公开(公告)号：US09130818B2

公开(公告)日：2015-09-08

申请号：US13792407

申请日：2013-03-11

申请人： Gregory S. Hilton ,  Andrew M. Spooner ,  Franz J. Weller ,  Patricia A. Abkowitz ,  Ronald A. Pleshek ,  Richard G. Jeske ,  Keith E. Cheney ,  Charles A. Webb, III ,  Scott A. Harper

发明人： Gregory S. Hilton ,  Andrew M. Spooner ,  Franz J. Weller ,  Patricia A. Abkowitz ,  Ronald A. Pleshek ,  Richard G. Jeske ,  Keith E. Cheney ,  Charles A. Webb, III ,  Scott A. Harper

IPC分类号： H04L12/701 ,  H04L12/931 ,  H04L12/24 ,  H04L12/26

CPC分类号： H04L45/00 ,  H04L41/0893 ,  H04L43/00 ,  H04L49/00

摘要： Systems and methods are disclosed for unified systems of network tool optimizers (NTOs). A NTO supervisor device controls switch fabric circuitry to interconnect a plurality of NTO member devices so that packets received at a source port for one NTO member device can be output to a destination port for a different NTO member device. The NTO supervisor device is further configured to analyze filters for the NTO member devices and to generate filter rules for forwarding packets among the various NTO member devices using the switch fabric circuitry. Further, additional secondary NTO supervisor devices can also be included within the unified NTO system to further expand the system. As such, a plurality of NTO member devices are managed and controlled by one or more NTO supervisor devices to form a highly scalable and efficient unified NTO system.

摘要翻译： 公开了网络工具优化器（NTO）的统一系统的系统和方法。 NTO主管设备控制交换结构电路以互连多个NTO成员设备，使得在一个NTO成员设备的源端口处接收的分组可以被输出到不同NTO成员设备的目的地端口。 NTO管理器设备还被配置为分析NTO成员设备的过滤器，并且生成用于使用交换结构电路在各种NTO成员设备之间转发分组的过滤规则。 此外，还可以在统一的NTO系统中包含附加的辅助NTO监控器设备，以进一步扩展系统。 因此，多个NTO成员设备由一个或多个NTO主管设备管理和控制，以形成高度可扩展且高效的统一NTO系统。

公开(公告)号：US20120106354A1

公开(公告)日：2012-05-03

申请号：US13346123

申请日：2012-01-09

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/56 ,  H04L12/26

CPC分类号： H04L43/12 ,  H04L43/028

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use superset packet forwarding, such that ingress filter engines are configured with ingress filter rules so as to forward a superset of packets to output ports associated with overlapping filters. Egress filter engines are configured with egress filter rules to then determine which of the superset packets are actually sent out the output ports.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用超集包转发，使得入口过滤器引擎配置有入口过滤器规则，以便将分组的超集转发到与重叠过滤器相关联的输出端口。 出口过滤器引擎配置有出口过滤器规则，然后确定哪些超集包实际上被发送出输出端口。

公开(公告)号：US08902895B2

公开(公告)日：2014-12-02

申请号：US13227617

申请日：2011-09-08

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28

CPC分类号： H04L43/028 ,  H04L45/306 ,  H04L49/90

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use a packet processing system whereby forwarding behavior is governed by matching packets in parallel against multiple user-specified packet filtering criteria, and by performing forwarding actions associated with all such matching filter criteria. The multi-action packet forwarding can be implemented using hardware configured to directly provide multi-action packet forwarding and/or hardware configured to provide single-packet-forwarding that has been subsequently configured using filter engines to provide multi-action packet forwarding.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用分组处理系统，由此通过与多个用户指定的分组过滤标准并行地匹配分组来管理转发行为，并且通过执行与所有这样的匹配过滤器标准相关联的转发动作。 可以使用配置为直接提供多动作分组转发和/或被配置为提供单个分组转发的硬件来实现多动作分组转发，所述单分组转发随后使用过滤器引擎配置以提供多动作分组转发。

公开(公告)号：US08098677B1

公开(公告)日：2012-01-17

申请号：US12462293

申请日：2009-07-31

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28 ,  H04L12/56 ,  G06F15/16 ,  G06F3/00

CPC分类号： H04L43/12 ,  H04L43/028

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use superset packet forwarding, such that ingress filter engines are configured with ingress filter rules so as to forward a superset of packets to output ports associated with overlapping filters. Egress filter engines are configured with egress filter rules to then determine which of the superset packets are actually sent out the output ports.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用超集包转发，使得入口过滤器引擎配置有入口过滤器规则，以便将分组的超集转发到与重叠过滤器相关联的输出端口。 出口过滤器引擎配置有出口过滤器规则，然后确定哪些超集包实际上被发送出输出端口。

公开(公告)号：US08842548B2

公开(公告)日：2014-09-23

申请号：US13346123

申请日：2012-01-09

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28 ,  G06F15/16

CPC分类号： H04L43/12 ,  H04L43/028

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use superset packet forwarding, such that ingress filter engines are configured with ingress filter rules so as to forward a superset of packets to output ports associated with overlapping filters. Egress filter engines are configured with egress filter rules to then determine which of the superset packets are actually sent out the output ports.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用超集包转发，使得入口过滤器引擎配置有入口过滤器规则，以便将分组的超集转发到与重叠过滤器相关联的输出端口。 出口过滤器引擎配置有出口过滤器规则，然后确定哪些超集包实际上被发送出输出端口。

公开(公告)号：US20110317694A1

公开(公告)日：2011-12-29

申请号：US13227617

申请日：2011-09-08

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/56

CPC分类号： H04L43/028 ,  H04L45/306 ,  H04L49/90

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use a packet processing system whereby forwarding behavior is governed by matching packets in parallel against multiple user-specified packet filtering criteria, and by performing forwarding actions associated with all such matching filter criteria. The multi-action packet forwarding can be implemented using hardware configured to directly provide multi-action packet forwarding and/or hardware configured to provide single-packet-forwarding that has been subsequently configured using filter engines to provide multi-action packet forwarding.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用分组处理系统，由此通过与多个用户指定的分组过滤标准并行地匹配分组来管理转发行为，并且通过执行与所有这样的匹配过滤器标准相关联的转发动作。 可以使用配置为直接提供多动作分组转发和/或被配置为提供单个分组转发的硬件来实现多动作分组转发，所述单分组转发随后使用过滤器引擎配置以提供多动作分组转发。

公开(公告)号：US08018943B1

公开(公告)日：2011-09-13

申请号：US12462221

申请日：2009-07-31

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28

CPC分类号： H04L43/028 ,  H04L45/306 ,  H04L49/90

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use a packet processing system whereby forwarding behavior is governed by matching packets in parallel against multiple user-specified packet filtering criteria, and by performing forwarding actions associated with all such matching filter criteria. The multi-action packet forwarding can be implemented using hardware configured to directly provide multi-action packet forwarding and/or hardware configured to provide single-packet-forwarding that has been subsequently configured using filter engines to provide multi-action packet forwarding.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用分组处理系统，由此通过与多个用户指定的分组过滤标准并行地匹配分组来管理转发行为，并且通过执行与所有这样的匹配过滤器标准相关联的转发动作。 可以使用配置为直接提供多动作分组转发和/或被配置为提供单个分组转发的硬件来实现多动作分组转发，所述单分组转发随后使用过滤器引擎配置以提供多动作分组转发。

公开(公告)号：US20130259045A1

公开(公告)日：2013-10-03

申请号：US13432172

申请日：2012-03-28

申请人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

发明人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

IPC分类号： H04L12/56

CPC分类号： H04L45/306 ,  H04L29/06095

摘要： Systems and methods are disclosed for modifying network packets to use unrecognized headers/fields for packet classification and forwarding in packet processing systems, such as network tool optimizer (NTO) devices. The packet modifications described allow standard switch or routing integrated circuits (ICs) to process, classify, and forward packets based upon data that is not typically recognized by the hardware capabilities of the standard packet routing circuitry for packet processing. Input packets are modified so that unrecognized data becomes recognized data for purposes of packet processing, classification, and forwarding by the packet routing circuitry. These modifications are then removed after packets are processed to reform the original packets. The original packets are then provided to destination devices based upon packet classification and forwarding control information. As such, packet processing, classification, and forwarding is provided in packet processing systems using headers/fields that are not supported for processing by standard switch or routing integrated circuits (ICs).

摘要翻译： 公开了用于修改网络分组以使用诸如网络工具优化器（NTO）设备的分组处理系统中的用于分组分类和转发的无法识别的报头/字段的系统和方法。 所描述的分组修改允许标准交换机或路由集成电路（IC）基于通常不被用于分组处理的标准分组路由选择电路的硬件能力识别的数据来处理，分类和转发分组。 修改输入分组，使得无法识别的数据成为数据包处理，分类和分组路由电路转发目的的数据。 然后在处理数据包以改造原始数据包后，删除这些修改。 然后基于分组分类和转发控制信息将原始分组提供给目的设备。 因此，在使用不支持标准交换机或路由集成电路（IC）处理的报头/字段的分组处理系统中提供分组处理，分类和转发。

公开(公告)号：US08842672B2

公开(公告)日：2014-09-23

申请号：US13432172

申请日：2012-03-28

申请人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

发明人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

IPC分类号： H04L12/56

CPC分类号： H04L45/306 ,  H04L29/06095

摘要： Systems and methods are disclosed for modifying network packets to use unrecognized headers/fields for packet classification and forwarding in packet processing systems, such as network tool optimizer (NTO) devices. The packet modifications described allow standard switch or routing integrated circuits (ICs) to process, classify, and forward packets based upon data that is not typically recognized by the hardware capabilities of the standard packet routing circuitry for packet processing. Input packets are modified so that unrecognized data becomes recognized data for purposes of packet processing, classification, and forwarding by the packet routing circuitry. These modifications are then removed after packets are processed to reform the original packets. The original packets are then provided to destination devices based upon packet classification and forwarding control information. As such, packet processing, classification, and forwarding is provided in packet processing systems using headers/fields that are not supported for processing by standard switch or routing integrated circuits (ICs).

摘要翻译： 公开了用于修改网络分组以使用诸如网络工具优化器（NTO）设备的分组处理系统中的用于分组分类和转发的无法识别的报头/字段的系统和方法。 所描述的分组修改允许标准交换机或路由集成电路（IC）基于通常不被用于分组处理的标准分组路由选择电路的硬件能力识别的数据来处理，分类和转发分组。 修改输入分组，使得无法识别的数据成为数据包处理，分类和分组路由电路转发目的的数据。 然后在处理数据包以改造原始数据包后，删除这些修改。 然后基于分组分类和转发控制信息将原始分组提供给目的设备。 因此，在使用不支持标准交换机或路由集成电路（IC）处理的报头/字段的分组处理系统中提供分组处理，分类和转发。