Abstract: A method for defining an area to record changes made to a computer system is provided. A safe area is defined on a primary storage device of the computer system and information is stored on the location of the safe area on a secondary storage device. Further, the computer system is booted utilizing a backup device and data is changed on the primary storage device. The changes are recorded in the safe area of the primary storage device and are accessible when the computer system is booted from the backup device.

Abstract: A method is provided in one example embodiment and includes providing a time protocol assistant associated with a time-synchronized domain (TSD). The TSD includes a set of nodes that are synchronized to a same time source. The TSD has defined egress and ingress edge points where bidirectional measurements can be made and the egress and ingress edge points are coupled to the time protocol assistant. The method also includes synchronizing one or more packets flowing through a network that includes the TSD through the same time source. In more specific embodiments, the nodes are synchronized to the same time source via the network and the same time source is a grandmaster clock that synchronizes one or more transparent clocks. In yet other embodiments, the transparent clocks manipulate precision time protocol (PTP) packets sent by the grandmaster clock.

Abstract: Systems, methods, apparatus and software can provide object interaction tools and techniques that allow a user to interact with a software object using familiar user interface elements. Information about the target object is provided so that an instance can be constructed. The object is introspect so available data and methods information can be used to populate a corresponding object interaction description and present an object interaction session.

Abstract: In one embodiment, a method includes receiving packet flow optimization (PFO) configuration data that associates each rule name of multiple PFO rule names with a corresponding method for processing a data packet in a communications network based on data in a payload of a layer 3 protocol of the data packet. A first policy message is received from a policy management process in the communications network. The first policy message includes rule data that indicates a signaled rule name associated with a particular network address in the communications network. In response to receiving the first policy message, a data packet of the particular network address is processed according to a particular method associated with a particular rule name selected based on the signaled rule name. As a result, a PFO policy is controlled from the policy management process.

Abstract: Techniques for operating a network interface include automatically determining whether communications are terminated over a particular attachment circuit on a network interface on an intermediate network node at an edge of a provider network, whereby a sign of death (SOD) on the particular attachment circuit is indicated. The attachment circuit is switched with a particular virtual private network that is a link layer virtual private network (VPN) encapsulated in a higher layer protocol. The provider network is a packet-switched network. The network interface is for a direct communication link to a customer network node outside the provider network. If it is determined that there is an indication of the SOD, then a new network action is initiated in response to the SOD on the particular attachment circuit. These techniques allow for automatic logging of usage, billing, and fault detection, as well as for over-subscription of network resources for multiple VPNs.

Abstract: In one embodiment, a method includes establishing a control channel across a wide area network (WAN) from a first gateway that has a first public internetwork layer (L3) address to a second gateway that has a second public L3 address. Each gateway connects a local area network (LAN) to the WAN. Negotiations over the control channel establish a first set of private L3 addresses for the first LAN and a non-overlapping second set for the second LAN. A different address from the first set is provided for each different node in the first LAN. A discovery packet is received from the first LAN. The discovery packet is encapsulated in a tunnel packet directed to the second public L3 address. The tunnel packet is sent over the WAN to the second gateway which extracts the discovery packet. The second gateway sends the discovery packet over the second LAN.

Abstract: An apparatus for coordinating a relationship in a network environment is provided that includes a central web site operable to interface with one or more end users and to manage information related to one or more of the end users. The central web site includes an on-line component and an off-line component such that one or more of the end users can communicate and gather information about each other at the central web site and the central web site can facilitate a meeting in person between two of the end users.

Abstract: A method and apparatus control a double-ended soft permanent virtual circuit (SPVC) connection coupling from a source end to a destination end via a communications network. The method includes (a) receiving an SPVC connection message from a first network device for the source end, (b) accepting an SPVC connection in accordance with the SPVC connection message if a second network device receiving the SPVC connection has an association with the first network device, and (c) rejecting the SPVC connection if the second network device does not have an association with the first network device. The network device for the destination end includes a database memory adapted to store an access identifier of at least one predetermined source network device from which the network device is allowed to accept an SPVC connection.

Abstract: An authenticated secure network communication link is established between an alert message generating computer 2 and a destination data processing system 6. The alert message sent specifies a risk threat level and a suggested countermeasure amongst other data. The destination computer 6 automatically responds to the alert message as controlled by its local response configuration parameters to trigger security actions of one or more security mechanisms, such as malware scanners, firewall scanners, security policy managers and the like.

Abstract: Techniques for processing each of multiple threads that share a core processor include receiving an intra-thread register address from the core processor. This address contains C bits for accessing each of 2c registers for each thread. A thread ID is received from a thread scheduler external to the core processor. The Thread ID contains T bits for indicating a particular thread for up to 2T threads. A particular register is accessed in a register bank that has 2(C+T) registers using an inter-thread address that includes both the intra-thread register address and the thread ID. The particular register holds contents for the intra-thread register address for a thread having the thread ID. Consequently, register contents of all registers of all threads reside in the register bank. Thread switching is accomplished rapidly by simply accessing different slices in the register bank, without swapping contents between a set of registers and memory.

Abstract: A method is provided in one example embodiment and includes monitoring a plurality of channels provisioned for an endpoint. The method also includes reacting to an alert message by adjusting one of the channels for the endpoint. The adjustment is a selected one of increasing a volume associated with the channel receiving the alert message, or changing a spatial direction from which the alert message and an associated media stream are conveyed to the endpoint. In other embodiments, the adjustment provisions the alert message from a left ear to a right ear of an end user of the endpoint. In still other embodiments, the adjustment includes determining which is a primary channel of the channels and provisioning the alert message to the primary channel of the endpoint. The media stream associated with the alert message is also moved to a same spatial direction along with the alert message.

Abstract: In one embodiment, a method for providing voice quality assurance is provided. The method determines voice information for an end point in a voice communication system. The voice information may be from an ingress microphone. The method determines if the voice quality is considered degraded based on an analysis of the voice information. For example, the voice information may indicate that it is distorted, too loud, too soft, is subject to an external noise, etc. Feedback information is determined if the voice quality is considered degraded where the feedback information designed to improve voice quality at an ingress point for a user speaking. The feedback information is then outputted at the end point to the user using the end point.

Abstract: In a virtual infrastructure, a single appliance is provided that hosts a centralized virtual machine monitor (VMM) control plane to effectively establish a single virtual switch across all virtual machines within one or more clusters of servers, thereby reducing the number of management points for the network administrator and facilitating easier VM migration.

Abstract: A system is presented having a graphical indicator in an interface screen of an electronic program guide. The graphical indicator is configured to focus a user's attention on a selectable program instance field. The indicator has a length that depends on the duration of the selectable program instance, thereby conveying the start and stop times of the selectable instance. At least one indicator attribute is controllable by the user. For example, the user may control the indicator height, weight, width or brightness.

Abstract: In one embodiment, a method can include: (i) classifying a packet in a server load balancer (SLB) for determining if the packet is destined for a virtual Internet protocol (VIP) address hosted on the SLB; (ii) selecting a server from a group of servers representing the VIP address; (iii) changing a destination IP address of the packet from the VIP address to a real IP address of the selected server; and (iv) recirculating the packet for repeating the classifying.

Abstract: A method for providing solidified software in a computing environment includes creating a new reference for a function in a function table; copying an address of the function and associating the address with the new reference; replacing the address associated with an old reference of the function with a dummy address; and substituting each old reference in normal code with the new reference, where injected code is not able to execute in the computing environment. The function table entries can be further randomized by reordering the entries, introducing intermediate mappings, or providing non-operative entries. Alternatively, all or part of the code of the function can be copied and moved to a different storage location and associated with the new reference. The copied code can be further randomized by the insertion of dummy code, utilizing reverse peephole techniques, varying the size of the copied portion, or interleaving non-operative code.

Abstract: Techniques for voice instant messaging (VIM) on a programmable telephone set include receiving configuration data that includes VIM ID data that indicates a particular group of telephone sets. A start signal is received that indicates a start of a new message directed to the particular telephone set over a particular communication channel associated with the VIM ID. In response, VIM audio data received over the communication channel is recorded. It is determined whether the particular telephone set is currently in use. If not, then the VIM audio data is played over a speaker on the particular telephone set. These techniques allow instant, persistent audio messages to multiple recipients without a computer.

Abstract: In one embodiment, a method for supporting backward compatibility in a mobile network can include: receiving a packet in a first device that can support a first protocol; forming a modified packet by adding a field to the packet, where the field is related to a context for a second protocol; and providing the modified packet to a second device, where the second device can support the first and second protocols. The context can include a Packet Data Protocol (PDP) context and the field can include a PDP identifier. The mobility layer can include Mobile IP, for example. The first and second protocols can be Mobile IP and PDP, respectively.

Abstract: An apparatus is provided in one example embodiment and it includes a first node coupled to an active endpoint and a standby endpoint. The first node communicates with a second node. When the active endpoint experiences a failure, the standby endpoint is activated such that a communication involving the second node continues. The standby endpoint communicates a complete window's worth of packets to the second node after the failure, the window's worth of packets including a last known sequence number acknowledged by the second node. In more specific embodiments, the first node is an L2TP network server (LNS) and the second node is an L2TP access concentrator (LAC). The last known sequence number was check pointed by the active endpoint to the standby endpoint.

Abstract: In one embodiment, a security gateway receives an IPSec Initiation (IPSec INIT) request from a client. The security gateway may communicate with a AAA server to authenticate the client. After authentication, the security gateway intercepts a URR Discovery request from the client. The security gateway determines registration information for a response to the registration request. The registration information may be information on where the client can locate a D-GANC. A response is generated using the determined information and sent to the client. The response to the discovery request is performed without communicating with a P-GANC. Accordingly, a security gateway is used to authenticate the client and also to respond to the discovery request. This does not require that a P-GANC function be deployed in a network. Thus, cost and processing power may be saved.