Abstract: Disclosed is an accessory mount configured to attach a flashlight to the handguard of a firearm, in particular a rifle. An example accessory mount comprises: a base configured to be removably coupled to a handguard of a firearm; and an accessory interface configured to provide multiple lateral mounting positions for an accessory, such as a flashlight. The accessory interface comprises two parallel rows of overlapping holes. Each of the two parallel rows of overlapping holes includes at least two overlapping holes aligned linearly with each other, each of the overlapping holes includes a tapered inlet.

Abstract: An offset optic mount can be detachably mounted to an accessory rail of a firearm in a cantilevered fashion with its distal end extending laterally from the firearm. An offset optic mount includes: a base adapted to be mounted to the accessory rail; an optic adapter plate configured so that an optical sight can be attached thereto, the optic adapter plate is offset at an angle relative to the longitudinal axis of the base; and a stem adapted to connect the optic adapter plate to the base, the stem is a reversable piece used to set and change the offset angle of the optic adapter plate relative to the longitudinal axis of the base.

Abstract: Disclosed is a flashlight mount configured to attach a flashlight to the handguard of a firearm, in particular a rifle. An example flashlight mount comprises a base configured to be removably coupled to a handguard of a firearm; and an extension that includes an accessory interface configured to provide multiple lateral mounting positions for a flashlight. The accessory interface comprises two parallel rows of overlapping holes. Each of the two parallel rows of overlapping holes includes at least two overlapping holes aligned linearly with each other, each of the overlapping holes includes a tapered inlet.

Abstract: An offset optic mount can be detachably mounted to an accessory rail of a firearm in a cantilevered fashion with its distal end extending laterally from the firearm. An offset optic mount includes: a base adapted to be mounted to the accessory rail; an optic adapter plate configured so that an optical sight can be attached thereto, the optic adapter plate is offset at an angle relative to the longitudinal axis of the base; and a stem adapted to connect the optic adapter plate to the base, the stem is a reversable piece used to set and change the offset angle of the optic adapter plate relative to the longitudinal axis of the base.

Abstract: Disclosed is a flashlight mount configured to attach a flashlight to the handguard of a firearm, in particular a rifle. An example flashlight mount comprises a base configured to be removably coupled to a handguard of a firearm; and an extension that includes an accessory interface configured to provide multiple lateral mounting positions for a flashlight. The accessory interface comprises two parallel rows of overlapping holes. Each of the two parallel rows of overlapping holes includes at least two overlapping holes aligned linearly with each other, each of the overlapping holes includes a tapered inlet.

Abstract: An offset optic mount can be detachably mounted at its proximal end to an accessory rail of a firearm in a cantilevered fashion with its distal end extending laterally from the firearm. An offset optic mount includes: a base and a clamp member on the proximal end, the base is adapted to be mounted to the accessory rail by the clamp member; an optic adapter plate on the distal end, the optic adapter plate is configured so that an optical sight can be attached thereto, the optic adapter plate is offset at an angle relative to the longitudinal axis of the base; and a stem adapted to connect the optic adapter plate to the base, the stem is a reversable piece used to set and change the offset angle of the optic adapter plate relative to the longitudinal axis of the base.

Abstract: An offset optic mount can be detachably mounted at its proximal end to an accessory rail of a firearm in a cantilevered fashion with its distal end extending laterally from the firearm. An offset optic mount includes: a base and a clamp member on the proximal end, the base is adapted to be mounted to the accessory rail by the clamp member; an optic adapter plate on the distal end, the optic adapter plate is configured so that an optical sight can be attached thereto, the optic adapter plate is offset at an angle relative to the longitudinal axis of the base; and a stem adapted to connect the optic adapter plate to the base, the stem is a reversable piece used to set and change the offset angle of the optic adapter plate relative to the longitudinal axis of the base.

Abstract: A security device for processing network flows is described, including: one or more packet processors configured to receive incoming data packets associated with network flows where a packet processor is assigned as an owner of network flows and each packet processor processes data packets associated with flows for which it is the assigned owner; and a packet processing manager configured to assign ownership of network flows to the packet processors where the packet processing manager includes a global flow table containing global flow table entries mapping network flows to packet processor ownership assignments and a predict flow table containing predict flow entries mapping predicted network flows to packet processor ownership assignments. A predict flow entry includes a predict key and associated packet processor ownership assignment. The predict key includes multiple data fields identifying a predicted network flow where one or more of the data fields have a wildcard value.

Abstract: A network security device includes a network flow statistics processing engine to process network flow information related to network flows. The network flow statistics processing engine includes a first processing stage performing per-flow information aggregation and a second processing stage performing per-destination system component information aggregation, with each processing stage implementing a threshold-based data export scheme and a timer-based data export scheme. In this manner, up-to-date flow information is available to peer system components regardless of the varying flow rates of the network flow.

Abstract: A security device for processing network flows includes one or more packet processors configured to receive incoming data packets associated with one or more network flows where a packet processor is assigned as an owner of one or more network flows and each packet processor processes data packets associated with flows for which it is the assigned owner; and a packet processing manager configured to assign ownership of network flows to the one or more packet processors where the packet processing manager includes a global flow table containing entries mapping network flows to packet processor ownership assignments. The packet processing manager informs a packet processor of an ownership assignment after one or more packets are received, and the one or more packet processors learns of ownership assignments of network flows from the packet processing manager.

Abstract: A network security device includes a network flow statistics processing engine to process network flow information related to network flows. The network flow statistics processing engine includes a first processing stage performing per-flow information aggregation and a second processing stage performing per-destination system component information aggregation, with each processing stage implementing a threshold-based data export scheme and a timer-based data export scheme. In this manner, up-to-date flow information is available to peer system components regardless of the varying flow rates of the network flow.

Abstract: A network security device includes a network flow statistics processing engine to process network flow information related to network flows. The network flow statistics processing engine includes a first processing stage performing per-flow information aggregation and a second processing stage performing per-destination system component information aggregation, with each processing stage implementing a threshold-based data export scheme and a timer-based data export scheme. In this manner, up-to-date flow information is available to peer system components regardless of the varying flow rates of the network flow.

Abstract: A method in a security device for processing network flows includes storing local counter values for one or more events and providing global event counters to maintain event statistics for events in the security device. In one embodiment, the method stores local counter value of an event for each packet processor reporting the event in a counter memory and the method sums the local counter values of an event stored in the counter memory to generate the global counter sum value for the event. In another embodiment, the method compares the global counter sum to a threshold value to put the event in a conforming state or non-conforming state. The method sends a multicast message to the interested packet processors indicating an event has transitioned to a non-conforming state.

Abstract: A security device for processing network flows is described, including: one or more packet processors configured to receive incoming data packets associated with network flows where a packet processor is assigned as an owner of network flows and each packet processor processes data packets associated with flows for which it is the assigned owner; and a packet processing manager configured to assign ownership of network flows to the packet processors where the packet processing manager includes a global flow table containing global flow table entries mapping network flows to packet processor ownership assignments and a predict flow table containing predict flow entries mapping predicted network flows to packet processor ownership assignments. A predict flow entry includes a predict key and associated packet processor ownership assignment. The predict key includes multiple data fields identifying a predicted network flow where one or more of the data fields have a wildcard value.