Abstract: This disclosure presents several embodiments of a device configured to perform inband telemetry tracking. The device is configured to store a flow table that tracks metrics of a detected packet flow that passes through the device. More specifically, the flow table tracks several telemetry metrics, each telemetry metric being specific to a tracking time period, and tracking statics based only on packets of the packet flow that were received during that specific time period. At an end of an export time period (which is longer than a tracking time period), the device transmits all stored telemetry metrics from the flow table to a collector.

Abstract: A networking system may include one or more network nodes such as one or more network switches. The network switches include respective matching engines. The matching engines across the network switches may be configured to match on a consistent set of matching criteria based on low and high entropy data fields to sample a same subset of packets for each network flow of interest. The sampled packets may include annotations and may be sent to collector circuitry for analysis. Controller circuitry may enforce consistent sampling policies across the network switches.

Abstract: In general, one aspect, the disclosure relates to a method for sampling packets in a network. The method includes receiving, by a first network device, a packet, making a first determination, by the first network device, that the packet is to be sampled, in response to the first determination: sampling the packet to obtain sampling data, storing sampling metadata associated with the packet, encapsulating, after the sampling, the packet to obtain an encapsulated packet, where the encapsulated packet comprises a bit that is set in an encapsulation header, wherein the bit is set based on the presence of the sampling metadata, and transmitting the encapsulated packet to a second network device.

Abstract: A networking system may include one or more network nodes such as one or more network switches. The network switches include respective matching engines. The matching engines across the network switches may be configured to match on a consistent set of matching criteria based on low and high entropy data fields to sample a same subset of packets for each network flow of interest. The sampled packets may include annotations and may be sent to collector circuitry for analysis. Controller circuitry may enforce consistent sampling policies across the network switches.

Abstract: This disclosure presents several embodiments of a device configured to perform inband telemetry tracking. The device is configured to store a flow table that tracks metrics of a detected packet flow that passes through the device. More specifically, the flow table tracks several telemetry metrics, each telemetry metric being specific to a tracking time period, and tracking statics based only on packets of the packet flow that were received during that specific time period. At an end of an export time period (which is longer than a tracking time period), the device transmits all stored telemetry metrics from the flow table to a collector.

Abstract: A facility to determine if performance issues between two host computers in a data network includes a central controller identifying endpoints of a flow path between the two hosts. The central controller communicates with endpoint network devices to initiate telemetry tagging traffic on the flow path. A collector receives telemetry communicated in a packet from network devices on the flow path. A network operator can view the collected telemetry to assess whether the performance issue is in the network or not.

Abstract: Methods and systems are described for inband telemetry. The system receives a plurality of packets, each packet comprising a portion with INT data. The system identifies a packet flow from a source device to a destination device in the plurality of packets and calculates a telemetry metric based on INT data of a plurality of packets of the packet flow. Then the system forwards the calculated telemetry metric to an INT collector.

Abstract: A facility to determine if performance issues between two host computers in a data network includes a central controller identifying endpoints of a flow path between the two hosts. The central controller communicates with endpoint network devices to initiate telemetry tagging traffic on the flow path. A collector receives telemetry communicated in a packet from network devices on the flow path. A network operator can view the collected telemetry to assess whether the performance issue is in the network or not.

Abstract: This disclosure presents several embodiments of a device configured to perform inband telemetry tracking. The device is configured to store a flow table that tracks metrics of a detected packet flow that passes through the device. More specifically, the flow table tracks several telemetry metrics, each telemetry metric being specific to a tracking time period, and tracking statics based only on packets of the packet flow that were received during that specific time period. At an end of an export time period (which is longer than a tracking time period), the device transmits all stored telemetry metrics from the flow table to a collector.

Abstract: This disclosure presents several embodiments of a device configured to perform inband telemetry tracking. The device is configured to store a flow table that tracks metrics of a detected packet flow that passes through the device. More specifically, the flow table tracks several telemetry metrics, each telemetry metric being specific to a tracking time period, and tracking statics based only on packets of the packet flow that were received during that specific time period. At an end of an export time period (which is longer than a tracking time period), the device transmits all stored telemetry metrics from the flow table to a collector.

Abstract: Methods and systems are described for inband telemetry. The system receives a plurality of packets, each packet comprising a portion with INT data. The system identifies a packet flow from a source device to a destination device in the plurality of packets and calculates a telemetry metric based on INT data of a plurality of packets of the packet flow. Then the system forwards the calculated telemetry metric to an INT collector.

Abstract: An access control application for mobile devices is provided. The access control application may be configured to generate a set of security tasks based at least in part on information corresponding to a user's interactions with the mobile device. An unlock screen of the mobile device may be triggered and security tasks from the generated set of security tasks may be displayed through a user interface of the mobile device. The user's response to the security tasks may be obtained and a confidence score may be calculated, based at least in part on the response. The access control application may then determine, based at least in part on the score and one or more attributes of the environment, whether to unlock the mobile device or prompt the user to provide an additional response to another security task.

Abstract: Systems, methods, and non-transitory computer-readable media can identify a target page and an advertising campaign comprising one or more advertisements associated with the target page. One or more users are identified for inclusion in a base audience based on page information associated with the target page. One or more users are identified for inclusion in an expanded audience based on expanded audience criteria. The advertising campaign is presented to a smart audience comprising the base audience and the expanded audience.

Abstract: An access control application for mobile devices is provided. The access control application may be configured to generate a set of security tasks based at least in part on information corresponding to a user's interactions with the mobile device. An unlock screen of the mobile device may be triggered and security tasks from the generated set of security tasks may be displayed through a user interface of the mobile device. The user's response to the security tasks may be obtained and a confidence score may be calculated, based at least in part on the response. The access control application may then determine, based at least in part on the score and one or more attributes of the environment, whether to unlock the mobile device or prompt the user to provide an additional response to another security task.

Abstract: An access control application for mobile devices is provided. The access control application may be configured to generate a set of security tasks based at least in part on information corresponding to a user's interactions with the mobile device. An unlock screen of the mobile device may be triggered and a security tasks from the generated set of security tasks may be displayed through a user interface of the mobile device. The user's response to the security tasks may be obtained and a confidence score may be calculated, based at least in part on the response. The access control application may then determine, based at least in part on the score and one or more attributes of the environment, whether to unlock the mobile device or prompt the user to provide an additional response to another security task.

Abstract: An access control application for mobile devices is provided. The access control application may be configured to generate a set of security tasks based at least in part on information corresponding to a user's interactions with the mobile device. An unlock screen of the mobile device may be triggered and a security tasks from the generated set of security tasks may be displayed through a user interface of the mobile device. The user's response to the security tasks may be obtained and a confidence score may be calculated, based at least in part on the response. The access control application may then determine, based at least in part on the score and one or more attributes of the environment, whether to unlock the mobile device or prompt the user to provide an additional response to another security task.

Abstract: An access control application for mobile devices is provided. The access control application may be configured to generate a set of security tasks based at least in part on information corresponding to a user's interactions with the mobile device. An unlock screen of the mobile device may be triggered and a security tasks from the generated set of security tasks may be displayed through a user interface of the mobile device. The user's response to the security tasks may be obtained and a confidence score may be calculated, based at least in part on the response. The access control application may then determine, based at least in part on the score and one or more attributes of the environment, whether to unlock the mobile device or prompt the user to provide an additional response to another security task.

Abstract: A system and method for sharing content with a group of devices based on proximity. A sharing device transmits an SSID and an audio signal containing a key. The audio signal may be controlled to limit the area in which the audio signal may be received or heard by a receiving device. For example, the audio signal may be controlled to limit receipt to a device at a same table (a few feet away from the first device), in a same room, etc. This allows the sharer to selectively share content with one or more receiving devices without sharing with all devices in proximity to the first device.

Abstract: In one embodiment, a method includes receiving a multi-destination packet at a switch in communication with a plurality of servers through a network device, identifying a port receiving the multi-destination packet at the switch or a forwarding topology for the multi-destination packet, selecting a bit value based on the identified port or forwarding topology, inserting the bit value into a field in a virtual network tag in the multi-destination packet, and forwarding the multi-destination packet with the virtual network tag to the network device. The network device is configured to forward the multi-destination packet to one or more of the servers based on the bit value in the multi-destination packet. An apparatus for forwarding multi-destination packets is also disclosed.

Abstract: In one embodiment, a method includes receiving a multi-destination packet at a switch in communication with a plurality of servers through a network device, identifying a port receiving the multi-destination packet at the switch or a forwarding topology for the multi-destination packet, selecting a bit value based on the identified port or forwarding topology, inserting the bit value into a field in a virtual network tag in the multi-destination packet, and forwarding the multi-destination packet with the virtual network tag to the network device. The network device is configured to forward the multi-destination packet to one or more of the servers based on the bit value in the multi-destination packet. An apparatus for forwarding multi-destination packets is also disclosed.