Abstract:
A monitoring apparatus for detection of a malicious attack in a communications network comprises a pattern matching engine (406), a data store (408) and an alert generator (410, 412). The pattern matching engine (406) is arranged to receive a bit stream and identify a characteristic of a malicious attack from at least one datagram represented by at least part of the bit stream. The data store (408) is operably coupled to the pattern matching engine and the data store (408) is arranged to retain identification data to enable the pattern matching engine to identify the characteristic of the malicious attack. The alert generator (410, 412) is arranged to generate an alert in response to an identification of the characteristic of the malicious attack. The data store (408) is remotely updatable.
Abstract:
Aspects of the disclosure embody a multi-master two-wire serial bus that comprises two or more chained two-wire serial busses. The chained two-wire serial busses include a host two-wire serial bus with a first master device and one or more slave devices. One or more chained two-wire serial busses are coupled to the host bus wherein one or more slave devices on the host two-wire serial bus operate as second master devices, which comprise a digital state machine including a two-wire serial slave component coupled to the master device and a two-wire serial master component coupled to the slave devices on the chained two-wire serial bus. The digital state machine emulates a slave device on the host two-wire serial bus and a master device on the chained two-wire serial bus.
Abstract:
Arbitrary numerical distributions are presented for use in devices having limited processing and storage capabilities by having the device accept strings of arbitrarily distributed numbers from a source outside of the device. In one embodiment, a master controller creates a table of values which follow the desired minimum, maximum, mean, and standard deviation, etc. of the particular desired statistical distribution required. The created table is then communicated to the limited capacity device and can be used whenever a distribution of random values is required. The master controller could have one of several slave devices associated with it in the system. In another embodiment, where the storage capability of the device is large enough to store a table of values with sufficient different entries to create a distribution of satisfactory “randomness” for the particular application, a random number generator within the device is used to select the order of presentation of the table of values.
Abstract:
National emergency alert test systems and methods are operable to test a national emergency alert system. An exemplary embodiment initiates a test of the national emergency alert message system, retrieves a national emergency alert test message from a memory, communicates the national emergency alert test message to a programming stream receive system via a local area network, interrupts programming provided in a plurality of program streams, and replaces the interrupted programming in the program streams with the retrieved national emergency alert test message.
Abstract:
By equipping receiving devices in a network with synchronizable clocks it is possible to periodically send an “impulse” signal that is received by all of the clocks at the same (or relatively the same) instant of time. The accuracy of the impulse clock need not be high, only that its signal reach all the clocks approximately at the same time. In one embodiment, a transmitting device, upon receipt of the synchronizing impulse signal, sends a packet of data bearing the sending device's epoch time-stamp to a receiving device. The data packet makes its way through the network element to the receiving device and the time-stamp is used by the receiving device to calculate the difference between the epoch time of the receiver and the epoch time of the sender. Effectively, this procedure removes the unknown network element transit times from the equation and allows the devices to operate in a synchronized manner.
Abstract:
An in-line network simulator is provided that disrupts packets traveling through it to simulate network conditions. According to one embodiment, a method comprises receiving, at an in-line network simulator, packets sent from a source node to a destination node. The in-line network simulator classifies the received packets into respective ones of a plurality of different classifications, and disrupts the received packets based on corresponding disruption characteristics defined for their respective classifications. Such disrupting of the packets may include selectively performing at least one of delaying, dropping, and reordering of the received packets.
Abstract:
A monitoring system comprises a first network probe coupled to a first point in a communications link and a second network probe coupled to a second point in the communications link. Each of the first and second network probes is arranged to sample packets from a predetermined flow of packets and store timestamps associated with packet samples. The timestamps stored by the probes are subsequently correlated.
Abstract:
A network element is provided with the capability to perform monitoring and/or measurement functions on the element and the network of which it is a part. The monitoring/measurement functionality is implemented by programmable devices to enable the functionality to be modified and updated without removing the network element from service.