公开(公告)号：US12255794B2

公开(公告)日：2025-03-18

申请号：US17695759

申请日：2022-03-15

Applicant: Keysight Technologies, Inc.

Inventor： Jonathan Lee Harrod ,  Shardendu Pandey ,  Jonathan Glenn Stroud ,  Stefan Jan Johansson

IPC: H04L43/062 ,  H04L43/00 ,  H04L43/028

Abstract: A method for selectively processing a packet flow using a flow inspection engine is disclosed. The method includes receiving, by at least one hardware data plane processor component in a network packet broker, a plurality of packets associated with a packet flow, and forwarding, by the at least one hardware data plane processor component to at least one flow inspection engine, a copy of at least a portion of one or more of the initial packets of the packet flow. The method further includes providing, by the at least one hardware data plane processor component to the at least one flow inspection engine, packet flow statistical data resulting from a high throughput processing of the plurality of packets by the at least one hardware data plane processor component and generating, by the at least one flow inspection engine, metadata records using the copy at least a portion of the of the one or more of the initial packets and the packet flow statistical data, wherein the at least one hardware data plane processor component generates the statistical data from the plurality of packets independent of any instruction from the at least one flow inspection engine.

公开(公告)号：US20230300045A1

公开(公告)日：2023-09-21

申请号：US17695759

申请日：2022-03-15

Applicant: Keysight Technologies, Inc.

Inventor： Jonathan Lee Harrod ,  Shardendu Pandey ,  Jonathan Glenn Stroud ,  Stefan Jan Johansson

IPC: H04L43/062 ,  H04L43/028 ,  H04L43/00

CPC classification number: H04L43/062 ,  H04L43/028 ,  H04L43/14

Abstract: A method for selectively processing a packet flow using a flow inspection engine is disclosed. The method includes receiving, by at least one hardware data plane processor component in a network packet broker, a plurality of packets associated with a packet flow, and forwarding, by the at least one hardware data plane processor component to at least one flow inspection engine, a copy of at least a portion of one or more of the initial packets of the packet flow. The method further includes providing, by the at least one hardware data plane processor component to the at least one flow inspection engine, packet flow statistical data resulting from a high throughput processing of the plurality of packets by the at least one hardware data plane processor component and generating, by the at least one flow inspection engine, metadata records using the copy at least a portion of the of the one or more of the initial packets and the packet flow statistical data, wherein the at least one hardware data plane processor component generates the statistical data from the plurality of packets independent of any instruction from the at least one flow inspection engine.

公开(公告)号：US11709746B1

公开(公告)日：2023-07-25

申请号：US17587811

申请日：2022-01-28

Applicant: Keysight Technologies, Inc.

Inventor： Christian Paul Sommers ,  Jonathan Glenn Stroud ,  Matthew R. Bergeron

IPC: G06F11/00 ,  G06F11/263 ,  G06F11/22

CPC classification number: G06F11/263 ,  G06F11/221

Abstract: Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

公开(公告)号：US11190417B2

公开(公告)日：2021-11-30

申请号：US16781542

申请日：2020-02-04

Applicant: Keysight Technologies, Inc.

Inventor： Kristopher Len Raney ,  Jonathan Glenn Stroud ,  Matthew R. Bergeron ,  Peter J. Marsico

IPC: H04L12/26 ,  H04L12/851 ,  H04L9/08

Abstract: A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

公开(公告)号：US20230244582A1

公开(公告)日：2023-08-03

申请号：US17587811

申请日：2022-01-28

Applicant: Keysight Technologies, Inc.

Inventor： Christian Paul Sommers ,  Jonathan Glenn Stroud ,  Matthew R. Bergeron

IPC: G06F11/263 ,  G06F11/22

CPC classification number: G06F11/263 ,  G06F11/221

Abstract: Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

公开(公告)号：US20210243091A1

公开(公告)日：2021-08-05

申请号：US16781542

申请日：2020-02-04

Applicant: Keysight Technologies, Inc.

Inventor： Kristopher Len Raney ,  Jonathan Glenn Stroud ,  Matthew R. Bergeron ,  Peter J. Marsico

IPC: H04L12/26 ,  H04L12/851 ,  H04L9/08

Abstract: A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

公开(公告)号：US10708163B1

公开(公告)日：2020-07-07

申请号：US16035542

申请日：2018-07-13

Applicant: Keysight Technologies, Inc.

Inventor： Jonathan Glenn Stroud

IPC: H04L12/26 ,  H04L29/12 ,  H04L29/06

Abstract: A method for automatic configuration and control of a remote inline network monitoring probe includes receiving packets from a router or firewall associated with a network being monitored by the inline network monitoring probe. A source medium access control (MAC) and a source IP address are extracted from a first packet of the packets received from the router or firewall. The method further includes storing the source IP address and the source MAC address in memory of the inline network monitoring probe. The method further includes changing a MAC address of the inline network monitoring probe to the source MAC address. The method includes assigning the source IP address to the inline network monitoring probe. The method further includes using the source MAC address and the source IP address to communicate with a remote network monitoring control center.