Abstract: A method, apparatus, and computer program product for implementing affinity based allocation for storage implementations employing deduplicated data stores is disclosed. According to an embodiment of the present invention, a backup manager determines if information associating a data source with a first data target of a plurality of data targets has been established. The first data target is a deduplication data store and the information associating the data source with the first data target indicates an increased likelihood of at least some information stored on the data source is already being stored on the first data target prior to performing a backup. If information associating the data source with the first data target has been established, the backup manager stores a set of data on the data target.

Abstract: A method and system for efficient space management for single-instance-storage volumes is provided. A backup module storing data within a collection of containers according to access locality and retention time of the data, wherein the retention time defines an amount of time the data is stored within the collection of containers before deletion of the data, and the access locality comprises an order in which the data is to be accessed is further provided. A compaction module compacting the stored data by selecting at least two containers among the collection of containers, wherein the selection is performed using a predetermined criteria that includes access locality and retention time of the data is also provided. The compaction module distributes the data among the at least two containers. The compaction criteria creates an imbalance among the containers to create more empty, full, or nearly full containers.

Abstract: A system and method for the backup and archival of online content. In one embodiment, an archival manager receives user authentication information corresponding to a user account, wherein the user account corresponds to a website hosted by at least one content server, the website enables a user to create and store online content associated with the user account, and the online content associated with the user account is stored on a memory accessible by the at least one content server. The archival manager receives an archival schedule, wherein the archival schedule specifies at least one parameter for archiving the online content. According to the archival schedule, the archival schedule periodically archives the online content to an archive server.

Abstract: A method and apparatus for ingress filtering using security group information are disclosed. The method includes performing access control processing on a packet and sending access control information to an ingress node of the packet in response to the access control processing. The access control information includes security group information and an address of a network node. The security group information identifies a security group. The network node is a member of the security group and is a destination of the packet.

Abstract: Method and apparatus for allocating resources among backup tasks in a data backup system is described. One aspect of the invention relates to managing backup tasks in a computer network. An estimated resource utilization is established for each of the backup tasks based on a set of backup statistics. A resource reservation is allocated for each of the backup tasks based on the estimated resource utilization thereof. The resource reservation of each of the backup tasks is dynamically changed during performance thereof.

Abstract: A method and apparatus for generating user group identifiers using a permissions matrix is disclosed. The permissions matrix includes an entry that is associated with a row and a column of the permissions matrix. The row of the permissions matrix is indexed with a first role and the column of the permissions matrix is indexed with a second role. A data structure implementing such a method can include, for example, a user group identifier matrix. Alternatively, a method is disclosed in which the expiration of a user group identifier is detected. In such a case, the user group identifier is updated by accessing a user group identifier matrix.

Abstract: A system and method for implementing clustered network file system lock management is provided. A failure of a first server node among a collection of nodes is detected. The first server node includes lock status data. The lock status data grants a first client exclusive access to data stored on a server storage device. The server storage device is coupled to the collection of server nodes. The lock status data is transferred to a second server node among the collection of server nodes. The first client is granted exclusive access to data stored on the server storage device, based on the lock status data transferred to the second server node from the first server node, in response to the transferring. Lock requests from the collection of clients are accepted, in response to the transferring.

Abstract: In one embodiment, a method for handling subtasks within a business task includes providing a plurality of user interfaces (UIs) pertaining to the business task having at least one subtask step. The subtask step has a subtask defined within the business task by an intermediate user to reuse a portion of another business task. The method further includes allowing an end user to navigate back and forth through the plurality of UIs.

Abstract: A method for generating collective intelligence in order to automate resource recommendations for improving a computer is disclosed. In one embodiment, the method for generating, using at least one processor, collective intelligence in memory in order to recommend a resource for improving a computer comprises accessing configuration data associated with various resources at a plurality of computers, identifying usage patterns, based on the configuration data, associated with the various resources, wherein the identified usage patterns indicate at least one related resource for at least one resource of the various resources and determining a resource of the at least one related resource to utilize at a computer based on the identified usage patterns.

Abstract: A method and apparatus for network-based sales force automation are provided that meet objectives of increasing sales and marketing efficiency and efficiency of technical and customer support by providing multi-dimensional displays of transactional information to users. Transactional information of deals, contacts, accounts, and leads is provided over the Internet using a Web browser. The information of related transactions is electronically linked, and the transactional information is electronically searchable using custom profiles. The transactional information is accessed and shared among host organization members according to a hierarchy and predefined territories. A Radar Screen Opportunity Display (RSOD) may be selected on which deal objects are displayed that represent the stages in a sales pipeline of corresponding deals.

Abstract: A method and apparatus for network-based sales force automation are provided that meet objectives of increasing sales and marketing efficiency and efficiency of technical and customer support by providing multi-dimensional displays of transactional information to users. Transactional information of deals, contacts, accounts, and leads is provided over the Internet using a Web browser. The information of related transactions is electronically linked, and the transactional information is electronically searchable using custom profiles. The transactional information is accessed and shared among host organization members according to a hierarchy and predefined territories. A Radar Screen Opportunity Display (RSOD) may be selected on which deal objects are displayed that represent the stages in a sales pipeline of corresponding deals.

Abstract: Disclosed is a method and apparatus for checking link layer protocol frames such as Ethernet frames. The method can be implemented on a processor executing software instructions stored in memory. In one embodiment of the invention, the method includes receiving an Ethernet frame, and counting data bytes of the Ethernet frame to generate a total number of counted bytes. The total number of counted bytes can be used to calculate a data length of a datagram of the Ethernet frame. Once calculated, the datagram data length can be compared to a predetermined value. If the datagram length does not fall within an acceptable range of the predetermined value, the Ethernet frame may be dropped so that the Ethernet frame does not reach its final destination.

Abstract: A method for increasing the QoS in a data center. The method can be employed in first and second components of the data center. In one embodiment, the method includes a first component of the data center receiving first and second requests. The first component generates first and second priority values corresponding to the first and second requests, respectively. The first component processes the first and second requests to generate third and fourth requests, respectively, wherein the first request is processed before the second request if the first priority value is numerically greater than the second priority value, or the first request is processed after the second request if the first priority value is numerically less than the second priority value. A second component of the data center receives the third and fourth requests. The second component generates third and fourth priority values corresponding to the third and fourth requests, respectively.

Abstract: A method and apparatus for monitoring message activity comprising processing message activity from a message generator, recording the message activity and coupling the message activity with message information stored within a message distributor and store is described.

Abstract: A system and method for implementing data deduplication-aware copying of data are provided. In response to a request to copy a source file between a source filesystem and a destination filesystem, file mapping information corresponding to the source file is retrieved. The file mapping information is stored in a source filesystem map. The source filesystem accesses a source logical volume. The source logical volume maps to a deduplication storage area. The destination filesystem accesses a destination logical volume. The destination logical volume maps to the deduplication storage area. The source file comprises data stored in the deduplication storage area. A destination file is allocated, based on the file mapping information, in the destination filesystem. The destination file is mapped to the data stored in the data deduplication storage area.

Abstract: A method is described that enables a user to remotely manage and/or monitor servers such as digital cinema screen servers and other equipment such as digital projectors within one or more digital multiplex theaters. In one embodiment, the remote management and/or monitoring of the present invention can be performed via a public, wide area network (e.g., the Internet) with or without VPN. In other embodiments, the remote management and/or monitoring of the present invention can be performed via a private, wide area network (WAN), or via a satellite communication link. In yet another embodiment, the remote management and/or monitoring of the present invention can be performed via a local area network (LAN).

Abstract: Various systems and methods for exchanging communications between devices coupled by an address translation device are disclosed. These techniques can be used to facilitate automatic relationship discovery. One method involves extracting a sequence number from a TCP acknowledgment message being conveyed from a network interface to a TCP stack, and then sending a new TCP message, which includes the sequence number.

Abstract: Various methods and systems for protecting against chosen plaintext attacks when encrypting data for storage on an untrusted storage system are disclosed. One method involves generating an encryption key for use in encrypting data and generating an identifier for the data. Generation of the encryption key is based upon a hash of the data to be encrypted. The method also involves detecting whether an encrypted copy of the data is already stored by a storage system, based upon the identifier. The method also modifies the data to be encrypted or the encryption key, based upon a client-specific value, prior to generating the identifier.

Abstract: Various systems and methods for implementing virtual ports within ring networks are disclosed. For example, one method involves allocating a logical port that corresponds to a first port and a second port and instantiating a spanning tree protocol instance. The first port and the second port are both assigned to a first ring network. The spanning tree protocol instance selectively blocks the logical port; however, the spanning tree protocol instance is unable to block the first port independently of blocking the second port. Events (e.g., link failures and recoveries) that occur within the ring network are communicated to spanning tree by transitioning the state of the logical port in response to receiving a ring protocol control packet. The spanning tree protocol instance initiates a bridge protocol data unit (BPDU) exchange from the logical port in response to a transition in the state of the logical port.

Abstract: A first node in the network may broadcast a recovery request via one or more links to one or more other nodes. The recovery request may specify a first address, where the first address is associated with one or more nodes in the network. Nodes may receive and forward the recovery request until every node with which the first address is associated receives the recovery request and returns a recovery response. The recovery responses may be used to create route information for routing a message to each node with which the first address is associated.