公开(公告)号：US20180324107A1

公开(公告)日：2018-11-08

申请号：US16018973

申请日：2018-06-26

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/923 ,  H04L12/26 ,  H04L29/06 ,  H04L12/801 ,  H04L12/911 ,  H04L12/861

CPC classification number: H04L47/762 ,  H04L29/06537 ,  H04L43/04 ,  H04L43/0876 ,  H04L43/0882 ,  H04L43/106 ,  H04L45/28 ,  H04L47/34 ,  H04L47/78 ,  H04L49/9084 ,  H04L69/24 ,  H04L2012/421

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US10044634B2

公开(公告)日：2018-08-07

申请号：US15225472

申请日：2016-08-01

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/923 ,  H04L29/06 ,  H04L12/861 ,  H04L12/26 ,  H04L12/911 ,  H04L12/801 ,  H04L12/42

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US20180034716A1

公开(公告)日：2018-02-01

申请号：US15225472

申请日：2016-08-01

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION ,  NAPATECH A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/26 ,  H04L12/801

CPC classification number: H04L47/762 ,  H04L29/06537 ,  H04L43/04 ,  H04L43/0876 ,  H04L43/0882 ,  H04L43/106 ,  H04L45/28 ,  H04L47/78 ,  H04L49/9084 ,  H04L2012/421

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US10601729B2

公开(公告)日：2020-03-24

申请号：US16018973

申请日：2018-06-26

Applicant: International Business Machines Corporation ,  Napatech A/S

Inventor： William A. Bird ,  Russell Couturier ,  Thomas D. Silliman ,  Wayne Tackabury ,  Alex Omo Agerholm ,  Michael Milde Lilja ,  Peter Dahl Ekner ,  Philip Due Soeberg

IPC: H04L12/923 ,  H04L12/26 ,  H04L12/861 ,  H04L12/911 ,  H04L29/06 ,  H04L12/801 ,  H04L12/42 ,  H04L12/703

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

公开(公告)号：US09336400B2

公开(公告)日：2016-05-10

申请号：US14479490

申请日：2014-09-08

Applicant: International Business Machines Corporation

Inventor： Ivan M. Milman ,  Martin Oberhofer ,  Sushain Pandit ,  Calvin S. Powers ,  Wayne Tackabury

IPC: H04L29/06 ,  G06F21/60 ,  H04L12/24

CPC classification number: G06F21/60 ,  H04L41/046 ,  H04L41/0823 ,  H04L63/0209 ,  H04L63/20

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

公开(公告)号：US10594564B2

公开(公告)日：2020-03-17

申请号：US15339172

申请日：2016-10-31

Applicant: International Business Machines Corporation

Inventor： Wayne Tackabury

IPC: G06F15/16 ,  H04L12/24 ,  H04L29/06 ,  H04L29/08 ,  H04L29/12

Abstract: Anonymization of IP addresses of a network while preserving a topology of the network is provided. Information is received regarding a network topology. The information is analyzed to generate a first model of the network topology. The first model is converted into a second model preserving the network topology and obfuscating a mapping of the IP addresses. The second model is utilized to simulate processing of network packets consistent with actual processing of the network packets in the network topology.

公开(公告)号：US09336399B2

公开(公告)日：2016-05-10

申请号：US14257422

申请日：2014-04-21

Applicant: International Business Machines Corporation

Inventor： Ivan M. Milman ,  Martin Oberhofer ,  Sushain Pandit ,  Calvin S. Powers ,  Wayne Tackabury

IPC: H04L29/06 ,  G06F21/60 ,  H04L12/24

CPC classification number: G06F21/60 ,  H04L41/046 ,  H04L41/0823 ,  H04L63/0209 ,  H04L63/20

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Abstract translation: 用于放置信息资产的计算机实现方法，包括：发现关于新信息资产或变更信息资产的信息; 确定信息资产的理想位置的一个或多个特征; 确定信息技术环境中的一个或多个位置的一个或多个特征; 通过将理想位置的特征与实际位置的特征进行比较来确定信息资产与位置的兼容性; 报告与用户的兼容性; 并且可选地建议替代放置位置。 位置可以是一个或多个位置模式的一部分。

公开(公告)号：US20180124008A1

公开(公告)日：2018-05-03

申请号：US15339172

申请日：2016-10-31

Applicant: International Business Machines Corporation

Inventor： Wayne Tackabury

IPC: H04L29/12 ,  H04L29/06 ,  H04L29/08 ,  H04L12/24

Abstract: Anonymization of IP addresses of a network while preserving a topology of the network is provided. Information is received regarding a network topology. The information is analyzed to generate a first model of the network topology. The first model is converted into a second model preserving the network topology and obfuscating a mapping of the IP addresses. The second model is utilized to simulate processing of network packets consistent with actual processing of the network packets in the network topology.

公开(公告)号：US20150304169A1

公开(公告)日：2015-10-22

申请号：US14479490

申请日：2014-09-08

Applicant: International Business Machines Corporation

Inventor： Ivan M. Milman ,  Martin Oberhofer ,  Sushain Pandit ,  Calvin S. Powers ,  Wayne Tackabury

IPC: H04L12/24

CPC classification number: G06F21/60 ,  H04L41/046 ,  H04L41/0823 ,  H04L63/0209 ,  H04L63/20

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

公开(公告)号：US20150302205A1

公开(公告)日：2015-10-22

申请号：US14257422

申请日：2014-04-21

Applicant: International Business Machines Corporation

Inventor： Ivan M. Milman ,  Martin Oberhofer ,  Sushain Pandit ,  Calvin S. Powers ,  Wayne Tackabury

IPC: G06F21/60

CPC classification number: G06F21/60 ,  H04L41/046 ,  H04L41/0823 ,  H04L63/0209 ,  H04L63/20

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Abstract translation: 用于放置信息资产的计算机实现方法，包括：发现关于新信息资产或变更信息资产的信息; 确定信息资产的理想位置的一个或多个特征; 确定信息技术环境中的一个或多个位置的一个或多个特征; 通过将理想位置的特征与实际位置的特征进行比较来确定信息资产与位置的兼容性; 报告与用户的兼容性; 并且可选地建议替代放置位置。 位置可以是一个或多个位置模式的一部分。