Abstract: A data alignment system suitable for use in manipulating the positioning of a designated portion of a data stream transmitted by a high speed communications system, so as to facilitate further processing of the data carried by the data stream. The data alignment system includes a detector and an alignment component in communication with each other. In operation, the detector locates and identifies, in accordance with suitable instructions, the designated portion of the data stream. The alignment component then repositions, in accordance with suitable instructions, the designated portion of the data stream at a predetermined location within the data stream.

Abstract: A data alignment system suitable for use in manipulating the positioning of a designated portion of a data stream transmitted by a high speed communications system, so as to facilitate further processing of the data carried by the data stream. The data alignment system includes a detector and an alignment component in communication with each other. In operation, the detector locates and identifies, in accordance with suitable instructions, the designated portion of the data stream. The alignment component then repositions, in accordance with suitable instructions, the designated portion of the data stream at a predetermined location within the data stream.

Abstract: A modification subsystem suitable for introducing user-defined errors into a designated data unit substantially in real time, so as to facilitate evaluation of the response of a high speed data communications system to errors as such are exemplified in the modified data unit. The modification subsystem includes a modification logic and state machine that communicates with a command stack memory and one or more jamming mode registers. Upon locating and identifying the designated data unit in a data stream, the modification logic and state machine accesses a jam setting stored in a jam mode register and, if it is determined that the modification that corresponds to the jam setting is valid, modifies the designated data unit in accordance with the jam setting. If the proposed modification is invalid, the modification is aborted.

Abstract: A network tap for enabling attached devices, such as an intrusion detection system, to transmit information into a communication line of the network without disrupting the network traffic on the communication line. When the attached device is an intrusion detection device, the network tap is connected to a firewall. An Ethernet switch or field programmable gate array (FPGA) is incorporated in the network tap to coordinate the transmission of device data to avoid data collisions with data transmissions already existing in the communication line. The network tap may be operated in various modes to accommodate different capabilities of attached devices. In addition, the network tap has various port configurations to allow a user to connect various attached devices through a single cable or dual cables and to connect various combinations of attached devices.

Abstract: A system and method is presented for analyzing information in a communication line for unwanted intrusions and for allowing information to be transmitted back into the communication line without disrupting the communication traffic when an intrusion is detected. The system and method includes a security tap connected to a firewall. The security tap is also connected to an intrusion detection device. The intrusion detection device analyzes the information in the communication line for indicia of attempts to compromise the network. When such indicia is detected, the intrusion detection device sends a “kill” data packet back through the security tap and directed back to the communication line to the firewall to instruct the firewall to prevent further communications into the network by the intrusive source.