least topological congestion information for the switching network. In a preferred embodiment, the topological congestion information includes sFlow topological congestion information and the switch controller includes an sFlow client that receives the sFlow topological congestion information from an sFlow controller in the switching network.

Systems and methods for extracting structured application data from a communications link

Systems and methods for generating a semantic description of operations between network agents. In an embodiment, packet-level traffic between two or more network agents is captured. The packet-level traffic is bundled into one or more messages, wherein each message comprises one or more elements. For each of the messages, the elements of the message are matched to one or more attributes, and the message is decoded into message data based on the matched attributes. The message data is then used to generate a semantic description of operations between the network agents.

Ethernet performance monitoring

One embodiment is a source router that monitors the performance of an Ethernet network. The source router generates an Ethernet connectivity check request frame that includes a transmission timestamp, and transmits the Ethernet connectivity check request frame to a destination router. The source router receives a reply from the destination router that is transmitted in response to receiving the Ethernet connectivity check request frame and determines a round trip time between the source router and the destination router based on a time of receipt of the reply and the transmission timestamp.

SYSTEM AND METHOD FOR MONITORING AND MANAGING DATA CENTER RESOURCES IN REAL TIME

In one aspect the present disclosure relates to a remote access appliance for facilitating communications between a managed device and a user located remotely from the managed device. The appliance may have a processor adapted to facilitate the communication of keyboard, video and mouse information between the appliance and the managed device. A rack data unit (RDU) subsystem may be used which is adapted to manage communications with, and to receive sensor data directly from, at least one remotely located sensor located at the managed device, without the need to transmit the sensor data over a network. An interface may also be used for interfacing the appliance to the managed device. 1. A remote access appliance for facilitating communications between a managed device and a user located remotely from the managed device , the appliance comprising:a processor adapted to facilitate the communication of keyboard, video and mouse information between the appliance and the managed device;a rack data unit (RDU) subsystem adapted to manage communications with, and to receive sensor data directly from, at least one remotely located sensor located at the managed device, without the need to transmit the sensor data over a network; andan interface for interfacing the appliance to the managed device.2. The appliance of claim 1 , further comprising at least one autosensing power supply adapted to sense when a loss of power to a rack interface pod coupled to the appliance occurs claim 1 , where the rack interface pod is interfacing the appliance to the managed device claim 1 , and to automatically apply direct current (DC) power to the rack interface pod to maintain the rack interface pod in a powered on condition.3. The appliance of claim 1 , wherein the interface includes a plurality of autosensing ports adapted to automatically sense whether an external managed device coupled thereto is a serial device or an Ethernet device.4. The appliance of claim 1 , wherein the appliance is ...

Cooperative Proxy Auto-Discovery and Connection Interception

In a network supporting transactions between clients and servers and proxies that are interposable in a network path, a pair of proxies can modify a packet stream such that packet data from client to server is transformed at a client-side proxy of the pair and untransformed at a server-side of the pair and packet data from server to client is transformed at the server-side proxy and untransformed at the client-side proxy. A discovering proxy transparently discovers its position in a proxy pair by using proxy signals. A discovering proxy might determine that it is a client-side proxy by receipt of a packet from client without a proxy signal, or that it is a server-side proxy by receipt of a packet from server without a return proxy signal. Once a proxy pair is discovered, it might transform traffic from server to client or vice versa, transforming and untransforming the traffic. 1receiving, at a first probe node in the network path, a first packet from a target client wherein the first packet is a packet directed at a target server;modifying the first packet to signal presence of the first probe node in the network path, thus forming a modified first packet having therein a presence signal;forwarding the modified first packet onto the network path, directed toward the target server;monitoring, at the first probe node, packets directed at the target client and apparently from the target server to detect packets containing return signals, wherein a return signal is a signal from a device at a second probe node that detects the presence signal in the modified first packet and wherein the return signal is an indication that the device at the second probe node detected the presence signal as being a probing signal;acting on a successful probe if a responsive return signal is received corresponding to a presence signal sent from the first probe, wherein the mapping table is shared in storage accessible to the first probe node node;updating a mapping table with results of a ...

Context Aware Network Security Monitoring for Threat Detection

The disclosed method involves monitoring behavior of at least one node, associated with at least one user, in a network to generate a behavior profile for the user(s). The method further involves comparing the behavior profile for at least one user with a baseline behavior profile for the user(s). Also, the method involves determining when there is a difference between the behavior profile for at least one user and the baseline behavior profile for the user(s). Further, the method involves flagging an event associated with the difference: when the difference exceeds a baseline threshold level, does not exceed a baseline threshold level, meets at least one criterion, and/or does not meet at least one criterion. Additionally, the method involves classifying the event to an event classification. Further, the method involves transmitting the event to at least one other node in the network and/or a network operations center.

Managing trace requests over tunneled links

In one embodiment, a head-end node of a tunnel, relative to a tail-end node, receives a trace request, and in response, generates an out-of-tunnel trace request based on the trace-request. The trace request is transmitted in-tunnel to the tail-end node, while also transmitting the out-of-tunnel trace request to at least one subsequent node. The head-end node may then receive a trace response from the tail-end node based on the in-tunnel trace request, as well as a trace response from each of the subsequent nodes based on the out-of-tunnel trace request.

Virtual data loopback and/or data capture in a computing system

A method for enabling virtual data loopback in a computing system may include forwarding a data packet from a first device to a second device; the second device identifying from the data packet egress interface information indicating a first interface for forwarding the data packet out of the computing system; based on the first interface identified from the egress interface information, automatically determining a second interface to the first interface; inserting into the data packet ingress interface information that indicates the second interface; forwarding the data packet, including the ingress interface information, back to the first device; and the first device identifying the ingress interface information indicating the second interface; such that the data packet is looped back to the first device without being communicated via the first or second interface, and such that from the perspective of the first device the data packet was received via the second interface.

System and method for aligning data frames in time

A method and apparatus for merging data acquired by two or more capture devices from two or more points in a computer system, duplicate frames are analyzed to determine the time difference between the timestamp of a first capture device and a second capture device. The disclosure compares the frames for duplicates. If the duplicate frames are the first set of duplicate frames discovered, then all previous timestamps and all subsequent timestamps from the second capture device are adjusted by the calculated time difference. If duplicate frames are again discovered, the time difference is recalculated and all subsequent frames from the second capture device are adjusted by the calculated time difference. After all the frames have been analyzed and the timestamps adjusted, the frames are merged together and put into chronological order to simulate a single capture of data encompassing all of the points where the data was collected.

METHOD AND APPARATUS TO SCHEDULE MULTIPLE PROBES FOR ACTIVE OR PASSIVE MONITORING OF NETWORKS

An apparatus and method for scheduling multiple probes for monitoring of a network is disclosed. The method comprises identifying a group of multiple probes to be deployed over an IP network, each of the multiple probes measuring different performance metrics in the network. A schedule period is also identified, in which to schedule the deployment of the multiple probes in the group. An even or random mode of scheduling may be specified. In response the even mode of scheduling, the apparatus may schedule the deployment of the multiple probes in the defined group periodically in the schedule period and/or schedules the group of probes periodically. Alternatively, in response to the random mode of scheduling, the scheduling apparatus may schedule the deployment of each of the multiple probes in the defined group at random intervals and/or schedules the group of probes randomly. 1identifying at least one group of multiple probes to be deployed in the network;identifying a schedule period in which to schedule the deployment of the group of multiple probes; anddeploying the group of multiple probes in the schedule period.. A method of scheduling multiple probes in a network, the method comprising: This application claims the benefit of priority to U.S. patent application Ser. No. 11/277,058, filed Mar. 21, 2006, which is hereby incorporated by reference herein in its entirety.The present application relates to performance monitoring in network systems, for example in Internet protocol (IP) network systems in which real-time applications such as voice over Internet protocol (VoIP) or other time-sensitive data are sent in packets from a server to a client or vice versa.Network applications such as virtual private network (VPN), voice over IP (VoIP) or voice over frame relay (VOFR) network may require an IP service provider (ISP) to monitor data packet loss in a network and/or inter-packet jitter (inter-packet latency in arrival time). Such network applications may be ...

Systems and methods for health based spillover

The present solution provides a spillover management technique for virtual servers of an appliance based on health. Using a health based spillover technique, a network appliance may direct requests to a backup or second virtual server upon determining that a predetermined percentage of services being load balanced are down. In this manner, the spillover will occur based on a user controlled determination of a level of services being down to the number of services enabled. Instead of waiting for a last service of a virtual server to be marked down to spillover to another virtual server, the spillover may occur based on a user specified percentage. For example, the appliance may spillover from one virtual server to another virtual server when the number of services marked down relative to the number of enabled services falls below a specified percentage.

TRACE ROUTE COMMAND EXECUTION FROM A VIRTUALIZED ENVIRONMENT

A traceroute command may be used to diagnose a computer network or provide additional information regarding a computer network. A traceroute command may be provided to applications executing within a virtualized environment by allowing commands to be passed from the virtualized environment to a host operating system through a network interface. The traceroute command may be executed by the host operating system, and network information returned to the application in the virtualized environment. 1. A method , comprising:receiving a user command to execute a trace route in a virtualized environment;building a command string corresponding to the user command;transmitting the command string to a network interface for execution outside of the virtualized environment;receiving, from outside of the virtualized environment, results of the command string; andoutputting, in the virtualized environment, the results of the command string.2. The method of claim 1 , in which building the command string comprises building a Linux command string.3. The method of claim 1 , further comprising executing the command string in a host operating system outside of the virtualized environment.4. The method of claim 3 , in which executing the command string comprises transmitting a plurality of probe packets.5. The method of claim 4 , in which executing the command string comprises transmitting a plurality of probe packets with increasing time to live (TTL) values.6. The method of claim 1 , further comprising looking up a destination address when the user command includes a destination host name.7. The method of claim 1 , further comprising receiving a completion event from the network interface when the trace route is complete.8. A computer program product claim 1 , comprising: code to receive a user command to execute a trace route in a virtualized environment;', 'code to build a command string corresponding to the user command;', 'code to transmit the command string to a network interface ...

METHOD, APPARATUS, AND SYSTEM FOR ANALYZING NETWORK TRANSMISSION CHARACTERISTIC

A method for analyzing a network transmission characteristic, includes: receiving, by an intermediate network element, a service packet sent by a first service network element through the intermediate network element to a second service network element, where the service packet carries a service stream identifier, service stream information, and a control rule, where the service stream identifier is used to identify a service stream, the service stream information is used to provide a parameter that is required during transmission characteristic analysis, and the control rule is used to determine a type of the transmission characteristic analysis; and determining, by the intermediate network element, the type of the transmission characteristic analysis according to the received control rule, and performing, according to the service stream information, the transmission characteristic analysis on the service stream identified by the service stream identifier in a network application. 1. A method for analyzing a network transmission characteristic , comprising:receiving, by an intermediate network element, a service packet sent by a first service network element through the intermediate network element to a second service network element, wherein the service packet carries a service stream identifier, service stream information, and a control rule, wherein the service stream identifier is used to identify a service stream, the service stream information is used to provide a parameter that is required during transmission characteristic analysis, and the control rule is used to determine a type of the transmission characteristic analysis; anddetermining, by the intermediate network element, the type of the transmission characteristic analysis according to the received control rule, and analyzing, according to the parameter that is provided by the service stream information and required during the transmission characteristic analysis, the service stream identified by the ...

CORRELATION OF MEDIA PLANE AND SIGNALING PLANE OF MEDIA SERVICES IN A PACKET-SWITCHED NETWORK

This invention relates to methods for correlating media streams and signaling sessions of services, for example, in a passive monitoring system of a packet-switched network. Furthermore, the invention also relates to an implementation of these methods in hardware and software, and provides a signaling plane probe, a media plane probe and a correlation unit. Moreover, a passive monitoring system comprising one or more of these hardware devices is provided. To correlate media streams and signaling sessions of services, the invention proposes to independently generate correlation keys in a media plane probe for monitored media streams and correlation keys for signaling sessions that are monitored by a signaling plane probe in a fashion that matching correlation keys are generated for a respective service. By identifying reports on the media streams and reports on the signaling session that contain matching correlation keys respectively, the media streams and the signaling streams are correlated in a correlation unit. 1. A method for correlating media streams and signaling sessions of services in a passive monitoring system of a packet-switched network , the method comprising:a) generating at least one correlation key for each direction of a service based on the information of the signaling session of the respective service monitored at the signaling plane probe, wherein the correlation keys for a respective service are generated using a timestamp indicative of the point in time at which the end of the respective signaling session of the respective service has been detected by the signaling plane probe and using information on the direction of the respective service,b) storing, by the signaling plane probe, a signaling session report for each signaling session in a database, wherein each signaling session report comprises the at least two correlation keys generated for the respective directions of the service,c) generating a correlation key for each media stream ...

Alarm clustering mechanism

A method is disclosed. The method includes identifying locations of one or more points of interest, identifying an area of interest on a map displayed on a display device, identifying points of interest within the area of interest, selecting a level of detail and clustering the points of interest within the level of detail based on the location of the points of interest relative proximity to other points of interest.

System and Method For IQ Imbalance Estimation

A system for IQ balance estimation is disclosed and may include requesting an in-phase and quadrature (IQ) probe comprising tones, receiving the tones, and calculating an estimate of IQ imbalance for each received tone. The system may also include requesting an IQ probe, and calculating an estimate of IQ imbalance for each received tone by determining an image to tone ratio based on the received tones. The requesting of the IQ probe, the receiving of the tones, and the calculating of the image to tone ratio may be repeated the results of the calculations of the image to tone ratio may be averaged. Gain, phase, and delay parameters may be calculated to compensate for the IQ imbalance. 121- (canceled)22. A method , comprising:in a first communication device:requesting an in-phase and quadrature (IQ) probe from a second communication device external to the first communication device, the IQ probe comprising tones;receiving the tones from the second communication device; andcalculating an estimate of IQ imbalance for each received tone by determining an image to tone ratio based on the received tones.23. The method of claim 22 , comprising repeating the requesting of the IQ probe claim 22 , the receiving of the tones claim 22 , and the calculating of the image to tone ratio claim 22 , and averaging the results of the calculations of the image to tone ratio.24. A method claim 22 , comprising:in a first communication device:requesting an in-phase and quadrature (IQ) probe from a second communication device external to the first communication device, the IQ probe comprising tones;receiving the tones from the second communication devicee; andcalculating an estimate of IQ imbalance for each received tone.25. The method of claim 24 , comprising calculating gain claim 24 , phase claim 24 , and delay parameters to compensate for the IQ imbalance.26. The method of claim 25 , wherein the IQ imbalance comprises a receiver IQ imbalance.27. The method of claim 24 , comprising ...

Network Performance Monitoring Method and Apparatus

Embodiments of the present application provide a network performance monitoring method and apparatus. The apparatus records a time (e.g. a first time) at which a first network device sends a first packet to a second network device, records a time (e.g. a second time) at which the first network device receives a response packet of the first packet, and determines a round-trip delay between the first and second network devices according to the first and second times; within a preset time, the apparatus collects statistics about a quantity (e.g. a first count) of first packets that are sent by the first network device to the second network device, and collects statistics about a quantity (e.g. a second count) of retransmitted packets in the first packets, and determines a packet loss rate from the first network device to the second network device according to the first and second counts. 1. A network performance monitoring method , the method comprising:receiving, by a network performance monitoring apparatus, a second packet sent by a first network device, wherein the second packet is a duplicate packet of a first packet, the second packet is copied when the first network device sends the first packet to a second network device, a destination receive end of the first packet is the second network device, a type of the first packet is a packet of a traffic flow transmitted by using one of: a connection-oriented protocol and a packet that is used to establish a connection, and the connection is used to transmit a traffic flow by using a connection-oriented protocol;recording, by the network performance monitoring apparatus, a first time, wherein the first time is a time at which the network performance monitoring apparatus receives the second packet;receiving, by the network performance monitoring apparatus, a fourth packet sent by the first network device, wherein the fourth packet is a duplicate packet of a third packet, the fourth packet is copied when the first ...

MANAGEMENT COMPUTER, ALLOCATION MANAGEMENT METHOD, AND NON-TRANSITORY COMPUTER READABLE STORAGE MEDIUM

A management computer for managing allocation of an application and an application probe in a computer system including a plurality of computers, the management computer comprising a probe management part configured to determine a computer for allocating a new application and a new application probe, the probe management part being configured to: retrieve a computer satisfying a configuration condition and a monitoring interval condition; compute a value of a monitoring spike, in a case where the new application and the new application probe are allocated to the retrieved computer, determine the retrieved computer as a candidate computer to which the application and the application probe are to be allocated, in a case where it is determined that the computed value of the monitoring spike is smaller than a predetermined threshold. 1. A management computer for managing allocation of an application and an application probe for monitoring a status of the application in a computer system including a plurality of computers ,the plurality of computers including at least one computer on which a resource monitoring probe that monitors a status of at least one computer operates, the management computer comprising:a processor;a memory coupled to the processor;a network interface coupled to the processor; anda probe management part configured to determine a computer for allocating a new application and a new application probe requested to perform monitoring in synchronism with a monitoring timing for the resource monitoring probe, based on a monitoring request including a configuration condition for the computer for allocating the new application probe and a monitoring interval condition for the new application probe,the probe management part being configured to:retrieve a computer satisfying the configuration condition and the monitoring interval condition from among the plurality of computers;compute a value of a monitoring spike, in a case where the new application and the ...

Method and System for Monitoring Domain Name Registraitons

Improved approaches to domain name monitoring. The monitoring of domain names, e.g., registrations therefor, is beneficial to holders of similar domain names, trademark owners, and competitors. Such monitoring can be automatically performed. 1a domain monitoring server; anda monitoring database, register a name to be monitored by a requesting user;', 'store the registered name in the monitoring database;', 'search one or more registration databases to identify one or more registrations of at least one registered domain name that is similar to the registered name;', 'monitor activation of a website at the at least one registered domain name of the identified one or more registrations; and', 'inform the requesting user of (i) the identified one or more registrations as determined by the search or (ii) the activation of the website at the at least one registered domain name of the identified one or more registrations as determined by the monitor of activation., 'wherein the domain monitoring server is configured to. A system for monitoring domain name registrations, comprising: This application is a continuation of U.S. application Ser. No. 14/189,957, filed Feb. 25, 2014, from which priority is claimed, and the content of which is hereby incorporated by reference, which is a continuation of U.S. application Ser. No. 13/571,250, filed Aug. 9, 2012, from which priority is claimed, and the content of which is hereby incorporated by reference, which is a continuation of U.S. application Ser. No. 12/785,311, filed May 21, 2010, from which priority is claimed, and the content of which is hereby incorporated by reference, which is a continuation of U.S. application Ser. No. 10/039,341, filed Dec. 31, 2001, from which priority is claimed, and the content of which is hereby incorporated by reference, which is a divisional application of U.S. application Ser. No. 09/655,273, filed Sep. 5, 2000, from which priority is claimed, and the content of which is hereby incorporated by ...

Computing System and Method for Identifying Files Transmitted to an External Network

A computing device includes a computing system and a method for identifying files transmitted from an internal computing device within an internal network to an external computing device within an external network. The computing system comprises one or more internal computing devices which are connectable by an internal network. At least one of the internal computing devices is configured to be operable as a workstation or as a file server, wherein the workstation or the file server is capable of generating, storing and/or transmitting a data file. Further, at least one of the internal computing devices is configured to be operable as an insertion device. The insertion device is capable of inserting a data file element into the data file to generate a tagged data file. Further, at least one of the internal computing devices is configured to be operable as a gateway. The gateway is capable of connecting the internal network to an external network. Further, at least one computing device is configured to be operable as a monitoring server. The monitoring server is capable of receiving information transmitted by an external computing device connected to the external network upon opening, reading and/or processing the tagged data file. 1. A computing system , comprising:at least one internal computing device connectable by an internal network;wherein at least one of the internal computing devices includes (i) a workstation, or (ii) a file server, and is configured to at least one of generate, store and/or transmit a data file;wherein at least one of the internal computing devices includes an insertion device configured to insert a data file element into the data file to generate a tagged data file; anda monitoring server configured to receive information transmitted by an external computing device connected to an external network upon opening, reading and/or processing the tagged data file;wherein the monitoring server is at least one of (i) an internal computing device ...

METHOD AND APPARATUS FOR COOPERATIVE CHANNEL SWITCHING

An apparatus and methods are provided for opportunistically conducting data communications on multiple wireless channels. In these methods, a device is engaged in data communications with a second device and receives a conflicting communication demand requiring action on one or more channels other than the data-communication channel (e.g., to conduct a channel scan, to issue or receive a beacon). The device arranges a schedule of channel switches to satisfy the communication demand and advises the second device of the schedule, and may explicitly invite the second device to implement the schedule. To the extent the second device does so, the data communications continue on the other channels. The devices may be participating in a synchronized peer-to-peer communication environment that requires their attendance on the data-communication channel and that is not associated with the other channels.

Method and system for performance estimation of a communication link

Described is a method for performance estimation of a communication device. The method comprises: executing active probing to determine active probing data; reading operational data which includes data related to channel and its noise condition and counter values related to user data traffic between the communication device and another communication device, wherein the operational data is relevant to the current settings of the communication device; and training a performance estimation algorithm for the communication device according to the active probing data and the operational data.

IDENTIFYING HEARTBEAT MESSAGES

Examples relate to identifying heartbeat messages. In one example, a computing device may: obtain a plurality of messages that includes incoming messages and outgoing messages, each incoming message being sent from a server device to a client device, and each outgoing message being sent from the client device to the server device; identify candidate message pairs, each candidate message pair including one incoming message and one outgoing message; and identify a heartbeat message pair from the candidate message pairs based on at least one of: plurality of timestamps that includes i) incoming message timestamps that each correspond to one of the incoming messages, and ii) outgoing message timestamps that each correspond to one of the outgoing messages; a number of occurrences of each candidate message pair included a message log; or characteristics of data included in the incoming message and outgoing message of each candidate message pair. 1. A computing device for identifying heartbeat messages , the computing device comprising:a hardware processor; anda data storage device storing instructions that, when executed by the hardware processor, cause the hardware processor to:obtain a plurality of messages that includes incoming messages and outgoing messages, each incoming message being sent from a server device to a client device, and each outgoing message being sent from the client device to the server device;identify, from the plurality of messages, candidate message pairs, each candidate message pair including one incoming message and one outgoing message; and a plurality of timestamps that includes i) incoming message timestamps that each correspond to one of the incoming messages, and ii) outgoing message timestamps that each correspond to one of the outgoing messages;', 'a number of occurrences of each candidate message pair included a message log; or', 'characteristics of data included in the incoming message and outgoing message of each candidate message pair ...

SOFTWARE TAP FOR TRAFFIC MONITORING IN VIRTUALIZED ENVIRONMENT

Some embodiments provide a system for lossless packet monitoring in a virtualized. The system, using a virtual tap, intercepts packets from a data compute node operating on a host machine, between the data compute node (DCN) and a managed forwarding element on the host. As part of the lossless packet mirroring, the virtual tap forwards data files related to the mirrored packets to a traffic monitoring. The traffic monitoring application stores the data received from the virtual tap and is capable of performing analytics on the stored data. In some embodiments, the system also includes a central controller that communicates with the other elements of the system to manage the traffic monitoring. 1. A system for traffic monitoring in a virtualized environment comprising:a controller computer for managing traffic monitoring operations that execute on a set of host machines; and at least a first compute node for which traffic is monitored;', 'a second compute node for monitoring traffic from the first compute node;', 'a software managed forwarding element (SMFE); and', 'a virtual tap for copying packet data sent from the first compute node to a port of the SMFE before the packet data is received at the port of the SMFE and sending the copied packet data to the second compute node of at least one of the host machines in the set of host machines., 'the set of host machines, each host machine in the set of host machines hosting2. The system of claim 1 , wherein a virtual tap in at least one host machine in the set of host machines executes in a hypervisor of the host machine.3. The system of claim 1 , wherein copying packet data occurs at an input/output (I/O) chain of the first compute node.4. The system of claim 1 , wherein managing traffic monitoring operations comprises determining the set of compute nodes for which traffic monitoring will be performed.5. The system of claim 1 , wherein a particular second compute node receives copied packet data from a particular ...

MONITORING, MEASURING, ANALYZING COMMUNICATION FLOWS BETWEEN IDENTITIES IN AN IDENTY-ENABLED NETWORK USING IPFIX EXTENSIONS

A computer-implemented method of monitoring communication flows between identities is provided that comprises: accessing a first data packet that indicates a source identifier, a destination identifier, a first source locator, and a first destination locator; accessing a second data packet that indicates the source identifier, the destination identifier, a second source locator, and a second destination locator, the second destination locator being different from the first destination locator; storing data regarding the first data packet and the second data packet in a single ID flow record based on a determination that the source identifier of the first data packet matches the source identifier of the second data packet and a determination that the destination identifier of the first data packet matches the destination identifier of the second data packet; and based on the single ID flow record, adjusting a resource allocation. 1. A computer-implemented method of monitoring communication flows between identities , comprising:accessing, by one or more processors of a router, a first data packet that indicates a source identifier, a destination identifier, a first source locator, and a first destination locator;accessing, by the one or more processors of the router, a second data packet that indicates the source identifier, the destination identifier, a second source locator, and a second destination locator, the second destination locator being different from the first destination locator;storing, by the one or more processors of the router, data regarding the first data packet and the second data packet in a single ID flow record based on a determination that the source identifier of the first data packet matches the source identifier of the second data packet and a determination that the destination identifier of the first data packet matches the destination identifier of the second data packet; andbased on the single ID flow record, adjusting, by one or more ...

TRACEROUTE METHOD TO IDENTIFY DEVICES IN TUNNELED SEGMENT OF ROUTING PATH

Methods and devices for providing routing path and transit delay time data to a device running traceroute on an IP network comprising routing tunnels are described herein. In examples, a tunnel entrance device may copy a hop limit value associated with a traceroute probe into a hop limit field of a tunneled IP header. In other examples, the tunnel entrance device may perform address spoofing to generate an error message with a source address corresponding to an intermediate device disposed within a routing tunnel. In this way, a device executing traceroute may be able to receive network addresses corresponding to intermediate devices in a routing tunnel in order to perform network diagnostics, construct routing tables, determine more efficient routing paths, and so on. 1. A device comprising:one or more processors; and receiving, from a probe source device, a probe containing an address of a destination device and a hop limit value;', 'copying, from the probe and into a tunnel header associated with a tunneled data packet, the hop limit value of the probe;', 'sending, to an intermediate device, the tunneled data packet, the intermediate device being part of a routing tunnel between a tunnel entrance device and the destination device;', 'receiving, from the intermediate device, a first message associated with the tunneled data packet;', generating a second message, the second message containing a source address corresponding to an address of the intermediate device; and', 'sending, to the probe source device, the second message., 'at least partially in response to receiving the first message], 'one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising2. The device as recited in claim 1 , wherein the routing tunnel between the tunnel entrance device and the destination device further comprises one or more additional intermediate ...

Packet batching identification

The present disclosure provides a method, apparatus, and system for identifying packet batching within computer networks. A method consistent with the present disclosure includes sending a probe train of packets to traverse a network path within a computer network. Next, identifying a contiguous set of packets that traversed the network path with a negative DIAD time. Further, classifying the contiguous set of packets as a packet batch when a packet that traversed the network path right before the contiguous set of packets traversed the network path has a positive DIAD time. In addition, a size of a next probe train of packets that are to be sent to traverse the network path can be adjusted based on the size of the contiguous set of packets. Accurately identifying packet batching can enable more precise computer network bandwidth estimation and network traffic engineering solutions.

EDGE NETWORKING DEVICES AND SYSTEMS FOR IDENTIFYING A SOFTWARE APPLICATION

Edge networking router devices and systems for identifying a software application are described herein. One or more embodiments include an edge networking router device for identifying a software application comprising a packet collector to receive packet data in the edge networking router device and an artificial intelligence (AI) model configured to process the packet data received by the packet collector to identify the software application, wherein the artificial intelligence (AI) model is trained using a cloud entity and received from the cloud entity. 1. A thin edge networking router device for identifying a software application , comprising:a packet collector configured to receive packet data; and identify the software application using the received packet data; and', 'calculate a probability that the model correctly identified the software application., 'a model configured to2. The device of claim 1 , wherein the thin edge networking routing device is configured toreceive the model from a cloud entity.3. The device of claim 2 , wherein the thin edge networking routing device is configured torequest a new version of the model in response to the probability that the model correctly identified the software application reaching a threshold.4. The device of claim 3 , wherein the packet collector is configured to transmit the packet data claim 3 , wherein the packet data is used to train the new version of the model.5. The device of claim 1 , wherein the model is configured to use a decision tree to identify the software application.6. The device of claim 1 , wherein the model is configured to use at least one of a source port or a destination port to identify the software application.7. A thin edge networking router device for identifying a software application claim 1 , comprising:a packet collector configured to receive packet data; and identify the software application using the received packet data;', 'generate a command in response to identifying the ...

SYSTEM FOR ORGANIZING AND FAST SEARCHING OF MASSIVE AMOUNTS OF DATA

A system to collect and store in a special data structure arranged for rapid searching massive amounts of data. Performance metric data is one example. The performance metric data is recorded in time-series measurements, converted into unicode, and arranged into a special data structure having one directory for every day which stores all the metric data collected that day. The data structure at the server where analysis is done has a subdirectory for every resource type. Each subdirectory contains text files of performance metric data values measured for attributes in a group of attributes to which said text file is dedicated. Each attribute has its own section and the performance metric data values are recorded in time series as unicode hex numbers as a comma delimited list. Analysis of the performance metric data is done using regular expressions. 1. A process comprising:running a probe process on a computer and periodically gathering numbers about performance parameters from multiple performance attributes of multiple resource types;sorting performance attribute numbers by day on which it was collected, and by resource type and by performance attribute;storing all the performance numbers gathered on one day in a top level directory, with all the performance numbers gathered from all resources of a particular category of resource in one text file in a separate subdirectory dedicated to the resource category, and all the performance numbers gathered about other resources in another category in another text file in a separate subdirectory devoted to the another category, until all performance numbers about all categories of resources are gathered in several text files in several subdirectories; andand wherein in each text file all performance numbers regarding a particular resource type in the resource category to which the text file is devoted are stored in one row of the file in a comma delimited list, the assortment of all rows containing the performance numbers ...

Visualizing resource relationships using key peformance indicators

The resources of an organization may provide various functions and services, and the performance of the resources may be of interest. Performance indicators (e.g., network bandwidth, I/O throughput, and processing capacity) may be measured and logged, and examined in the event of diminished performance in order to identify a non-performing resource. However, because resources may depend on other resources, and to different degrees, the performance of the first resource may be limited by the performance of a related resource, and logging respective resource performance may not inform this determination. An embodiment of the techniques presented herein may evaluate an effect of the performance indicators of a first resource on the performance indicators of related resources (e.g., through historic comparisons or differential testing), and a visual resource map may include a visual indicator of the effect of performance indicators of a first resource on the performance indicators of a related resource.

Proxy streams in a video streaming network

A method and system method for code testing in a video streaming network, A first broadcast stream including a first program containing video content is received by an ingest server of a live cluster of servers, wherein the live cluster of servers is deployed for providing streaming media programs to multiple user devices. The first broadcast stream is provided to one or more user devices. The first broadcast stream is duplicated to generate a copy of the first broadcast stream. The copy of the first broadcast stream is provided to a device under test configured to test processing of the first broadcast stream by new code installed at the device under test. Error performance of the device under test is monitored with respect to the new code's processing of the first broadcast stream.

Method and system for network monitoring using signature packets

A method of monitoring a network with a test device connected to the network includes monitoring a plurality of packets which pass through the test device, comparing a predefined field of each of the plurality of packets to a predefined pattern so as to identify signature packets, evaluating whether the signature packets satisfy a predefined condition, and, if the predefined condition is satisfied, sending a notification to a user. A system implementing the method is provided.

METHOD AND SYSTEM FOR DETERMINATION OF COMMUNICATION PARAMETERS BY NODES OF A VEHICULAR NETWORK

Systems and methods that use adaptive control of communication protocol parameters in a network of moving things. Each network device may share information identifying communication protocol parameters used by the network device through periodic broadcasts, which may be received by neighboring network devices that are within communication range. The neighboring network devices may then adjust their own communication protocol parameters accordingly when attempting to communicate with the first network device and their own neighboring network devices. Network devices that have not received the shared information may use information about their geographic location and the geographic location of neighboring network devices to estimate values of some communication protocol parameters that will provide more effective communication. 121-. (canceled)22. A method for determining parameters for use by a first node of a plurality of nodes of a wireless network to wirelessly send a message to a second node of the plurality of nodes , the method comprising:parsing one or more messages broadcast by respective other nodes of the plurality of nodes and received by the first node, to identify respective parameter information comprising geographic coordinate information identifying a respective current location of each of the other nodes;selecting, by the first node from the other nodes based upon the respective parameter information of the other nodes, a target node to which to transmit the message for the second node;determining whether the parameter information comprises parameter values that enable wireless communication by the first node with the target node from a current location of the first node;transmitting the message for the second node to the target node using the parameter information, if the parameter information comprises one or more parameter values that enable wireless communication with the target node from the current location of the first node; andtransmitting ...

Method and apparatus for advanced statistics collection

Systems, methods, and computer-readable media provide for collection of statistics relating to network traffic between virtual machines (VMs) in a network. In an example embodiment, a virtual switch hosted on a physical server provides network address information of VMs deployed on the physical server to a virtual switch controller. The controller collects this network address information from each virtual switch under its control, and distributes the aggregate address information to each switch. In this manner, the controller and each switch within the controller's domain can learn the network address information of each VM deployed on physical servers hosting switches under the controller's control. Each virtual switch can determine a classification of a frame passing through the switch (e.g., intra-server, inter-server and intra-domain, or inter-domain traffic), and statistics relating to the traffic. In an example embodiment, the virtual switch controller can collect the statistics from each switch within its domain.

INFORMATION PROCESSING TERMINAL AND CONTROL METHOD

A web browser of an information processing terminal serving as a user agent (UA) is capable of registering function information of a local service that a local server (printer) provides, which is acquired by search, and function information of a service acquired via a site that a server provides. When receiving Invocation in Web Intents, the web browser displays a list of the registered function information to prompt the user to select a service to be used. If function information that has previously been registered has been found by search, the web browser updates display of the list of the registered function information according to a result of the search. 1. An information processing terminal having a relay function for causing a client that manages data and a service that provides a function using the data managed by the client to cooperate with each other , the information processing terminal comprising:a first acquisition unit configured to acquire first function information, which is used to request a first service that a network device connected to a network provides, by searching for services via the network using a predetermined network protocol;a second acquisition unit configured to acquire second function information, which is used to request a second service, via a site of a network device that provides the second service;a registration unit configured to execute registration processing of the first function information acquired by the first acquisition unit and the second function information acquired by the second acquisition unit using the relay function; anda control unit configured to control display of a list of function information including the first function information and the second function information registered according to the registration processing,wherein, if function information that has previously been registered according to the registration processing has been found by a search for services via the network using the predetermined ...

NETWORKS FOR PACKET MONITORING AND REPLAY

Disclosed herein are a system, non-transitory computer readable medium, and method for monitoring and replaying packets. A network tap forwards packets from a first network to a second network. At least one node in the first network has the same IP address as a node in the second network. The packets are replayed in the second network. 1. An apparatus comprising:a network interface; establish communication with a network terminal access point (TAP) of a first network, each node of the first network having an internet protocol (IP) address;', 'establish communication with at least one node of a second network, at least one node in the second network corresponding to a node in the first network such that respective IP addresses of corresponding nodes are equal;', 'receive a first packet and a second packet from the network TAP of the first network, each packet comprising a source IP address and a timestamp, the source IP address indicating a respective node in the first network from where each packet originates; and', 'launch the first packet and the second packet from a respective node in the second network that corresponds to the source IP address of each packet in a sequence that is in accordance with the timestamp of each packet., 'at least one processor to2. The apparatus of claim 1 , wherein the at least one processor is further configured to store the first packet and the second packet in a database.3. The apparatus of claim 2 , wherein the at least one processor is further configured to sort the first packet and the second packet in the database by timestamp.4. The apparatus of claim 2 , wherein the at least one processor is further configured to retrieve the first packet and the second packet from the database to launch the first packet and the second packet.5. The apparatus of claim 1 , wherein the network tap is an optical fiber network tap.6. The apparatus of claim 1 , wherein an internal clock of a node in the first network is synchronized with an ...

NEIGHBOR MONITORING IN A HYPERSCALED ENVIRONMENT

A network of N nodes performs a monitoring method, where the method is performed by each node. The N nodes are partitioned into domains according to a sorted order. The domains include a local domain in which the node is located and one or more remote domains. Each remote domain has a domain head designated to monitor member nodes in the remote domain. The node sends probes at a given frequency to actively monitored nodes that include all other member nodes in the local domain and domain heads in the remote domains. The node then determines whether each of the actively monitored nodes is up based on replies received from the actively monitored nodes in response to the probes. 1. A method for monitoring a network of N nodes , the method performed by each node of the N nodes comprising:partitioning the N nodes into a plurality of domains according to a sorted order, wherein the domains include a local domain in which the node is located and one or more remote domains, each remote domain having a domain head designated to monitor member nodes in the remote domain;sending probes at a given frequency to actively monitored nodes that include all other member nodes in the local domain and domain heads in the remote domains; anddetermining whether each of the actively monitored nodes is up based on replies received from the actively monitored nodes in response to the probes.2. The method of claim 1 , further comprising:sorting the N nodes using a same sorting algorithm as all other nodes in the network, on a same set of numerical representations of the N nodes, wherein a numerical representation of any node in the network is one of: a numerical identifier, a hash value of the numerical identifier, and a mapped value of the numerical identifier.4. The method of claim 3 , wherein partitioning the N nodes further comprises:setting up the local domain to include a sequence of M nodes in the sorted order with the node being the first of the sequence.5. The method of claim 3 , ...

Method, Apparatus and System for Method for Start-Up of Monitoring of Monitor Objects in a Computer-Integrated Telecommunications Environment

The present invention relates to method of monitoring of monitor objects in a computer-integrated telecommunications environment. The method comprises, in an initial start-up phase: upon a first-time establishment of an association between a first computing device () and a switching device () using a communication link, sending a first message (A) from the first computing device () to the switching device () to request an identification for all monitor objects that are to be monitored by the first computing device (); in response to the first message (A), sending a second message (B) from the switching device () to the first computing device (), the second message (B) referring to a third message (C) to follow; allocating monitor objects which the first computing device () is to monitor; and sending the third message (C) from the switching device () to the first computing device (), the third message (C) referring back to the second message (B), and as a single message including a list (deviceList) of all monitor objects allocated to the first computing device () for monitoring, wherein the list includes a parameter block for any allocated monitor object, said parameter block including information for enabling monitoring of the respective monitor object at the first computing device (). The method may be adapted for additionally including one or more second computing devices () for monitoring. The invention also refers to an apparatus and a communication system adapted for implementing the method. 113-. (canceled)14. A method of monitoring monitor objects in a computer-integrated telecommunications environment , said method comprising , in an initial start-up phase:upon a first-time establishment of an association between a first computing device and a switching device using a communication link, sending a first message from the first computing device to the switching device requesting an identification for all monitor objects that are to be monitored by the first ...

Performance monitoring of a mobile communication system

An apparatus is provided for measuring the performance of a mobile communication system. The apparatus includes two measurement mobile interfaces and a measurement probe. The probe is connected to the backhauling interface of a base station of the system. Then, one measurement mobile interface transmits packets to the other measurement mobile interface via the base station. These packets are received at the base station, forwarded to the packet gateway of the system, sent back to the same base station, and finally received at the destination measurement mobile interface. Since the measurement probe belongs to the same apparatus as the mobile interfaces, it may detect the packets as transmitted/received at the backhauling interface. The probe then generates performance parameters relating to the packets as transmitted/received by the mobile interfaces and/or as detected at the backhauling interface. The system performance is then measured based on such parameters.

Request-Response Procedue for Wireless Network

This document provides a solution where a requesting wireless apparatus indicates in a probe request message that the requesting wireless apparatus supports a collision avoidance mechanism that enables a responding wireless apparatus to reduce a number probe response messages by responding to a plurality of probe response messages with a single probe response message.

Quality-of-Service Monitoring Method and Apparatus

A quality-of-service monitoring method and apparatus, where the method includes: obtaining, by a first node, a service packet of a first service; encapsulating, by the first node, the service packet to obtain a monitoring packet, where the monitoring packet is usable for monitoring quality of service of the first service; and sending, by the first node, the monitoring packet to a second node. 1. A quality-of-service monitoring method , comprising:obtaining, by a first node, a service packet of a first service;encapsulating, by the first node, the service packet to obtain a monitoring packet;sending, by the first node, the monitoring packet to a second node;receiving, by the second node, the monitoring packet from the first node; andmonitoring, by the second node, quality of service of the first service based on the monitoring packet.2. The quality-of-service monitoring method according to claim 1 , further comprising obtaining claim 1 , by the second node claim 1 , the service packet in the monitoring packet.3. The quality-of-service monitoring method according to claim 1 , wherein encapsulating the service packet comprises adding claim 1 , by the first node claim 1 , first parameter information to the service packet claim 1 , wherein the first parameter information is for monitoring the quality of service of the first service.4. The quality-of-service monitoring method according to claim 3 , wherein monitoring the quality of service of the first service comprises monitoring claim 3 , by the second node claim 3 , the quality of service of the first service based on the first parameter information and a local context of the monitoring packet.5. The quality-of-service monitoring method according to claim 4 , wherein the monitoring packet comprises a first identifier claim 4 , wherein there is a correspondence between the first identifier and the local context of the monitoring packet claim 4 , and wherein the quality-of-service monitoring method further comprises ...

PER PATH AND PER LINK TRAFFIC ACCOUNTING

A first device may receive a packet that includes information identifying a path through a network. The first device may configure a header of the packet to include a first set of identifiers that identifies the path and the first device via which the packet was received. The first device may configure the header of the packet to include a second set of identifiers that identifies a set of devices associated with the path. The set of devices may be associated with providing the packet via a network. The first device may determine whether a counter associated with the first set of identifiers has been initialized. The first device may modify a value of the counter to record a metric. The first device may provide the packet to a second device. The first device may perform an action related to the packet or based on the value of the counter. 120-. (canceled)21. A first device , comprising:one or more memories; and [ the packet being received from an external network, and', 'the first device being a point of ingress for the network;, 'receive a packet that includes information identifying a path through a network,'}, 'configure a header of the packet to include a set of packet accounting identifiers that identifies the first device and the path, and to include, in the header of the packet, an indicator that indicates a presence of the set of packet accounting identifiers in the header of the packet and indicates that the set of packet accounting identifiers is to be used to account for traffic and not for traffic forwarding;', 'configure the header of the packet to include a set of packet forwarding identifiers, different from the set of packet accounting identifiers, that identifies a set of devices associated with the path and via which the packet is to be forwarded; and', 'provide the packet to a second device, of the set of devices associated with the path, via a link between the first device and the second device, to enable the second device to perform an action ...

Method And Node For Traffic Control

A method for traffic control are provided, includes: obtaining, by a control node, a delay prediction value of a service packet sent by a source node to a destination node after a current moment; and determining, by the control node, a congestion detection result of current traffic transmission based on a packet delay variation trend and the delay prediction value, and sending the congestion detection result to the source node, and the packet delay variation trend corresponds to a congestion duration change. 1. A method for traffic control , wherein the method comprises:obtaining, by a control node, a delay prediction value of a service packet sent by a source node to a destination node after a current moment; anddetermining, by the control node, a congestion detection result of current traffic transmission based on a packet delay variation trend and the delay prediction value; andsending the congestion detection result to the source node, wherein the congestion detection result is used by the source node to reduce a service packet sending rate of the source node when the congestion detection result indicates congestion and the packet delay variation trend corresponds to a congestion duration change.2. The method according to claim 1 , wherein the packet delay variation trend is represented by a delay change curve claim 1 , the delay prediction value of the service packet is obtained based on the delay change curve in a current prediction period claim 1 , the delay change curve in the current prediction period is obtained based on sending moments of N probe packets and receiving moments of the N probe packets claim 1 , and the N probe packets are sent by the source node to the destination node in the current prediction period claim 1 , wherein N is a positive integer.3. The method according to claim 2 , wherein before the obtaining claim 2 , by a control node claim 2 , a delay prediction value of a service packet sent after a current moment claim 2 , the method ...

System and method for midserver facilitation of long-haul transport of telemetry for cloud-based services

A system and method that uses midservers located between the business enterprise computer infrastructure and the cloud-based infrastructure to collect, aggregate, analyze, transform, and securely transmit data from a multitude of computing devices and peripherals at an external network to a cloud-based service.

Dual-port mirroring system for analyzing non-stationary data in a network

Distinct sets of non-stationary data seen on a switch in data communication with one or more of computerized units in a network, are mirrored via two switch ports, which include a first port and a second port. A dual analysis is performed while mirroring said distinct sets of data. First data obtained from data mirrored at the first port are analyzed (e.g., using a trained machine learning model) and, based on the first data analyzed, the switch is reconfigured for the second port to mirror second data, which are selected from non-stationary data as seen on the switch (e.g., data received and/or transmitted by the switch). The second data mirrored at the second port is analyzed (e.g., using a different analysis scheme, suited for the selected data).

Method and apparatus for managing over-the-top video rate

Aspects of the subject disclosure may include, for example, a device including a processing system including a processor and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, including monitoring network traffic to determine a transmission control protocol traffic pattern, determining a target video rate from the transmission control protocol traffic pattern, and modifying an over-the-top video delivery service network according to the target video rate. Other embodiments are disclosed.

Method For Calculating Statistic Data of Traffic Flows in Data Network And Probe Thereof

The disclosure provides a probe and a method for calculating statistic data of traffic flows. The probe comprises at least one link processor (LP) and a correlation processor (CP). Each LP includes two buffers, receives packets from directional traffic flows, generates information of bi-directional traffic flows based on the received packets, stores the generated information in one buffer within a reporting period and, reports the stored information to CP when the reporting period boundary is reached. The information of each bi-directional traffic flow includes the relevant identification information and statistic data. The CP calculates statistic data of a particular group of traffic flows with a predetermined characteristic based on the reported information, and the other buffer stores information of bi-directional traffic flows to be generated within a next reporting period and the stored information is to be reported to the correlation processor when the next reporting period boundary is reached.

NETWORK DEVICE, COMMUNICATION METHOD, PROGRAM, AND RECORDING MEDIUM

According to the present invention, a network device includes a plurality of ports which are connected to a LAN; a communication controller; and a communication shutoff release unit. The communication controller includes: a linkup detection unit, a loop detection frame sending out unit that sends out the loop detection frame from a linkup detected port, which is a port for which the linkup is detected, after a predetermined period from a time point when the linkup is detected by the linkup detection unit to the local area network, and a loop detection frame detection unit that detects the loop detection frame if the loop detection frame is received on the each port. The communication shutoff release unit releases the shutoff of the communication on the linkup detected port only if the loop detection frame is not detected by the loop detection frame detection unit.

Incident-Based Adaptive Monitoring of Information in a Distributed Computing Environment

According to one embodiment of the disclosure, a system monitors a first metric associated with a host device. The system accesses, at a monitoring frequency, data associated with the first metric. The system determines, based on the data, a metric rating for the first metric. The system further determines, based on the metric rating, whether the metric rating is above a threshold. The system modifies, based at least in part on the metric rating being above the threshold, a monitoring behavior of a probe.

METHOD AND SYSTEM FOR PACKET ACQUISTION, ANALYSIS AND INTRUSION DETECTION IN FIELD AREA NETWORKS

A system for intrusion detection in a field area network where data is transmitted via packets, includes a processor for analyzing the packets to ascertain whether the packets conform to a sets of rules indicating an intrusion, and a database for storing an alert indicating an intrusion if the packets conform to at least one rule in the sets. The sets of rules are for field network layer data, internet protocol traffic data and field area application traffic data. A method for detecting intrusion in a field area network where data is transmitted via packets, including analyzing the packets to ascertain whether the packets conform to the sets of rules, and storing an alert indicating an intrusion if the packets conform to at least one rule in the sets of rules. 1. (canceled)2. (canceled)3. (canceled)4. (canceled)5. (canceled)6. (canceled)7. (canceled)8. (canceled)9. (canceled)10. (canceled)11. (canceled)12. (canceled)13. (canceled)14. (canceled)15. (canceled)16. (canceled)17. (canceled)18. (canceled)19. (canceled)20. (canceled)21. (canceled)22. (canceled)23. (canceled)24. (canceled)25. (canceled)26. (canceled)27. (canceled)28. (canceled)29. (canceled)30. (canceled)31. (canceled)32. (canceled)33. (canceled)34. (canceled)35. (canceled)36. (canceled)37. (canceled)38. (canceled)39. A method for monitoring a field area network the method comprising: wherein the field area network comprises a plurality of network nodes,', 'wherein the packet intercept system is comprised of a plurality of probes along the field area network,', 'wherein the at least one additional network is distinct from the field area network, and', 'wherein the traffic data stream comprises at least one of: individual packets, packet detail or metadata generated by at least one probe of the plurality of probes, based on processing at least one intercepted packet from the field area network;, 'backhauling by a packet intercept system on a field area network, to at least one additional network, a traffic ...

METHOD AND APPARATUS FOR DIAGNOSING NETWORK

A network diagnosis method and apparatus are disclosed. An operation method of a first communication node includes checking whether each of communication nodes connected to the first communication node are in a fault state based on a first message transmitted between the communication nodes and a first response message, which is a response to the first message and generating a diagnosis response message including identification information of the communication node that is in a fault state or normal state. Accordingly, network performance may be enhanced. 1. An operation method of a first communication node constituting a network , the operation method comprising:checking whether each of communication nodes connected to the first communication node is in a fault state based on a first message and a first response message in response to the first message transmitted between the communication nodes; andgenerating a diagnosis response message including identification information of the communication node that is in a fault state or normal state.2. The operation method of claim 1 , wherein the first message is a network management (NM) message.3. The operation method of claim 1 , wherein claim 1 , when the first response message in response to the first message is not received within a predefined period of time claim 1 , the first communication node determines that a communication node from which the first response message is to be transmitted is in a fault state.4. The operation method of claim 1 , wherein the first communication node is a switch or bridge claim 1 , and each of the communication nodes connected to the first communication node is an end node.5. The operation method of claim 1 , wherein the identification information is at least one of an Internet protocol (IP) address claim 1 , a port number claim 1 , and a medium access control (MAC) address.6. The operation method of claim 1 , wherein the diagnosis response message is generated when a diagnosis ...

Technologies for annotating process and user information for network flows

Systems, methods, and computer-readable media for annotating process and user information for network flows. In some embodiments, a capturing agent, executing on a first device in a network, can monitor a network flow associated with the first device. The first device can be, for example, a virtual machine, a hypervisor, a server, or a network device. Next, the capturing agent can generate a control flow based on the network flow. The control flow may include metadata that describes the network flow. The capturing agent can then determine which process executing on the first device is associated with the network flow and label the control flow with this information. Finally, the capturing agent can transmit the labeled control flow to a second device, such as a collector, in the network.

CONCURRENT INTERFACES BETWEEN A PROBE AND APPLICATIONS THAT MONITOR VIRTUAL NETWORK FUNCTIONS

A processor instantiates a virtual network function (VNF) and a probe to monitor at least one metric associated with the VNF. The processor also allocates a pool of ports to the probe. A transceiver establishes one or more first interfaces between the probe and one or more applications using one or more first ports from the pool of ports. Information such as metrics generated by the ports is concurrently exchange between the probe and the applications using the first interfaces. In some cases, a second interface is established between the probe and a monitoring server. The probe reports mission critical events to the applications via the first interfaces and non-mission critical events to the monitoring server via the second interface concurrently with reporting the mission critical events. 1. A method comprising:instantiating a probe in a virtual network function (VNF) on at least one processor to monitor at least one metric associated with the VNF;allocating a pool of ports to the probe; andestablishing at least one first interface between the probe and at least one application using at least one first port from the pool of ports.2. The method of claim 1 , wherein instantiating the probe comprises instantiating the probe in a data plane of the VNF claim 1 , and wherein the at least one application is instantiated in an application plane of the VNF.3. The method of claim 1 , wherein establishing the at least one first interface comprises establishing a plurality of first interfaces between the probe and a plurality of applications using a plurality of first ports from the pool of ports.4. The method of claim 3 , further comprising:concurrently exchanging information between the probe and the plurality of applications using the plurality of first interfaces.5. The method of claim 1 , wherein instantiating the probe in the VNF comprises: 'instantiating the at least one application in the VNF based on information provided by the monitoring server.', 'instantiating the ...

INTERCEPTING AND EXAMINING A PACKET HEADER OR TRAILER

Various methods and systems for facilitating network traffic monitoring in association with an application running on a client device are provided. In this regard, aspects of the invention facilitate monitoring network traffic being transmitted to and/or from a client device, such as a mobile device, so that network performance can be analyzed. In various implementations, one or more default classes associated with an application on a device are replaced with one or more custom monitoring classes designed to facilitate monitoring data packets being communicated to or from the application. The custom monitoring classes can then be utilized to facilitate monitoring a plurality of data packets communicated to or from the application. 1. A method comprising:intercepting, by a monitoring component on a mobile device, a stream of data of a packet of unknown length being communicated to or from an application running on the mobile device, the packet having a packet header or a packet trailer;tracking, by the monitoring component, a number of intercepted bytes of the packet from the stream;examining, by the monitoring component, the packet header or the packet trailer for a predetermined set of types of network data, wherein the monitoring component is configured to terminate the examining upon reading the number of intercepted bytes; andproviding the network data to a remote server.2. The method of claim 1 , further comprising triggering initiation of the monitoring component upon detecting creation of a connection between the mobile device and a second remote server.3. The method of claim 1 , wherein the monitoring component is configured to intercept the stream of data by intercepting calls to read or write to the stream.4. The method of claim 1 , wherein the monitoring component is configured to determine that the predetermined set of types of network data have been obtained from the packet header or the packet trailer claim 1 , and terminate the examining of the packet ...

IDENTIFYING MODIFICATIONS TO TECHNICAL CHARACTERISTICS OF A COMMUNICATION CHANNEL TO ALTER USER PERCEPTION OF COMMUNICATION CHANNEL PERFORMANCE

Probes are coupled to a network via one or more communication channels. The probes capture a set of technical characteristics of the communication channel (e.g., signal intensity, signal quality, signal to noise ratio, etc.), which may include characteristics of data exchanges between third party systems and the probes. Captured characteristics are provided to an online system, which obtains information from users who are communicating content via the communication channel regarding user perception of content transmission or receipt. Based on the received characteristics and information describing user perception, the online system generates a value of a performance metric for the communication channel associated with a set of users having one or more common characteristics. The online system may use values of the performance metric for different technical characteristics to evaluate effects of modifying a technical characteristic of the communication channel on perception of the communication channel by users in the set. 1. A method comprising:obtaining characteristics of users associated with client devices receiving content via a communication channel;obtaining information describing user perception of content provided to the client devices via the communication channel;receiving technical characteristics of the communication channel providing the content to the client devices captured by one or more probes coupled to the communication channel;identifying a set of users having a common characteristic;generating a model for the set of users correlating values of a performance metric for the communication channel with technical characteristics of the communication channel based on the obtained information describing user perception of users in the set and the received technical characteristics of the communication channel;identifying one or more modifications to the communication channel by comparing a value of the performance metric corresponding to received ...

METHOD AND USER EQUIPMENT FOR DETERMINING CONTROL CHANNEL RESOURCE

The present invention discloses a method and a user equipment for determining a control channel resource. The method includes: detecting a downlink control channel that carries scheduling information of a downlink data channel and is sent by a base station, where the downlink control channel is formed by at least one control channel logical element, and the at least one control channel logical element is mapped to at least one antenna port; acquiring at least one of antenna port information of a first antenna port corresponding to a first control channel logical element of the successfully detected downlink control channel and an offset, and sequence number information of the first control channel logical element; and determining, according to at least one of the antenna port information and the offset, as well as the sequence number information. 1. A method for determining a control channel resource , comprising:detecting a downlink control channel that carries scheduling information of a downlink data channel and is sent by a base station, wherein the downlink control channel is formed by at least one control channel logical element, and the at least one control channel logical element is mapped to at least one antenna port;acquiring at least one of antenna port information of a first antenna port corresponding to a first control channel logical element of the successfully detected downlink control channel and an offset, and sequence number information of the first control channel logical element; anddetermining a first control channel resource according to the sequence number information and at least one of the antenna port information and the offset, wherein the first control channel resource is used to feed back acknowledgment (ACK)/non-acknowledgment (NACK) information with respect to a downlink data channel corresponding to the successfully detected downlink control channel.2. The method according to claim 1 , wherein the sequence number information comprises ...

METHOD AND SYSTEM FOR GENERATING AND PROCESSING USER-EQUIPMENT-TO-USER-EQUIPMENT PROBE SIGNAL

A method that comprises identifying a group of user equipment (UEs) in a radio access network, where the group includes a transmitting UE and a plurality of receiving UEs. The method further comprises sending control information including probe signal parameters to the transmitting UE and to the receiving UEs. The method also comprises receiving, from the receiving UEs, performance metrics relating to receipt of a probe signal sent by the transmitting UE based on the probe signal parameters. The method may be implemented by a scheduler. As such, based on the feedback received, the scheduler may carry out more judicious pairing of UEs for uplink and downlink transmission, which may be particularly suitable when the UEs communicate in half-duplex fashion. 1. A method , comprising:identifying a group of user equipment (UEs) in a radio access network, the group including a transmitting UE and a plurality of receiving UEs;sending control information including probe signal parameters to the transmitting UE and to the receiving UEs; andreceiving, from the receiving UEs, performance metrics relating to receipt of a probe signal sent by the transmitting UE based on the probe signal parameters.2. The method defined in claim 1 , further comprising:selecting one of the receiving UEs based on the performance metrics;pairing the transmitting UE with the selected one of the receiving UEs;assigning a resource block to the selected one of the receiving UEs for downlink transmission from a base station in the radio access network and assigning the same resource block to the transmitting UE for uplink transmission to the base station.3. The method defined in claim 2 , further comprising instructing the transmitting UE to transmit uplink traffic to the base station over the assigned resource block and instructing the selected one of the receiving UEs to receive downlink traffic from the base station over the assigned resource block.4. The method defined in claim 1 , wherein the probe ...

SELECTIVELY FORWARDING FLOW OF PACKETS IN A NETWORK APPLIANCE

A network appliance described herein allows the user to selectively forward the flow of packets received through a network port, to a particular egress port. The network appliance creates virtual ports, which can be assigned to the one or more egress ports. The network appliance assigns the flow of packets to the one or more virtual ports in the network appliance. The network appliance decides a forwarding treatment to be applied to the flow of packets, for forwarding the flow of packets to the egress tool ports, based on the virtual port to which the flow of packets is assigned and based on a detected network characteristic. The forwarding treatment can be a decision to drop the flow of packets, or to send the flow of packets to the egress port assigned to the virtual port. 1. An apparatus comprising:a network port through which the apparatus can receive a flow of packets from a source external to the apparatus;a plurality of egress tool ports through which to output the flow of packets from the apparatus to a tool external to the apparatus; and create a plurality of virtual ports in the apparatus;', 'assign the flow of packets to a virtual port of the plurality of virtual ports in the apparatus; and', 'decide a forwarding treatment to be applied to the flow of packets, for forwarding the flow of packets to an egress tool port of the apparatus, based on the virtual port to which the flow of packets is assigned and based on a detected network characteristic., 'a processor configured to2. The apparatus of claim 1 , wherein the apparatus is a module within a network appliance claim 1 , the module including a bundled group of tool ports claim 1 , the module configured to receive the flow of packets from a switching fabric outside the module but within the network appliance.3. The apparatus of claim 2 , the module to generate a plurality of hash buckets claim 2 , wherein a hash bucket in the plurality of hash buckets is associated with the flow of packets claim 2 , and ...

METHOD AND APPARATUS FOR DIAGNOSING FAULTS IN A HYBRID INTERNET PROTOCOL NETWORK

An Ethernet switch can receive an internet protocol query packet generated by a receiver for collecting telemetry data between a source and the receiver in a multicast network, translate the internet protocol query packet to an Ethernet query packet, collect in the Ethernet query packet telemetry data from the Ethernet switch where at least one telemetry field of the Ethernet Switch includes an arrival time of the Ethernet query packet at the Ethernet switch, and submit the Ethernet query packet to the next network element of the multicast network. An internet protocol router can receive an Ethernet query packet generated by an Ethernet switch having at least one field for telemetry for collecting telemetry data between a source and a receiver, translate the Ethernet query packet to an internet protocol query packet, and submit the internet protocol query packet to the next network element. Additional embodiments are disclosed. 1. A method comprising:receiving, by a processing system including a processor and executing a virtual machine (VM) representation of a network element, a diagnostic packet at the network element, the diagnostic packet generated by a receiver for collecting telemetry data on a route between a source and the receiver in the network, wherein the route comprises one of a trace route and a response route, the trace route comprising a first set of network elements, the response route comprising a second set of network elements different from the first set of network elements;determining, by the processing system, a type of the diagnostic packet, the type being an internet protocol query packet or an Ethernet query packet;responsive to determining that the type of the diagnostic packet is an internet protocol query packet, translating, by the processing system, the diagnostic packet to an Ethernet query packet;collecting, by the processing system, the telemetry data, wherein the telemetry data comprises data regarding a fault on the network; ...

GATHERING MONITORING DATA RELATING TO THE OPERATION OF A DATA PROCESSING SYSTEM

A system, apparatus and method for gathering monitoring data relating to the operation of a data processing system are disclosed. The data processing system comprises a monitor controller and a plurality of monitors which gather monitoring data relating to the operation of the data processing system. Each monitor does not send its monitoring data to the monitor controller unsolicited, but merely indicates to the monitor controller that it has such data ready for transmission. In response to reception of a data ready signal from more than one monitor, the monitor controller selects one of these monitors and sends it a data transmission command, thereby avoiding resource contention in a shared resource between data transmissions from more than one monitor. 1. A data processing system comprising:a monitor controller; anda plurality of monitors to gather monitoring data relating to operation of the data processing system,wherein the monitor controller is responsive to data ready signals received from more than one monitor indicating that each has monitoring data ready for transmission to the monitor controller selectively to transmit a data transmission command to each of the more than one monitors to avoid resource contention in a shared resource between transmissions from each of the more than one monitors.2. The data processing system of claim 1 , wherein the monitor controller is capable of transmitting a data preparation command to the plurality of monitors claim 1 , and the plurality of monitors are each responsive to the data preparation command to initiate preparation of the monitoring data for transmission claim 1 , and to transmit a data ready signal to the monitor controller when the monitoring data has been prepared for transmission.3. The data processing system of claim 2 , wherein the plurality of monitors are each responsive to the data transmission command to transmit the monitoring data ready for transmission to the monitor controller and to transmit a ...

INTERNET CONNECTIVITY PROBE

Described herein are reception of first processor-executable program code and a configuration file specifying a target internet protocol address, an asset-identifying information type, and a security protocol, and execution of the received first processor-executable program code to identify a first one or more network communication interfaces of the first computing system, generate a message including information conforming to the asset-identifying information type, the information identifying a first asset, secure the message based on the security protocol, and transmit the secure message to the target internet protocol address via each of the first one or more network communication interfaces. 1. A system comprising: a first one or more network communication interfaces; and', 'a first processor to execute processor-executable program code in order to cause the first computing device to:', 'receive first processor-executable program code and a configuration file specifying a target internet protocol address, an asset-identifying information type, and a security protocol; and', identify the first one or more network communication interfaces;', 'generate a message including information conforming to the asset-identifying information type, the information identifying a first asset;', 'secure the message based on the security protocol; and', 'transmit the secure message to the target internet protocol address via each of the first one or more network communication interfaces., 'to execute the received first processor-executable program code to], 'a first computing device comprising2. A system according to claim 1 , further comprising: a second network communication interface; and', generate the configuration file specifying the target internet protocol address, the asset-identifying information type, and the security protocol; and', 'transmit the configuration file from the second network communication interface to the first computing device,', 'wherein the first ...

Scalable Extendable Probe for Monitoring Host Devices

According to one embodiment, a system includes a probe controller associated with a host device and configured to abstract a plurality of device-specific monitoring operations associated with a plurality of heterogeneous host devices to a normalized set of monitoring operations. The probe controller facilitates monitoring of the host device using the normalized set of monitoring operations. The system also includes a first specialized probe module associated with the host device and configured to provide device-specific information in response to the normalized set of monitoring operations. The first specialized probe module accesses, in response to receiving a notification from the probe controller to determine a metric associated with the host device, the metric associated with the host device. The first specialized probe module communicates the metric to the probe controller. 1. A system , comprising:a memory operable to store instructions; [ abstracting a plurality of device-specific monitoring operations associated with a plurality of heterogeneous host devices to a normalized set of monitoring operations; and', 'facilitating monitoring of the host device using the normalized set of monitoring operations; and, 'a probe controller associated with a host device and configured to perform operations comprising, accessing, in response to receiving a notification from the probe controller to determine a metric associated with the host device, the metric associated with the host device; and', 'communicating the metric to the probe controller., 'a first specialized probe module associated with the host device and configured to provide device-specific information in response to the normalized set of monitoring operations by performing operations comprising], 'a processor communicably coupled to the memory and operable to execute the instructions, wherein the instructions comprise2. The system of claim 1 , wherein the probe controller is configured to perform operations ...

IDENTIFYING SERVICES PROVIDED OVER SECURED CONNECTIONS USING DNS CACHING

A method for communication includes intercepting Domain Name System (DNS) messages that are sent in a communication network in preparation for setting up respective communication sessions that provide respective services associated with respective service types. DNS information that is indicative of the respective service types is extracted from the intercepted DNS messages, and the extracted DNS information is cached. A service type associated with a given communication session is identified using the cached DNS information, and a traffic policy is applied to the given communication session depending on the identified service type. 1. A method for communication , comprising:intercepting Domain Name System (DNS) messages that are sent in a communication network in preparation for setting up respective communication sessions that provide respective services associated with respective service types;extracting from the intercepted DNS messages DNS information that is indicative of the respective service types, and caching the extracted DNS information; andidentifying a service type associated with a given communication session using the cached DNS information, and applying a traffic policy to the given communication session depending on the identified service type.2. The method according to claim 1 , wherein the given communication session delivers a respective service over a secured connection.3. The method according to claim 1 , wherein extracting the DNS information comprises extracting from the DNS messages Uniform Resource Identifiers (URIs) identifying hosts in the communication network to which users attempt to connect claim 1 , and respective IP addresses of the hosts claim 1 , and mapping the extracted URIs to one or more predefined service types claim 1 , and wherein caching the DNS information comprises caching the extracted IP addresses and the one or more service types in association with one another.4. The method according to claim 3 , wherein identifying ...

SELECTIVE AND DYNAMIC APPLICATION-CENTRIC NETWORK MEASUREMENT INFRASTRUCTURE

In one embodiment, a device in a network receives data indicative of traffic characteristics of traffic associated with a particular application. The device identifies one or more paths in the network via which the traffic associated with the particular application was sent, based on the traffic characteristics. The device determines a probing schedule based on the traffic characteristics. The probing schedule simulates the traffic associated with the particular application. The device sends probes along the one or more identified paths according to the determined probing schedule. 1. A method comprising:receiving, at a device in a network, data indicative of traffic characteristics of traffic associated with a particular application;identifying, by the device, one or more paths in the network via which the traffic associated with the particular application was sent, based on the traffic characteristics;determining, by the device, a probing schedule based on the traffic characteristics, wherein the probing schedule simulates the traffic associated with the particular application; andsending, by the device, probes along the one or more identified paths according to the determined probing schedule.2. The method as in claim 1 , wherein the traffic characteristics comprise one or more of: packet size information regarding the traffic claim 1 , flow duration information regarding the traffic claim 1 , packet interval information regarding the traffic claim 1 , or flow interval information regarding the traffic.3. The method as in claim 1 , wherein the probes are sent in response to a determination that a performance metric for application-agnostic probes send along the one or more identified paths is below a threshold value.4. The method as in claim 1 , further comprising:receiving, at the device, result data regarding the sent probes;determining, by the device, effects of the probes on the network based on the result data; andadjusting, by the device, a probing strategy ...

COLLECTING CLIENT-SIDE APPLICATION PERFORMANCE MONITORING INFORMATION

Systems and methods for collecting client-side application performance monitoring (APM) information in distributed computer systems. An example method may comprise: inserting a script code fragment into an electronic document to be transmitted to a client computing device, wherein the script code fragment is to issue a request for loading an object from a second computer system, the request comprising at least one of: a parameter of a client browser executed by the client computing device, a parameter of an application being executed within the client browser, or a parameter of a current session of the client browser; and transmitting the electronic document to at least one of: the second computer system or the client computing device. 1. A method , comprising:inserting, by a first computer system, a script code fragment into an electronic document to be transmitted to a client computing device, wherein the script code fragment is to issue a request for loading an object from a second computer system, the request comprising at least one of: a parameter of a client browser executed by the client computing device, a parameter of an application being executed within the client browser, or a parameter of a current session of the client browser; andtransmitting the electronic document to at least one of: the second computer system or the client computing device.2. The method of claim 1 , wherein inserting the script code fragment comprises generating the script code fragment.3. The method of claim 1 , further comprising: receiving claim 1 , from the second computer system claim 1 , a log record comprising at least part of the request.4. The method of claim 1 , wherein the first computer system is provided by an application server.5. The method of claim 1 , wherein the second computer system is provided by an edge server.6. The method of claim 1 , wherein the object is provided by a transparent single-pixel image.7. The method of claim 1 , wherein the script code fragment ...

SYSTEMS AND METHODS FOR WIRELESS LINK BALANCING IN WIRELESS NETWORKS

Systems and methods for controlling the transmit power and the receive sensitivity of an access point for achieving symmetric link balancing is described. When an access point operates with symmetric link performance, the access point does not inefficiently use available bandwidth for transmitting or re-transmitting to a client station that cannot communicate with the access point. Moreover, the access point does not back off transmissions due to activity of neighboring basic service sets when not needed. The receive sensitivity can be controlled using a hardware attenuator or software commands that adjust a programmable gain in a wireless local area network chipset used by the access point, or it can be controlled using adjustable levels in the software for processing or responding to packets. 1. An apparatus comprising:a radio configured to transmit radio frequency (RF) signals to a wireless device and to receive RF signals from the wireless device;a processor configured to, upon determining that a power level of a probe request received from the wireless device is below a threshold, adjust a receive sensitivity to reduce a receive radius; anda receive gain control controllable to adjust the receive sensitivity to receive RF signals from the wireless device, or a module controllable to adjust a receive threshold for receiving or processing RF signals, based on whether the wireless device is within the receive radius of the radio.2. The apparatus of claim 1 , further comprising:a transmit gain control controllable to adjust a power of the transmitted RF signals to reach the wireless device based on whether the wireless device is within a transmit radius of the radio.3. The apparatus of claim 2 , wherein the processor is configured to adjust the transmit radius to become substantially the same as the receive radius.4. The apparatus of claim 1 , wherein the processor adjusts a first power level at which the apparatus holds a network allocation vector (NAV) claim 1 , ...

Method and device for configuring link in wireless lan system

A method and device for configuring a link in a wireless LAN system are disclosed. The wireless link configuration method comprises the steps of: generating a probe request message including wireless service requirements; transmitting the probe request message; and receiving a probe response message, which is a response to the probe request message, from a wireless access device satisfying the wireless service requirements. Therefore, a time for configuring a link between wireless LAN devices can be reduced.

Geolocation

A method for determining information regarding a location of a target. A signal is sent from a first device to the target, and a total flight time delay is measured. Based on the total flight time delay, a distance of the target from the first device is determined thereby establishing a total possible area for the target location. A medial node with a known location is identified, and a flight time delay from the first device to the medial node is determined thereby permitting a determination of the distance of the target from the medial node and a reduced possible target area. Further reduced areas can be established with iterations of the medial node identification. Refinement can be achieved by automatically applying a probabilistic distribution with geographic regions of reduced confidence and geographic regions of elevated confidence as may be based on physical terrain, population density, and communication bandwidth.

METHOD AND AN APPARATUS FOR DETERMINING THE PRESENCE OF A RATE LIMITING MECHANISM IN A NETWORK

A method and device for determining the presence of a rate limiting mechanism arranged between a sending and a receiving data communication node in a data transfer path of a communication network is presented. The method includes determining time difference values for probe packets in a train of probe packets sent from the sending node and received in the receiving node after having traversed the data transfer path during real-time operation of the data transfer path. The method further includes determining the presence of a rate limiting mechanism in the data transfer path upon detecting that an increase in the time difference value between received probe packets in the train of probe packets exceeds a threshold criterion. Other methods and devices for determining the absence of a rate limiting mechanism and corresponding computer program products are further disclosed. 1. A method of determining the presence of a rate limiting mechanism arranged between a sending and a receiving data communication node in a data transfer path of a communication network , the method comprising:determining time difference values between probe packets in a train of probe packets sent from the sending node and received in the receiving node after having traversed the data transfer path during real-time operation of the data transfer path; anddetermining the presence of a rate limiting mechanism in the data transfer path based on detecting that an increase in the time difference value between received probe packets in the train of probe packets exceeds a threshold criterion.2. The method according to claim 1 , wherein the step of determining the presence of a rate limiting mechanism comprises:determining that a first subset of said probe packets having a first time difference mean value, and a second subset of said probe packets having a second time difference mean value;comparing the second time difference mean value and the first time difference mean value; anddetermining that a ...

Bounded-budget monitor deployment in monitoring networks via end-to-end probes

The present disclosure relates generally to mechanisms for bounded-budget monitor deployment in monitoring networks via end-to-end probes. In various embodiments, methodologies may be provided that automatically perform bounded-budget monitor deployment in monitoring networks via end-to-end probes.

NONINTRUSIVE DYNAMICALLY-SCALABLE NETWORK LOAD GENERATION

A method for nonintrusive network load generation may include determining available resources in a distributed computing system, where the distributed computing system includes a plurality of computing devices and a target deployment. Based on an amount of available resources between the target deployment and a plurality of source computing devices, the plurality of source computing devices may be selected to generate a network load directed from the plurality of source computing devices to the target deployment. The plurality of source computing devices may be a subset of the plurality of computing devices in the distributed computing system. A network-traffic generator service may be provided to the plurality of source computing devices in order to generate the network load directed from the plurality of source computing devices to the target deployment. The performance of the distributed computing system in response to the generated network load may be monitored. 1. A computer-implemented , the method comprising:communicating, via a processing interface of a service application associated with a validation server, a request to terminate a first network load in a distributed computing system,wherein a target deployment of the distributed computing system receives the first network load from a source computing device, wherein the first network load is generated using a network-traffic generator service,wherein the source computing device is comprised in a set of source computing devices of the distributed computing system,wherein the set of source computing devices are spare resources that satisfy a predetermined capacity threshold for the target deployment,wherein the predetermined capacity threshold is a threshold based on network bandwidth capacity and compute capacity associated with the spare resources; andtriggering one or more cleanup actions for the distributed computing system.2. The method of claim 1 , wherein the first network load satisfies a ...

TECHNIQUES FOR PROTECTING APPLICATIONS FROM UNSECURE NETWORK EXPOSURE

A method and system for protecting an application from unsecure network exposure. The method includes identifying an at-risk application, wherein identifying the at-risk application further comprises determining that the application is configured incorrectly; identifying at least one port through which the at-risk application is accessible when the at-risk application is determined to be configured incorrectly; and determining, based on the identified at least one port through which the at-risk application is accessible, whether an exposure vulnerability exists, wherein the exposure vulnerability is an unapproved exposure of at least one of the at least one port to external resources. 1. A method for protecting an application from unsecure network exposure , comprising:identifying an at-risk application, wherein identifying the at-risk application further comprises determining that the application is configured incorrectly;identifying at least one port through which the at-risk application is accessible when the at-risk application is determined to be configured incorrectly; anddetermining, based on the identified at least one port through which the at-risk application is accessible, whether an exposure vulnerability exists, wherein the exposure vulnerability is an unapproved exposure of at least one of the at least one port to external resources.2. The method of claim 1 , further comprising:performing at least one mitigation action when an exposure vulnerability exists.3. The method of claim 1 , further comprising:sending, to a test external resource, connection data for connecting to the at-risk application via the at least one port, wherein the test external resource is configured to attempt to connect to the at-risk application based on the connection data and to return the results of the attempt to connect to the at-risk application.4. The method of claim 3 , wherein the attempt to connect to the at-risk application includes the test external resource ...

SYSTEM AND METHOD FOR PROVIDING SCALABLE FLOW MONITORING IN A DATA CENTER FABRIC

Disclosed is a method that includes calculating, at a collector receiving a data flow and via a hashing algorithm, all possible hashes associated with at least one virtual attribute associated with the data flow to yield resultant hash values. Based on the resultant hash values, the method includes computing a multicast address group and multicasting the data flow to n leafs based on the multicast address group. At respective other collectors, the method includes filtering received sub-flows of the data flow based on the resultant hashes, wherein if a respective hash is owned by a collector, the respective collector accepts and saves the sub-flow in a local switch collector database. A scalable, distributed netflow is possible with the ability to respond to queries for fabric-level netflow statistics even on virtual constructs. 1. A method comprising:distributing netflow packet collectors across all switched in a network fabric of switches to yield a virtual netflow collector;calculating a first hash at a source switch of an incoming packet on each possible combination of a 5-tuple IP packet header;calculating a second hash at the source switch of an incoming packet on each possible combination of at least one virtual attribute of the network fabric of switches;creating an N-Tuple flow from the first hash and the second hash;exporting the N-Tuple flow to the virtual netflow collector; andmapping, via a virtual extensible local area network multicast address group, the virtual netflow collector to one or more physical netflow collector.2. The method of claim 1 , wherein each switch in the network fabric of switches acts as a respective netflow collector.3. The method of claim 1 , further comprising:receiving a query at the virtual netflow collector regarding the N-Tuple flow; andpresenting a response to the query based on the mapping of the virtual netflow collector to the one or more physical netflow collector.4. The method of claim 3 , wherein the response ...

METHOD AND SYSTEM FOR INSPECTING NETWORK TRAFFIC BETWEEN END POINTS OF A ZONE

In general, embodiments of the disclosure relate to a method for handling media access control (MAC) frames. The method includes receiving, by a service virtual tunnel end point (VTEP) and from a source VTEP, a first virtual layer-3 (VL3) frame comprising a dedicated virtual network identifier (VNI), decapsulating the first VL3 frame to obtain a first media access control (MAC) frame comprising a dedicated virtual local area network (VLAN) tag, replacing, in the first MAC frame, the dedicated VLAN tag with an original VLAN tag, and bridging the first MAC frame to a service device directly connected to a first network element on which the service VTEP is executing. 1. A method for handling media access control (MAC) frames , comprising:receiving, by a service virtual tunnel end point (VTEP) and from a source VTEP, a first virtual layer-3 (VL3) frame comprising a dedicated virtual network identifier (VNI);decapsulating the first VL3 frame to obtain a first MAC frame comprising a dedicated virtual local area network (VLAN) tag;replacing, in the first MAC frame, the dedicated VLAN tag with an original VLAN tag; andbridging the first MAC frame to a service device directly connected to a first network element on which the service VTEP is executing.2. The method of claim 1 , further comprising:obtaining, from the service device and after the service device performs a service function, the first MAC frame comprising the original VLAN tag;making a determination that a destination for the first MAC frame is not a directly connected host and that the destination is an intercept host;replacing, in the first MAC frame and based on the determination, the original VLAN tag with a common intercept VLAN tag;encapsulating the first MAC frame in a second VL3 frame comprising a common intercept VNI; andtransmitting the second VL3 frame towards a destination VTEP, wherein the destination VTEP is executing on a second network element, wherein the destination is directly connected to the ...

METHOD AND APPARATUS FOR KEEPING NETWORK ADDRESS TRANSLATION MAPPING ALIVE

A method and an apparatus for keeping network address translation mapping alive are provided. The method includes: receiving, by a network address translation NAT device, a probe request sent by an internal network device; sending a probe response to the internal network device, where the probe response carries indication information, and the indication information indicates that the internal network device does not actively initiate a heartbeat message to keep network address translation mapping alive; allocating at least two public network addresses to the internal network device from an address resource pool, and using in each time period of a subsequent session process between the internal network device and an external network device, one of the at least two public network addresses as a current active address in the time period, to map the private network address of the internal network device to the current active address. 1. A method for keeping network address translation mapping alive comprising:receiving, by a network address translation (NAT) device, a probe request sent by an internal network device, wherein the probe request comprises a private network address of the internal network device;after receiving the probe request, sending, by the NAT device, a probe response to the internal network device, wherein the probe response carries indication information, and the indication information indicates that the internal network device does not actively initiate a heartbeat message to keep network address translation mapping alive;allocating, by the NAT device, at least two public network addresses to the internal network device from idle public network addresses comprised in an address resource pool; andusing, by the NAT device in each time period of a subsequent session process between the internal network device and an external network device, one of the at least two public network addresses as a current active address in the time period, to map the ...