Virtual LANs over a DLSw network
    1.
    发明授权
    Virtual LANs over a DLSw network 有权
    DLSw网络上的虚拟LAN

    公开(公告)号:US06798775B1

    公开(公告)日:2004-09-28

    申请号:US09330115

    申请日:1999-06-10

    IPC分类号: H04L1228

    摘要: The invention provides a Virtual Local Area Network (VLAN) over a DLSw interconnection so that VLAN identification is preserved as a packet is forwarded from a source VLAN over the TCP/IP link of the DLSw interconnection to a corresponding destination VLAN. A packet assigned to a VLAN is received by a first router. The first router uses a universal parser to determine the VLAN assignment of the packet. The parser is universal as it responds to the type of packet and type of VLAN (Ethernet, IEEE 802.5, etc.). The parser then writes VLAN information into a data structure in the router memory. The parsed data written into the data structure may include the following: the VLAN identification; a user priority identification; a CFI tag field; etc. The information fields in the data structure are assigned to the particular packet as it is processed by the router. Finally, as an outgoing encapsulated packet is built by the router, the fields of the data structure are read by the processes building the packet and written into fields of the encapsulating header. An encapsulated packet is then built by the first router for transmission over a TCP/IP connection with an encapsulating SSP header. A second router receives the encapsulated packet. The second router then builds a VLAN packet in response to the VLAN identification read from the encapsulating header and transmits the packet onto a destination VLAN corresponding to the source VLAN.

    摘要翻译: 本发明通过DLSw互连提供虚拟局域网(VLAN),使得当DLSw互连的TCP / IP链路上的数据包从源VLAN转发到相应的目的VLAN时,可以保留VLAN标识。 分配给VLAN的分组由第一路由器接收。 第一个路由器使用通用解析器来确定数据包的VLAN分配。 解析器是通用的,因为它响应数据包类型和VLAN类型(以太网,IEEE 802.5等)。 解析器然后将VLAN信息写入路由器内存中的数据结构。 写入数据结构的解析数据可能包括以下内容:VLAN标识; 用户优先级标识; CFI标签字段; 数据结构中的信息字段由路由器处理时分配给特定数据包。 最后,由于路由器构建了一个传出封装的数据包,所以构建数据包的过程会读取数据结构的字段,并将其写入封装头的字段。 然后由第一路由器构建封装的分组,以便通过具有封装SSP报头的TCP / IP连接进行传输。 第二个路由器接收封装的数据包。 然后,第二路由器根据从封装头读取的VLAN标识建立VLAN数据包,并将数据包发送到与源VLAN对应的目的VLAN。

    Techniques for network protection based on subscriber-aware application proxies
    2.
    发明申请
    Techniques for network protection based on subscriber-aware application proxies 有权
    基于用户感知应用代理的网络保护技术

    公开(公告)号:US20070113284A1

    公开(公告)日:2007-05-17

    申请号:US11273112

    申请日:2005-11-14

    IPC分类号: G06F12/14

    摘要: Techniques for responding to intrusions on a packet switched network include receiving user data at a subscriber-aware gateway server between a network access server and a content server. The user data includes subscriber identifier data that indicates a unique identifier for a particular user, network address data that indicates a network address for a host used by the particular user, NAS data that indicates an identifier for the network access server, flow list data that indicates one or more open data packet flows, and suspicious activity data. The suspicious activity data indicates a value for a property of the open data packet flows that indicates suspicious activity. It is determined whether an intrusion condition is satisfied based on the suspicious activity data. If the intrusion condition is satisfied, then the gateway responds based at least in part on user data other than the network address data.

    摘要翻译: 用于响应分组交换网络上的入侵的技术包括在网络接入服务器和内容服务器之间的用户感知网关服务器处接收用户数据。 用户数据包括指示特定用户的唯一标识符的用户标识符数据,指示特定用户使用的主机的网络地址的网络地址数据,指示网络接入服务器的标识符的NAS数据, 指示一个或多个打开的数据分组流和可疑活动数据。 可疑活动数据表示指示可疑活动的开放数据分组流的属性的值。 基于可疑活动数据确定是否满足入侵条件。 如果入侵条件满足,则网关至少部分地基于除了网络地址数据之外的用户数据进行响应。

    System and method for determining whether to dynamically suppress data in a communications environment
    3.
    发明申请
    System and method for determining whether to dynamically suppress data in a communications environment 有权
    用于确定是否动态地抑制通信环境中的数据的系统和方法

    公开(公告)号:US20060268761A1

    公开(公告)日:2006-11-30

    申请号:US11136187

    申请日:2005-05-24

    IPC分类号: H04Q7/00

    CPC分类号: H04W88/08 H04W88/181

    摘要: A method for communicating data is provided that includes receiving a plurality of bits associated with a communications flow and inspecting the bits. The method also includes determining whether one or more samples included in the flow should be suppressed. A portion of the bits is converted to 1 bits such that they are designated for later suppression. A selected one or more of the samples are suppressed if the selected samples are designated for suppression.

    摘要翻译: 提供了一种用于传送数据的方法,包括接收与通信流相关联的多个比特并检查比特。 该方法还包括确定是否应该抑制流中包含的一个或多个样本。 一部分位被转换为1位,使得它们被指定用于稍后的抑制。 如果所选择的样本被指定用于抑制,则选择的一个或多个样本被抑制。

    METHOD AND APPARATUS FOR MEASURING NETWORK DATA PACKET DELAY, JITTER AND LOSS
    6.
    发明申请
    METHOD AND APPARATUS FOR MEASURING NETWORK DATA PACKET DELAY, JITTER AND LOSS 有权
    用于测量网络数据包延迟,抖动和损失的方法和装置

    公开(公告)号:US20060239204A1

    公开(公告)日:2006-10-26

    申请号:US11428734

    申请日:2006-07-05

    IPC分类号: H04L12/26

    摘要: A device for measuring network performance in an Internet protocol (IP) network including a counter generating a send sequence number representing a relative send timing indicator for a data packet sent to a respondent network address. The counter generates a receive sequence number representing a relative receive timing indicator for a return data packet received by the device. A comparator compares the send sequence number with the receive sequence number to measure data packet loss.

    摘要翻译: 一种用于测量因特网协议(IP)网络中的网络性能的设备,包括计数器,所述计数器产生表示发送给受访网络地址的数据分组的相对发送定时指示符的发送序列号。 计数器产生一个接收序列号,表示该设备接收到的返回数据包的相对接收定时指示符。 比较器将发送序列号与接收序列号进行比较,以测量数据包丢失。

    Method and apparatus for measuring network data packet delay, jitter and loss

    公开(公告)号:US20050123003A1

    公开(公告)日:2005-06-09

    申请号:US11041062

    申请日:2005-01-21

    摘要: A method of monitoring performance of an Internet protocol (IP) network is described. The method includes generating a timing probe data packet to be sent over the network, the timing probe data packet containing at least a send time of day (STOD) stamp for a sender of the timing probe data packet. The method further includes sending the timing probe data packet over the network from the sender to a receiver. Finally, the method further includes analyzing the timing probe data packet contents including at least the STOD stamp as a performance measure of the network. Between the sending and the analyzing, there is further included writing into the timing probe data packet at the receiver data including at least a receive time of day (RTOD) stamp, and echoing the timing probe data packet by the receiver thereof. Thus, the sender of the timing probe data packet performs the analysis based upon the STOD stamp and the RTOD stamp. Preferably, the generating is performed in such manner that the timing probe data packet further contains a send sequence stamp, wherein the writing further includes a receive sequence stamp, and wherein the analysis is based further upon the send sequence stamp and the receive sequence stamp. The analysis may include first calculating the difference between the STOD stamp and the RTOD stamp as a latency performance measure of the network. Most preferably, the generating, sending and analyzing are repeated for at least two successive ones of such timing probe data packets. The analysis then includes three further calculations. First, the difference between the STOD stamp and the RTOD stamp for a first one of the successive ones of such timing probe data packets is calculated. Second, the difference between the STOD stamp and the RTOD stamp for a second one of the successive ones of such timing probe data packets is calculated. Finally, the difference between the first and second calculated differences is calculated as an inter-packet jitter performance measure of the network.

    Method and apparatus for measuring latency of a computer network
    10.
    发明申请
    Method and apparatus for measuring latency of a computer network 有权
    用于测量计算机网络延迟的方法和装置

    公开(公告)号:US20050089016A1

    公开(公告)日:2005-04-28

    申请号:US10926808

    申请日:2004-08-26

    摘要: A control mechanism enables a destination router to authenticate a response time request issued by a source router. The control mechanism uses a control message that is transmitted by the source router to the destination router. Receipt of the control message by the destination router causes the destination router to listen for a server request message for a designated response time. The source router, after sending the control message, transmits a server request message to the destination router. In the event that the destination router receives the server request message within the designated response time, then the destination router responds to the server request message by providing the request to service software. The control message may encapsulate a message that holds the response time request. The request message may be encrypted.

    摘要翻译: 控制机制使目的路由器能够认证源路由器发出的响应时间请求。 控制机制使用由源路由器发送到目标路由器的控制消息。 由目的地路由器接收控制消息使目的路由器监听指定响应时间的服务器请求消息。 源路由器在发送控制消息后,向目的路由器发送服务器请求消息。 在目的地路由器在指定的响应时间内接收到服务器请求消息的情况下,目的路由器通过向服务软件提供请求来响应服务器请求消息。 控制消息可以封装保存响应时间请求的消息。 请求消息可以被加密。