Abstract: A method includes analyzing, via a first capturing agent, packets processed in a first environment associated with a first host to yield first data. The method includes analyzing, via a second capturing agent, packets processed by a second environment associated with a second host to yield second data, collecting the first data and the second data at a collector to yield aggregated data, transmitting the aggregated data to an analysis engine which analyzes the aggregated data to yield an analysis. Based on the analysis, the method includes identifying first packet loss at the first environment and second packet loss at the second environment.

Abstract: An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

Abstract: Insofar the smallest unit of referenceable content on the WWW was a web page. The disclosure and claims of the instant application teach methods, systems, apparatuses etc. to refine the granularity of web content and move away from a page centric approach. With the benefit of this invention, future generations will be able to work with portions of content.

Abstract: Mechanisms for estimating a ratio of indoor-to-outdoor traffic or user equipment distribution. A method is performed by a network node. The method includes obtaining, for a set of user equipment, radio signal measurements. The radio signal measurements have a probability distribution function. The method includes separating the probability distribution function into a set of clusters. Each cluster has its own individual probability distribution function. The method includes estimating the ratio of indoor-to-outdoor traffic or user equipment distribution by predicting, from the individual probability distribution functions of the clusters, which, if any, of the clusters represent indoor user equipment and which, if any, of the clusters represent outdoor user equipment. The method includes performing a network related action in accordance with the ratio of indoor-to-outdoor traffic or user equipment distribution.

Abstract: Wireless communication equipment (12, 16) detects a targeted signature over time in a Doppler spread and/or an angular spread associated with a wireless communication device (12). Based on detecting the targeted signature, the wireless communication equipment (12, 16) detects a transition (14) by the wireless communication device (12) between an indoor environment (8) and an outdoor environment (6). In some embodiments, based on detecting the transition (14), the wireless communication equipment (12, 16) adapts one or more communication parameters, adjusts resources allocated to the wireless communication device (12), and/or initiates handover of the wireless communication device (12).

Abstract: A method includes capturing first data associated with a first packet flow originating from a first host using a first capture agent deployed at the first host to yield first flow data, capturing second data associated with a second packet flow originating from the first host from a second capture agent deployed on a second host to yield second flow data and comparing the first flow data and the second flow data to yield a difference. When the difference is above a threshold value, the method includes determining that the second packet flow was transmitted by a component that bypassed an operating stack of the first host or a packet capture agent at the device to yield a determination, detecting that hidden network traffic exists, and predicting a malware issue with the first host based on the determination.

Abstract: An example method can include choosing a pattern or patterns of network traffic. This pattern can be representative of a certain type of traffic such as an attack. The pattern can be associated with various components of a network and can describe expected behavior of these various components. A system performing this method can then choose a nodes or nodes to generate traffic according to the pattern and send an instruction accordingly. After this synthetic traffic is generated, the system can compare the behavior of the components with the expected behavior. An alert can then be created to notify an administrator or otherwise remedy any problems.

Abstract: A method, system, and apparatus—using conventional web browsers with no custom software installation—for enabling a user to share at least one portion of content is disclosed. The user selected portions of content, or references to them, are stored in a repository and are made available for subsequent viewing to a potentially larger universe of users. Neither group: the users selecting the portions of content, nor the users viewing the previously selected portions of content, need to install any special software to avail all these benefits. The invention discloses automatically creating and embedding a portion of content from an internet document into another document. Using the teachings from this invention publishers can share their content across the internet in a manner so as to get increased exposure, back links, branding, advertising, and virality—and a plethora of other benefits.

Abstract: SaaS for content portion selection a.k.a. content curation using conventional web browsers with no software installation: for enabling a user to select portions of content are disclosed. The user selected portions of content, or references to them, are stored in a repository and are made available for subsequent viewing to a potentially larger universe of users. Neither group of users: the ones selecting the portions of content, nor those viewing the previously selected portions of content, need to install any special software to avail all these benefits.

Abstract: This invention discloses the ability to automatically have portions of content that match the results for a search term(s): be highlighted. This saves users a lot of time when trying to find information of interest to them. It is especially delightful for users to automagically have this ability available without having to install any additional software components to their computing devices.

Abstract: An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

Abstract: A method includes capturing first data associated with a first packet flow originating from a first host using a first capture agent deployed at the first host to yield first flow data, capturing second data associated with a second packet flow originating from the first host from a second capture agent deployed outside of the first host to yield second flow data and comparing the first flow data and the second flow data to yield a difference. When the difference is above a threshold value, the method includes determining that a hidden process exists and corrective action can be taken.

Abstract: A method includes capturing first data associated with a first packet flow originating from a first host using a first capture agent deployed at the first host to yield first flow data, capturing second data associated with a second packet flow originating from the first host from a second capture agent deployed on a second host to yield second flow data and comparing the first flow data and the second flow data to yield a difference. When the difference is above a threshold value, the method includes determining that the second packet flow was transmitted by a component that bypassed an operating stack of the first host or a packet capture agent at the device to yield a determination, detecting that hidden network traffic exists, and predicting a malware issue with the first host based on the determination.

Abstract: An example method includes detecting, using sensors, packets throughout a datacenter. The sensors can then send packet logs to various collectors which can then identify and summarize data flows in the datacenter. The collectors can then send flow logs to an analytics module which can identify the status of the datacenter and detect an attack.

Abstract: Systems, methods, and computer-readable media for hierarchichal sharding of flows from sensors to collectors. A first collector can receive a first portion of a network flow from a first capturing agent and determine that a second portion of the network flow was not received from the first capturing agent. The first collector can then send the first portion of the network flow to a second collector. A third collector can receive the second portion of the network flow from a second capturing agent and determine that the third collector did not receive the first portion of the network flow. The third collector can then send the second portion of the network flow to the second collector. The second collector can then aggregate the first portion and second portion of the network flow to yield the entire portion of the network flow.

Abstract: A method includes capturing first data associated with a first packet flow originating from a first host using a first capture agent deployed at the first host to yield first flow data, capturing second data associated with a second packet flow originating from the first host from a second capture agent deployed on a second host to yield second flow data and comparing the first flow data and the second flow data to yield a difference. When the difference is above a threshold value, the method includes determining that the second packet flow was transmitted by a component that bypassed an operating stack of the first host or a packet capture agent at the device to yield a determination, detecting that hidden network traffic exists, and predicting a malware issue with the first host based on the determination.

Abstract: A method, system, program and apparatus for sharing content portions is disclosed. An ordinary user, using a standard browser is empowered to be able to select portions of content within a currently displayed internet document. The user is presented with the ability to share the content portions selected by him specifically, and share them with his social graph and/or publish them to other locations. All this is accomplished without requiring additional software components be installed by the user.

Abstract: Systems, methods, and computer-readable media for identifying bogon addresses. A system can obtain an indication of address spaces in a network. The indication can be based on route advertisements transmitted by routers associated with the network. The system can receive a report generated by a capturing agent deployed on a host. The report can identify a flow captured by the capturing agent at the host. The system can identify a network address associated with the flow and, based on the indication of address spaces, the system can determine whether the network address is within the address spaces in the network. When the network address is not within the address spaces in the network, the system can determine that the network address is a bogon address. When the network address is within the address spaces in the network, the system can determine that the network address is not a bogon address.

Abstract: A method, system, program and apparatus for sharing content portions is disclosed. An ordinary user, using a standard browser is empowered to be able to select portions of content within a currently displayed internet document. The user is presented with the ability to share the content portions selected by him specifically, and share them with his social graph and/or publish them to other locations. All this is accomplished without requiring additional software components be installed by the user.

Abstract: Systems, methods, and computer-readable media for identifying bogon addresses. A system can obtain an indication of address spaces in a network. The indication can be based on route advertisements transmitted by routers associated with the network. The system can receive a report generated by a capturing agent deployed on a host. The report can identify a flow captured by the capturing agent at the host. The system can identify a network address associated with the flow and, based on the indication of address spaces, the system can determine whether the network address is within the address spaces in the network. When the network address is not within the address spaces in the network, the system can determine that the network address is a bogon address. When the network address is within the address spaces in the network, the system can determine that the network address is not a bogon address.