TCP FLOW CLOCK EXTRACTION
    51.
    发明申请
    TCP FLOW CLOCK EXTRACTION 有权
    TCP流量时钟提取

    公开(公告)号:US20110085630A1

    公开(公告)日:2011-04-14

    申请号:US12575850

    申请日:2009-10-08

    IPC分类号: H04L7/02

    摘要: A packet trace is received. The packet trace is transformed into a sequence of pulse signals in a temporal domain. The sequence of pulse signals in the temporal domain is transformed into a sequence of pulse signals in a frequency domain. Peaks are detected within relevant frequency bands in the sequence of pulse signals in the frequency domain. A fundamental frequency is identified within the peaks. The fundamental frequency, which represents the TCP flow clock, is returned.

    摘要翻译: 收到数据包跟踪。 分组跟踪在时域中变换成脉冲信号序列。 时域中的脉冲信号序列被变换成频域中的脉冲信号序列。 在频域中的脉冲信号序列中的相关频带内检测峰。 在峰值内确定基本频率。 返回表示TCP流时钟的基频。

    Firewall for tunneled IPv6 traffic
    52.
    发明申请
    Firewall for tunneled IPv6 traffic 有权
    防火墙用于隧道式IPv6流量

    公开(公告)号:US20110004932A1

    公开(公告)日:2011-01-06

    申请号:US12387931

    申请日:2009-05-08

    IPC分类号: G06F21/20

    摘要: A NAT device and method implemented on the device for filtering tunneled IPv6 traffic is disclosed. The method comprises: receiving an IP traffic stream at an ingress network interface to the NAT, performing deep packet inspection on the traffic stream to detect the tunneled IPv6 packets, and applying a filter to the IPv6 packets.

    摘要翻译: 公开了一种在设备上实现的用于过滤隧道IPv6业务的NAT设备和方法。 该方法包括:在到达NAT的入口网络接口接收IP业务流,对业务流执行深度报文检测,检测隧道IPv6报文,并对IPv6报文应用过滤。

    System and Method to Guide Active Participation in Peer-to-Peer Systems with Passive Monitoring Environment
    53.
    发明申请
    System and Method to Guide Active Participation in Peer-to-Peer Systems with Passive Monitoring Environment 有权
    指导与被动监测环境对等系统的主动参与的系统和方法

    公开(公告)号:US20100138555A1

    公开(公告)日:2010-06-03

    申请号:US12325703

    申请日:2008-12-01

    IPC分类号: G06F15/16

    CPC分类号: H04L12/66

    摘要: A method includes identifying shared content by inspecting a peer-to-peer traffic flow and identifying source peers providing the shared content, and requesting the shared content from the source peers. The method further includes receiving requests for the shared content from requesting peers, identifying requesting peers based on the requests for the shared content, and providing the shared content to a local subset of the requesting peers.

    摘要翻译: 一种方法包括通过检查对等业务流和识别提供共享内容的源对等体以及从源对等体请求共享内容来识别共享内容。 该方法还包括从请求对等体接收对共享内容的请求,基于对共享内容的请求来识别请求对等体,以及将共享内容提供给请求对等体的本地子集。

    Methods and apparatus to implement scalable routing in network communication systems
    54.
    发明授权
    Methods and apparatus to implement scalable routing in network communication systems 失效
    在网络通信系统中实现可扩展路由的方法和装置

    公开(公告)号:US08670351B2

    公开(公告)日:2014-03-11

    申请号:US13531018

    申请日:2012-06-22

    IPC分类号: H04L12/46

    摘要: An example method involves for a first virtual private network (VPN) installed on a candidate hub router, selecting a first spoke-to-hub assignment solution having a first least memory utilization cost to assign the candidate hub router a quantity of first virtual private edge (VPE) routers serving the first VPN; for a second VPN installed on the candidate hub router, selecting a second spoke-to-hub assignment solution having a second least memory utilization cost to assign the candidate hub router a quantity of second VPE routers serving the second VPN; determining third least memory utilization costs to assign the candidate hub router to a quantity of the first VPE routers, and fourth least memory utilization costs to assign the candidate hub router to a quantity of the second VPE routers; and selecting the first or second spoke-to-hub assignment solution for the candidate hub router based on the least memory utilization costs.

    摘要翻译: 示例性方法涉及安装在候选集线器路由器上的第一虚拟专用网络(VPN),选择具有第一最小存储器利用成本的第一分散对集线器分配解决方案以分配候选集线器路由器数量的第一虚拟私有边缘 (VPE)路由器服务第一个VPN; 对于安装在所述候选集线器路由器上的第二VPN,选择具有第二最小存储器利用成本的第二辐射对集线器分配解决方案来为所述候选集线器路由器分配服务于所述第二VPN的第二VPE路由器的数量; 确定将所述候选集线器路由器分配给所述第一VPE路由器的数量的第三最小存储器利用成本以及将所述候选集线器路由器分配给所述第二VPE路由器的数量的第四最小存储器利用成本; 以及基于所述最小存储器利用成本为所述候选集线器路由器选择所述第一或第二辐条对集线器分配解决方案。

    Scalable traffic classifier and classifier training system
    55.
    发明授权
    Scalable traffic classifier and classifier training system 有权
    可扩展流量分类器和分类器训练系统

    公开(公告)号:US08311956B2

    公开(公告)日:2012-11-13

    申请号:US12539430

    申请日:2009-08-11

    IPC分类号: G06F15/18

    CPC分类号: G06N99/005

    摘要: A traffic classifier has a plurality of binary classifiers, each associated with one of a plurality of calibrators. Each calibrator trained to translate an output score of the associated binary classifier into an estimated class probability value using a fitted logistic curve, each estimated class probability value indicating a probability that the packet flow on which the output score is based belongs to the traffic class associated with the binary classifier associated with the calibrator. The classifier training system configured to generate a training data based on network information gained using flow and packet sampling methods. In some embodiments, the classifier training system configured to generate reduced training data sets, one for each traffic class, reducing the training data related to traffic not associated with the traffic class.

    摘要翻译: 流量分类器具有多个二进制分类器,每个二进制分类器与多个校准器之一相关联。 每个校准器被训练成使用拟合的逻辑曲线将相关联的二进制分类器的输出得分转换成估计的类概率值,每个估计的类概率值指示输出得分所基于的分组流的概率属于相关联的流量类别 与校准器相关联的二进制分类器。 分类器训练系统被配置为基于使用流和分组采样方法获得的网络信息生成训练数据。 在一些实施例中,分类器训练系统被配置为生成减少的训练数据集,每个业务类别一个,减少与业务类别不相关的业务相关的训练数据。

    METHODS AND APPARATUS TO IMPLEMENT SCALABLE ROUTING IN NETWORK COMMUNICATION SYSTEMS
    57.
    发明申请
    METHODS AND APPARATUS TO IMPLEMENT SCALABLE ROUTING IN NETWORK COMMUNICATION SYSTEMS 有权
    在网络通信系统中实现可扩展路由的方法和设备

    公开(公告)号:US20110069634A1

    公开(公告)日:2011-03-24

    申请号:US12563815

    申请日:2009-09-21

    IPC分类号: H04L12/28 H04L12/56

    摘要: Methods and apparatus to implement scalable routing in network communication systems are disclosed. A disclosed example method involves selecting a plurality of virtual private networks in a communication network and selecting a candidate hub router from a plurality of routers in the communication network. The example method also involves determining a plurality of least memory utilization costs associated with assigning different quantities of spoke routers to the candidate hub router. Each of the least memory utilization costs and corresponding quantity of spoke routers is associated with a corresponding one of the plurality of virtual private networks. For each of the least memory utilization costs, a bandwidth usage of a corresponding one of the quantities of spoke routers is identified. The candidate hub router is selected to operate as a hub router for one of the quantities of spoke routers associated with a corresponding one of the bandwidth usages that does not exceed a bandwidth capacity of the candidate hub router.

    摘要翻译: 公开了在网络通信系统中实现可扩展路由的方法和装置。 公开的示例方法包括在通信网络中选择多个虚拟专用网络,并从通信网络中的多个路由器中选择候选集线器。 示例性方法还涉及确定与候选集线器路由器分配不同数量的分支路由器相关联的多个最小存储器利用成本。 每个最小内存利用成本和相应数量的分支路由器都与多个虚拟专用网络中相应的一个相关联。 对于每个最小的存储器利用成本,识别辐射路由器的相应数量的带宽使用。 选择候选集线器路由器作为与不超过候选集线器路由器的带宽容量的相应一个带宽用途相关联的辐射路由器数量之一的集线器路由器。

    Scalable multiprotocol label switching based virtual private networks and methods to implement the same
    58.
    发明授权
    Scalable multiprotocol label switching based virtual private networks and methods to implement the same 有权
    基于可扩展多协议标签交换的虚拟专用网和实现相同的方法

    公开(公告)号:US07796607B2

    公开(公告)日:2010-09-14

    申请号:US12130329

    申请日:2008-05-30

    IPC分类号: H04L12/28 H04L12/56

    摘要: Example scalable multi-protocol label switching (MPLS) based virtual private networks (VPNs) and methods to implement the same are disclosed. A disclosed example spoke provider edge (PE) router for an MPLS-based VPN includes a truncated virtual routing and forwarding (VRF) table containing a first value referencing a hub PE router and a second value referencing a first customer edge (CE) router coupled to the VPN via the PE router, and a forwarding module to forward a packet received from the first CE router to the hub PE router when the packet contains an address referencing a second CE router coupled to the VPN via a second spoke PE router.

    摘要翻译: 披露了基于虚拟专用网(VPN)的可扩展多协议标签交换(MPLS)示例及其实现方法。 用于基于MPLS的VPN的公开的示例性分支提供商边缘(PE)路由器包括截断的虚拟路由和转发(VRF)表,其包含引用集线器PE路由器的第一值,以及引用耦合的第一客户边缘(CE)路由器的第二值 通过PE路由器到VPN,以及转发模块,用于当分组包含参考经由第二辐条PE路由器耦合到VPN的第二CE路由器的地址时,将从第一CE路由器接收的分组转发到集线器PE路由器。