Abstract: A method and system for security monitoring in a computer network has a packet sink with filtering and data analysis capabilities. The packet sink is a default destination for data packets having an address unrecognized by the network routers. At the packet sink, the packets are filtered and statistical summaries about the data traffic are created. The packet sink then forwards the data to a monitor, the information content depending on the level of traffic in the network.

Abstract: The invention is directed to techniques, in a caching device, for providing content, comprising the steps of obtaining content from an origin server, observing an access identifier provided by the origin server in response to a first content request, the access identifier providing an authentication indication for accessing the content obtained from the origin server, receiving a second content request, and one of (i) preventing the origin server from handling the second content request and providing the obtained content when the second content request includes the access identifier, and (ii) forwarding the second content request to the origin server for processing when the second content request does not include the access identifier.

Abstract: Embodiments of the present invention provide mechanisms and techniques for providing access to a peripheral management interface, such as a Web-based graphical user interface (GUI) associated with a peripheral device. In order to access a GUI associated with a peripheral device, a user activates the peripheral device, such as by actuating a mechanical switch on the device or by transmitting a wireless signal, such as an infrared signal. Based on the activation, the peripheral device constructs a URL that allows the requesting user to access the GUI associated with peripheral device and transmits the URL to the user's computer. The user then executes the URL, using a web browser, and accesses the GUI associated with the peripheral device, without knowledge of the IP address for the peripheral device.

Abstract: A controller of the computerized device monitors a configuration state of the computerized device by maintaining a record of the hardware or software configuration of the computerized device and recording, between user sessions, any detectable attachments or detachments of peripheral devices relative to the computerized device. The controller provides a two-level login procedure for the computerized device that ensures the user's high-security credentials are not presented to the controller until after the user has had the opportunity to be warned of detected configuration changes with respect to the computerized device. The controller provides a first login query to a user for a password. Upon reception of a successful first login response, the controller displays a warning screen that indicates, for example, whether the controller has detected any change to the hardware or software configuration of the computer since the user's last session.

Abstract: The invention is directed to techniques for selecting a resource from several resources to process a request from a client. A client sends the request to a data communications device (e.g., network device or switch), which measures usage information from usage meters associated with each resource (e.g., server). The data communications device then makes a usage estimate for each server of the increase in usage required for that server to process the request from the client. Then the data communications device selects one of the servers depending on the usage estimates required to respond to the client's request. The data communications device can consider other factors such as the current level of usage, past usage, and the increased cost of responding to the request. In addition, the data communications device can consider the peak usage level of each resource already established in a current billing period.

Abstract: Idle connections are processed in a computerized device in order to improve the efficiency of at least one server where the computerized device monitors a set of connections coupled to the at least one server for idle connections. The computerized device maintains an idle connection metric for each idle connection in the set of connections. The computerized device detects an idle drop condition to drop idle connections from the set of connections. In response to detecting an idle drop condition, the computerized device performs a connection drop sequence according to a connection drop policy based on the idle connection metric for each idle connection.

Abstract: Conventional archive and retrieval systems inadequately identify the archival data with sufficient granularity to associate data items with retrieval performance, and do not define a recourse following loss of archived data. A method for file archiving, identification, and failure recourse facilitates successive disposition by generating an authenticated receipt of files transferred for storage via an authentication instrument that is verifiable towards both the data stored and a corresponding agreement. The authenticated receipt provides nonrepudiation assurances about the content of the file and the contractual terms under which the file was stored via an authenticating signature of the archive storage server which associates the file content with the contractual terms.

Abstract: A system transmits a plurality of media programs in a network. In one embodiment of the invention, a media program distribution system determines a first resource attribute of a first media program and a second resource attribute of a second media program. The distribution system compares the first resource attribute with the second resource attribute to determine a relative value. In turn, the media server assigns a first distribution resource to the first media program and a second distribution resource to the second media program in response to the relative value and applies one of a plurality of transmission modes to each media program in response to the resource attribute and distribution resource type. Examples of distribution resources include unicast, multicast and broadcast channels. Examples of transmission modes include various protocols such as error checking protocols and encoding mechanisms such as codecs.

Abstract: A distributed network-attached storage network provides content distribution using conventional file transfer protocols such as NFS and CIFS. A filer proxy accepts a client request and translates the client request to a file transfer protocol accepted at the file system having the file requested in the client request. The filer proxy generates a file handle for the file containing redundant filer proxy information to be used for failover to a backup filer proxy in the event of a network error or failure of an original filer proxy. The file handle also contains information for network security purposes such as detection of forged file handles.

Abstract: In a computational device, a technique provides network communications to a virtual machine. In particular, the technique includes receiving a first communications signal having a first address and data from an external device, performing a network address translation operation based on the first communications signal to obtain a second address that identifies the virtual machine and providing a second communications signal having the second address and the data, to the virtual machine. The technique may further include using an external network Internet Protocol address and port identifier and to translate the first communications signal into an internal network Internet Protocol address by accessing an entry of a network address translation table.

Abstract: Mechanisms and techniques provide a method for determining the performance of a server, based upon a connection characteristic of a connection between the server and a client. The connection characteristic, such as the window size of the server, provides information regarding the performance or capacity of the server. Variation between the connection characteristic and a preferred connection characteristic is used by a data communications device, for example, to determine the performance of the server. Based upon the variation in the connection characteristic, the data communications device is then able to direct incoming content requests to other servers in communication with a network, as required.

Abstract: Internet services are differentiated by including user-reflexive data with a user request. The user-reflexive data may specify a quality of service to be accorded the return data and also billing information to improve detail of bills for billed Internet services. The user-reflexive data is included with the user request and data transmission is adjusted accordingly. Alternatively, the user-reflexive data is sent out-of-band.

Abstract: An apparatus and method selectively includes an audio signal component, such as hold music or a hold tone, within an audio output signal, such as a composite audio signal from a multi-party teleconference, based upon a condition of an audio delivery system. In one arrangement, the condition is based upon a presence characteristic, indicating the number of active endpoint devices in the audio delivery system and upon an endpoint signal, indicating non-participation of one of the active endpoint devices. Based upon the condition of the audio delivery system, the audio delivery system either omits the audio signal component from the audio output signal or includes the audio signal component with the audio output signal distributed within the system.

Abstract: Mechanisms and techniques provide a system for obtaining and providing location information related to a target device. The system transmits a location request message onto a network towards a target device. Each node in a network, possible including the target device, can respond with a location signature message containing location information associated with a plurality of different location information services. Each location information service provides location information having a different location granularity in relation to the target device. The system processes the location information for at least one of the location information services in the location signature message to derive a location of the target device in relation to at least one desired location granularity.

Abstract: The present invention relates to techniques for controlling transfers of information in computer networks. One technique involves transmitting from a server computer to a client computer a document containing a channel object corresponding to a communication service, and storing an access ticket that indicates that a user of the client computer permits the information source computer to communicate with the user over a specified channel. Another technique involves transmitting smart digital offers based on information such as coupons and purchasing histories stored at the computer receiving the offer. Another technique involves transmitting from a server computer to a client computer a request for a user's personal profile information, and activating a client avatar that compares the request for personal profile information with a security profile of the user limiting access to personal profile information.

Abstract: The invention is directed to techniques for synchronizing a plurality of servers, receiving a client request from the client to access a server of the plurality of servers, generating a transmit identifier associated with the client request, the transmit identifier identifying an event upon the occurrence of which the plurality of synchronized servers each transmit a response to the client, forwarding the client request and the transmit identifier to each of the plurality of synchronized servers. The invention is also directed to techniques and mechanisms for receiving a client request associated with a client and receiving a transmit identifier identifying an event, generating a response to the client request, and transmitting the response to the client upon an occurrence of the event identified by the transmit identifier.

Abstract: A URL re-writing system and method in a network examines and modifies HTML data and its embedded URLs. The re-writing system can be implemented in a router and can replace URLs found in the HTML data in order to accomplish more efficient routing for example to a close mirror site or for content routing. The re-writing system can also use URL replacement to insert important or emergency information to data received by users on a Web-based network.

Abstract: A method manages network traffic using NAT in a data communications device having a NAT data structure (e.g., a NAT table). The method includes the step of creating, in the NAT data structure, a first entry to coordinate a first data flow from a server to a client (e.g., a video channel or an audio channel of an RTSP session), and concurrently creating a second entry to coordinate a second data flow from the client to the server (e.g., a video control channel or an audio control channel of the RTSP session). The method further includes the steps of conveying a data element (e.g., a UDP packet) of the first data flow from the server to the client based on the first entry, and conveying a data element of the second data flow from the client to the server based on the second entry.

Abstract: A change controller application, process and system tracks modification to a configuration of a computerized device by receiving a change request indicating a requested change to an existing configuration of the computerized device and preparing a change notification message identifying the requested change to the existing configuration of the computerized device. The change controller transmits the change notification message to at least one change notification recipient and determines if a change acknowledgement is provided in response. If a change acknowledgement is provided from a change notification recipient that indicates confirmation of receipt of the change notification message, the system allows the requested change to the configuration of the computerized device to take place.

Abstract: Mechanisms and techniques provide a system that provides stream data to a client by monitoring operation of a stream control protocol such as RTSP associated with stream data transmitted between a client and a first stream server. The system detects a stream change event related to transmission of the stream data between the client and the first stream server and identifies a relative position within the stream data based on the operation of the stream control protocol. The system then establishes transmission of the stream data between the client and a second stream server starting at the relative position in the stream data. The system provides for mid-stream failover for the transmission of stream data such as real-time data with minimal perceptible loss of stream data by the client.