Abstract: Network tool optimizers and related methods are disclosed that provide automated discovery and configuration of network tool devices. The disclosed embodiments include tool processors having tool discovery engines and tool configuration engines that provide discovery of tool information and generation of rules for filter engines within the network tool optimizer (NTO) so that relevant network traffic received by the NTO is forwarded to network tool devices connected to the NTO. New network traffic sources connected to the NTO can also be automatically configured to forward relevant traffic to the network tool devices based upon the discovered tool information. Further, a database of tool information can be stored within the NTO and can be used by the NTO in determining relevant traffic for connected tool devices. A variety of different implementations can use the automatic tool discovery and configuration embodiments.

Abstract: Systems and methods are disclosed for direct passive monitoring of packet delay variation and time error in network packet communications. Packets traversing between slave and master clocks are monitored to provide direct results of the actual conditions without the need to rely upon inference determinations. Certain embodiments provide tap configurations to monitor packet flows, while certain other embodiments provide in-line configurations to monitor packet flows. Certain further embodiments provide multiple monitoring devices that can be used for passive monitoring purposes, such as passive monitoring to test boundary clock. These multiple monitoring devices can be configured to be within a single or different test instruments. Other variations are also described.

Abstract: Power entry and distribution for network communication systems are disclosed. For certain embodiments depicted, a power distribution board with an open-grid configuration receives power feed/return lines from a power entry connector and distributes the power feed/return lines for a network processing system. The open-grid configuration facilitates airflow through a chassis and thereby provides improved cooling. Further, a modular power entry connector can be used to facilitate connection of power feed/return cables to the chassis for the network processing systems while improving safety for high power implementations.

Abstract: Traffic differentiator systems for network devices and related methods are disclosed that determine difference packets from multiple packet streams. Some embodiments are configured to receive two streams of packets with one stream being a processed version of another stream and then to determine difference packets within a lookup time window that is, for example, associated with a processing time for the second stream to be a processed version of the first stream. Difference packets within a lookup time window can also be determined for packets received within a single combined stream of packets. Difference packets and/or related statistical information is then output for additional processing, as desired. The streams of packets can be associated with ingress and egress packets for a network device, and the difference packets and related statistical information can be used to determine packets that are removed, added, and/or modified by the network device.

Abstract: Systems and methods are disclosed for monitoring network synchronization. The disclosed embodiments utilize time window snapshots to capture network time information and compare the captured time information against time reference information to determine network time errors. These network time errors can then be analyzed with respect to selected operating parameters and tolerances to determine network synchronization errors and to generate alarms. Certain embodiments are configured to capture time information data and to analyze this captured data locally to determine time error data. Certain other embodiments are configured to utilize multiple capture devices and to transmit time error data to a central snapshot synchronization monitor. The central snapshot synchronization monitor can also communicate control information to the capture devices to control the snapshot time windows.

Abstract: Network tool optimizers for server cloud networks and related methods are disclosed. In part, master filters are defined to segregate and control user traffic, and user filters are defined to forward the user traffic to cloud-based network tools or tool instances. A master user interface and user interfaces for each user are provided so that the master filters and user filters can be defined and managed. A filter rules compiler within the cloud-based network tool optimizer then combines the master filters with the user filters, resolves conflicts in favor of the master filters, and generates filter engine rules that are applied to filter engines within the network tool optimizer for the cloud network. The filter engines then forward packets received at input ports for the network tool optimizer to output ports for the network tool optimizer that are coupled to network tools or tool instances within the cloud network.

Abstract: Pre-sorter systems and methods are disclosed for distributing GTP packets. The pre-sorter forwards GTP packets based upon entries within one or more pre-sort tables, and the entries associate F-TEIDs with output ports that can be coupled to GTP sessions controllers and/or other external systems. The F-TEIDs represent a combination of a destination IP address and a tunnel endpoint identifier (TEID) for each GTP packet. For some embodiments, GTP session controllers analyze the GTP packets and determine F-TEIDs that are created, modified, and/or dropped for user sessions, and the GTP session controllers send control messages to the pre-sorter to determine the entries stored within the pre-sort table(s). For other embodiments, other external systems such as network monitoring tools are coupled to the GTP packet pre-sorter rather than GTP session controllers. Pre-sorters having multiple pre-sort modules with local pre-sort tables, as well as two-stage pre-sort architectures, can also be used.

Abstract: Network timing synchronization for virtual machine (VM) host systems and related methods are disclosed that provide synchronization of master/slave clocks within VM host hardware systems. Master timing messages are sent from the master clocks to slave clocks within VM guest platforms hosted by the VM host hardware system within a virtualization layer, and return slave timing messages are communicated from the VM guest platforms to the master clock. Virtual switches within the virtualization layer use virtual transparent clocks to determine intra-switch delay times for the timing packets traversing the virtual switch. These intra-switch delay times are then communicated to target destinations and used to account for variations in packet transit times through the virtual switch. The VM guest platforms synchronize their timing using the timing messages. The master/slave timing messages can be PTP (Precision Time Protocol) timing messages and/or timing messages based upon some other timing protocol.

Abstract: Systems and methods are disclosed for utilizing slave (receive) time-stamp clock rates that are different from master (sender) time-stamp clock rates to randomize and thereby reduce systematic time-stamp granularity errors in the communication of network packets. The slave (receive) time-stamp clock rate for some embodiments is set to be a fixed value that has a relationship with the master (sender) time-stamp clock rate such that the ratio of the slave (receive) clock rate to the master (sender) clock rate is a rational number. Other embodiments use a time-varying frequency for the slave (receive) time-stamp clock rate to randomize the slave (receive) time-stamp clock with respect to the master (sender) time-stamp clock. Additional time-stamps can also be generated using a slave (receive) time-stamp clock having a rate set to equal the rate of the master (sender) time-stamp clock signal.

Abstract: Network tool optimizers for server cloud networks and related methods are disclosed. In part, master filters are defined to segregate and control user traffic, and user filters are defined to forward the user traffic to cloud-based network tools or tool instances. A master user interface and user interfaces for each user are provided so that the master filters and user filters can be defined and managed. A filter rules compiler within the cloud-based network tool optimizer then combines the master filters with the user filters, resolves conflicts in favor of the master filters, and generates filter engine rules that are applied to filter engines within the network tool optimizer for the cloud network. The filter engines then forward packets received at input ports for the network tool optimizer to output ports for the network tool optimizer that are coupled to network tools or tool instances within the cloud network.

Abstract: Systems and methods are disclosed for unified systems of network tool optimizers (NTOs). A NTO supervisor device controls switch fabric circuitry to interconnect a plurality of NTO member devices so that packets received at a source port for one NTO member device can be output to a destination port for a different NTO member device. The NTO supervisor device is further configured to analyze filters for the NTO member devices and to generate filter rules for forwarding packets among the various NTO member devices using the switch fabric circuitry. Further, additional secondary NTO supervisor devices can also be included within the unified NTO system to further expand the system. As such, a plurality of NTO member devices are managed and controlled by one or more NTO supervisor devices to form a highly scalable and efficient unified NTO system.

Abstract: Systems and methods are disclosed for direct passive monitoring of packet delay variation and time error in network packet communications. Packets traversing between slave and master clocks are monitored to provide direct results of the actual conditions without the need to rely upon inference determinations. Certain embodiments provide tap configurations to monitor packet flows, while certain other embodiments provide in-line configurations to monitor packet flows. Certain further embodiments provide multiple monitoring devices that can be used for passive monitoring purposes, such as passive monitoring to test boundary clock. These multiple monitoring devices can be configured to be within a single or different test instruments. Other variations are also described.

Abstract: Traffic differentiator systems for network devices and related methods are disclosed that determine difference packets from multiple packet streams. Some embodiments are configured to receive two streams of packets with one stream being a processed version of another stream and then to determine difference packets within a lookup time window that is, for example, associated with a processing time for the second stream to be a processed version of the first stream. Difference packets within a lookup time window can also be determined for packets received within a single combined stream of packets. Difference packets and/or related statistical information is then output for additional processing, as desired. The streams of packets can be associated with ingress and egress packets for a network device, and the difference packets and related statistical information can be used to determine packets that are removed, added, and/or modified by the network device.

Abstract: Power entry and distribution for network communication systems are disclosed. For certain embodiments depicted, a power distribution board with an open-grid configuration receives power feed/return lines from a power entry connector and distributes the power feed/return lines for a network processing system. The open-grid configuration facilitates airflow through a chassis and thereby provides improved cooling. Further, a modular power entry connector can be used to facilitate connection of power feed/return cables to the chassis for the network processing systems while improving safety for high power implementations.

Abstract: Pre-sorter systems and methods are disclosed for distributing GTP packets. The pre-sorter forwards GTP packets based upon entries within one or more pre-sort tables, and the entries associate F-TEIDs with output ports that can be coupled to GTP sessions controllers and/or other external systems. The F-TEIDs represent a combination of a destination IP address and a tunnel endpoint identifier (TEID) for each GTP packet. For some embodiments, GTP session controllers analyze the GTP packets and determine F-TEIDs that are created, modified, and/or dropped for user sessions, and the GTP session controllers send control messages to the pre-sorter to determine the entries stored within the pre-sort table(s). For other embodiments, other external systems such as network monitoring tools are coupled to the GTP packet pre-sorter rather than GTP session controllers. Pre-sorters having multiple pre-sort modules with local pre-sort tables, as well as two-stage pre-sort architectures, can also be used.

Abstract: Embodiments are disclosed for tap modules having integrated splitters and aggregated multi-fiber tap output connectors. Tap modules are configured to receive optical input/output signals from optical input/output fibers connected to multiple network devices within a network communication system. The tap modules include splitters that are configured to generate multiple tap output signals that are proportional, lower-energy copies of optical signals being communicated between the network devices. These tap output signals are then provided to aggregated multi-fiber tap output connectors for the tap modules. These multi-fiber tap output connectors can then be utilized to connect to other network monitoring devices, such as network monitoring tool systems and/or network tool optimizing systems. The aggregated multi-fiber tap output connectors are configured to operate at a higher aggregated rate as compared to the optical input/output signals.

Abstract: Air filter and cable management assemblies for network communication systems are disclosed. The assemblies include filters that cover one or more communication line cards and their associated connection panels. The assemblies also include cable support structures with cable support brackets that support connected cables while restricting airflow so that airflow is forced through the filter towards the connection panels. This airflow can then pass into housings for the line cards and other circuitry, such as fabric cards, to provide desired cooling. Fan subsystems can also be provided to facilitate airflow. Advantageously, the disclosed air filter and cable management assemblies allow for filtered cooling of stacked network communication systems while greatly simplifying the complexity of the filter and cable installation and maintenance.

Abstract: Systems and methods are disclosed for monitoring network synchronization. The disclosed embodiments utilize time window snapshots to capture network time information and compare the captured time information against time reference information to determine network time errors. These network time errors can then be analyzed with respect to selected operating parameters and tolerances to determine network synchronization errors and to generate alarms. Certain embodiments are configured to capture time information data and to analyze this captured data locally to determine time error data. Certain other embodiments are configured to utilize multiple capture devices and to transmit time error data to a central snapshot synchronization monitor. The central snapshot synchronization monitor can also communicate control information to the capture devices to control the snapshot time windows.

Abstract: Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can include a graphical user interfaces (GUIs) through which a user can create and modify filters and select associated filter criteria for forwarding packets from input ports to output ports. The network devices and tool optimizers can also automatically generate filter rules and apply them to the appropriate filter engines so that packets are forwarded as desired by the user. The GUI can be configured to provide other features as well.

Abstract: Systems and methods are disclosed for mobile user identification and tracking for load balancing in packet processing systems. Packet processing systems, such as network tool optimizer (NTO) systems, are configured to receive packets associated with multiple mobile users, to extract user identification information from the packets, to store identity binding information for the mobile users, to track changes in identification information for mobile users within a communication system by analyzing control information within packets for the communication system, and to forward packets to one or more tool ports associated with the packet processing system. The packet processing systems disclosed thereby allow for user packets to be identified and sent to the same load-balanced network tool, even though the user identification information changes over time within the communication system.