公开(公告)号：US10044634B2

公开(公告)日：2018-08-07

申请号：US15225472

申请日：2016-08-01

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/923 ,  H04L29/06 ,  H04L12/861 ,  H04L12/26 ,  H04L12/911 ,  H04L12/801 ,  H04L12/42

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US10033665B2

公开(公告)日：2018-07-24

申请号：US15034252

申请日：2014-11-11

Applicant: Napatech A/S

Inventor： Jens Christophersen

IPC: H04L12/28 ,  H04L12/935 ,  H04L12/931 ,  H04L12/741 ,  H04L12/861

Abstract: A system and a method for analyzing a plurality of data packets where the data packets are analyzed to determine which of a number of subsequent process(es) is/are to further analyze the data packets. Information identifying the subsequent process(es) is added to a FIFO. An unknown data packet type is not immediately recognizable, whereby a storage location is reserved in the FIFO, and the data packet is fed to a separate characterizing process deriving the information relating to the relevant process(es), which information is subsequently fed to the relevant storage location in the FIFO, so that the order of data packets represented in the FIFO is the order of receipt of the data packets. From the FIFO, information is fed to a work list or storage of the relevant subsequent processes to process the pertaining data packets. This processing may also be in the chronological order of receipt of the data packets.

公开(公告)号：US09811110B2

公开(公告)日：2017-11-07

申请号：US14924876

申请日：2015-10-28

Applicant: Napatech A/S

Inventor： René Krog Josiassen ,  Søren Kragh

IPC: G06F1/04 ,  G06F3/05 ,  H04J3/06

CPC classification number: G06F1/04 ,  G06F3/05 ,  H04J3/0697

Abstract: A system and a method of sampling an event signal using multiple clocking signals each provided in a separate candidate clock domain each of which also receives points in time from a master clock. From each candidate clock domain, clocked by the individual clocking signals, pairs of a received point in time and event signal value are fed to a master clock domain. In the master clock domain, the values of the event signal may be determined over time as a function of master clock time. This may be used for synchronizing operation in the master clock domain of e.g. packet time stamping with an overall time defined by the event signal. Using multiple clocking signals for the sampling, a much more precise sampling of the event signal is facilitated.

公开(公告)号：US10693796B2

公开(公告)日：2020-06-23

申请号：US16207683

申请日：2018-12-03

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Vijay Dheap ,  Patrick V. Johnstone ,  Ben A. Wuest ,  Alex Omø Agerholm

IPC: H04L1/00 ,  H04L12/851 ,  H04L12/26 ,  H04L12/853 ,  H04L29/06 ,  H04L12/721

Abstract: Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

公开(公告)号：US20180324107A1

公开(公告)日：2018-11-08

申请号：US16018973

申请日：2018-06-26

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/923 ,  H04L12/26 ,  H04L29/06 ,  H04L12/801 ,  H04L12/911 ,  H04L12/861

CPC classification number: H04L47/762 ,  H04L29/06537 ,  H04L43/04 ,  H04L43/0876 ,  H04L43/0882 ,  H04L43/106 ,  H04L45/28 ,  H04L47/34 ,  H04L47/78 ,  H04L49/9084 ,  H04L69/24 ,  H04L2012/421

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US20160116935A1

公开(公告)日：2016-04-28

申请号：US14924876

申请日：2015-10-28

Applicant: Napatech A/S

Inventor： René Krog Josiassen ,  Søren Kragh

IPC: G06F1/04

CPC classification number: G06F1/04 ,  G06F3/05 ,  H04J3/0697

Abstract: A system and a method of sampling an event signal using multiple clocking signals each provided in a separate candidate clock domain each of which also receives points in time from a master clock. From each candidate clock domain, clocked by the individual clocking signals, pairs of a received point in time and event signal value are fed to a master clock domain. In the master clock domain, the values of the event signal may be determined over time as a function of master clock time. This may be used for synchronizing operation in the master clock domain of e.g. packet time stamping with an overall time defined by the event signal. Using multiple clocking signals for the sampling, a much more precise sampling of the event signal is facilitated.

Abstract translation: 一种使用多个时钟信号对事件信号采样的系统和方法，每个时钟信号分别在单独的候选时钟域中提供，每个时钟信号也从主时钟接收时间点。 从每个候选时钟域，由各个时钟信号计时，接收的时间点和事件信号值的对被馈送到主时钟域。 在主时钟域中，事件信号的值可以随时间而被确定为主时钟时间的函数。 这可以用于例如主时钟域中的同步操作。 分组时间戳由事件信号定义的总时间。 使用多个时钟信号进行采样，便于对事件信号进行更精确的采样。

公开(公告)号：US20190109794A1

公开(公告)日：2019-04-11

申请号：US16207683

申请日：2018-12-03

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Vijay Dheap ,  Patrick V. Johnstone ,  Ben A. Wuest ,  Alex Omø Agerholm

IPC: H04L12/851 ,  H04L12/853 ,  H04L12/26

Abstract: Embodiments provide a system and method for network tracking. By using packet capture applications having a flow identifier and a time stamper, one or more raw packets from one or more packet flows intercepted from a network can be tagged with a unique identifier and timestamp that can later be used to aggregate packet flows that have been analyzed by one or more capture applications. The unique identifier can relate to the network interface of the particular capture application and can also have an increasing value, where the increase in value can be monotonic. Later capture applications, while capable of generating secondary timestamps, can disregard those secondary timestamps for the primary timestamp of the first capture application in order to remove complications arising from latency issues.

公开(公告)号：US20180167322A1

公开(公告)日：2018-06-14

申请号：US15839216

申请日：2017-12-12

Applicant: Napatech A/S

Inventor： Michael Milde Lilja ,  Claus Ek

IPC: H04L12/741 ,  H04L29/12 ,  H04L12/721 ,  H04L12/855

CPC classification number: H04L45/745 ,  H04L43/18 ,  H04L45/72 ,  H04L47/2466 ,  H04L61/103 ,  H04L69/14

Abstract: A system and a method for receiving data packets at the inputs of two data handlers. Each data handler compares address data in the individual data packet with a first and a second list of addresses and forward packets to each other, so that data packets with one of the first addresses are fed to one data handler and packets with one of the second addresses are fed to the other data handler. The data handlers output the data packets received so that one data handler outputs all packets with addresses of the first addresses and the other data handler outputs all packets with addresses of the second addresses.

公开(公告)号：US20180034716A1

公开(公告)日：2018-02-01

申请号：US15225472

申请日：2016-08-01

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION ,  NAPATECH A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/26 ,  H04L12/801

CPC classification number: H04L47/762 ,  H04L29/06537 ,  H04L43/04 ,  H04L43/0876 ,  H04L43/0882 ,  H04L43/106 ,  H04L45/28 ,  H04L47/78 ,  H04L49/9084 ,  H04L2012/421

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US09800336B2

公开(公告)日：2017-10-24

申请号：US15114307

申请日：2015-01-08

Applicant: Napatech A/S

Inventor： Sune Graves Krohn

IPC: H04B10/00 ,  H04B10/116 ,  H01R13/717 ,  H01R13/73 ,  H04B10/50

CPC classification number: H04B10/116 ,  H01R13/7172 ,  H01R13/7175 ,  H01R13/73 ,  H01R2201/04 ,  H04B10/503

Abstract: A network card or the like with two or more connectors having reflecting sides, where a light emitter is positioned between or behind the connectors and emit light toward the reflecting sides which act as a wave guide and guide the light to an opening between the connectors and toward the surroundings.