Abstract: In one embodiment, a router operating in a hierarchically routed computer network may receive collected data from one or more hierarchically lower devices in the network (e.g., hierarchically lower sensors or routers). The collected data may then be converted to aggregated metadata according to a dynamic schema, and the aggregated metadata is stored at the router. The aggregated metadata may also be transmitted to one or more hierarchically higher routers in the network. Queries may then be served by the router based on the aggregated metadata, accordingly.

Abstract: Systems, methods, and computer-readable media for versioning data generated by a network tool to provide compatibility across different versions of the network tool. In some embodiments, a method can include generating network assurance data including network events by a first instance of a network tool at a first specific version state. A version identifier uniquely corresponding to the first specific version state can be appended to the network assurance data. A query for the network assurance data can be received from a second instance of the network tool at a second specific version state. Subsequently, access to the network assurance data can be provided to the second instance of the network tool according to a version constraint for data generated by the network tool using the version identifier uniquely corresponding to the first specific version state and appended to the network assurance data.

Abstract: Detection and configuration of a logical channel may be provided. First, data traffic received on a plurality of ports of a first network device may be analyzed by a computing device. Next, based upon analyzing the data traffic received on the plurality of ports, the computing device may determine that the plurality of ports comprise a logical channel from the perspective of a second network device. The plurality of ports may then be configured as the logical channel on the first network device based upon determining that the plurality of ports comprise the logical channel from the perspective of the second network device.

Abstract: In one embodiment, a request to join an electronic chat room is received from a requester. A selection of an access control level for the requester is received via a user interface in order to grant the requester access to the electronic chat room according to a condition for granting access. The user interface is used to assign a selected access control level to the requester, thereupon granting access to the requester. The requester's access to content available in the electronic chat room being limited based on the selected access control level. Related methods, apparatus, and systems are also described.

Abstract: In one embodiment, an apparatus is disclosed comprising a cable management bracket and a cable guide connector configured to engage a slot of a networking chassis having a length extending along a first axis. The cable guide connector comprises a center section configured to slide within the slot along the first axis and having an aperture configured to receive a retainer to secure the cable guide connector by compression at a selected position along the length of the slot. The cable guide connector further defines a plurality of apertures configured to engage a protrusion of the cable management bracket and defines a plurality of selectable angles at which the cable management bracket can be positioned relative to a second axis that is perpendicular to the first axis through which the slot extends.

Abstract: Access logs associated with user requests for a web-based resource are monitored. Parameter(s) that index records of the web-based resource are identified. A baseline distribution(s) of values of the parameter(s) are generated and, based on the baseline distribution(s), a baseline entropy of the parameter(s) is calculated. A distribution(s) of values of the parameters associated with user requests made by a particular user is generated and, based on the distribution(s), an entropy of the parameter(s) associated with the user requests is calculated. The entropy is compared to the baseline entropy. If a difference between the baseline entropy and the entropy exceeds a threshold, it is determined that the particular user poses a security threat to the web-based resource.

Abstract: According to one embodiment, a technique is presented to dynamically adjust a sample period used at a presenter device for a screen content capture sharing function during a communication session. In another embodiment, a technique is provided to control how frames of screen capture content, e.g., in a desktop sharing function, are sent to attendee devices during an online conference session. According to a still another embodiment, a technique is provided to enable on-demand designation of frames as key-frames during a desktop sharing function of an online conference session.

Abstract: Seamless Bidirectional Forwarding Detection (S-BFD) discriminator-based return path determination is provided. In one embodiment, a method is provided that includes assigning a first discriminator associated with a first discriminator identifier and a second discriminator associated with a second discriminator identifier different from the first discriminator. The method also includes receiving an S-BFD control packet that includes one of the first discriminator identifier or the second discriminator identifier. The method includes determining whether the first discriminator identifier or the second discriminator identifier is included in the S-BFD control packet, and based on the determination, initiating an S-BFD reflector session to transmit a response along a return path determined based on whether the first discriminator identifier or the second discriminator identifier is included in the S-BFD control packet.

Abstract: A virtual physical layer may be provided. When providing the virtual physical layer, a remote radio head may be used. The remote radio head may comprise a first interface device, a second interface device, a digital-to-analog converter, and an analog-to-digital converter. The first interface device may be connected to a virtual physical layer instance instantiated in a cloud-based environment. The second interface device may be connected to customer premises equipment. The digital-to-analog converter may be connected between the first interface device and the second interface device and the analog-to-digital converter may also be connected between the first interface device and the second interface device.

Abstract: A computing device includes a first component, a second component and a monitoring component. The monitoring component, receives, from the first component, a command to issue one or more transactions or data to the second component, and determines whether the first component is authorized to issue the one or more transactions, according to one or more policies or rules, which are received through an out-of-band mechanism to which the first component does not have access. If the monitoring component determines that the first component is authorized to issue the one or more transactions or data to the second component, it forwards the one or more transactions data to the second component. Otherwise, the monitoring component blocks the one or more transactions or data from being issued to the second component.

Abstract: A server compiles a software program with a randomly generated string to produce compiled code. The server also computes a hash of the compiled code to produce a unique identifier for the software program. Upon receiving a request from a user to download the software program, the server generates a transaction for a blockchain that has a transaction identifier and the transaction including a user identifier for the user and the unique identifier. The server embeds the transaction identifier and the unique identifier with the software program, and downloads the software program to a computing device associated with the user.

Abstract: A server is configured to provide a service that manages access to communication sessions supported by at least one communication service and to which user devices connect. The service assigns to users registered with the service respective communication identifiers that the users, and unregistered users of the service, use to access the communication sessions via user devices. The service maps each communication identifier to a list of communication sessions, if any, in which the respective user is currently participating and/or is scheduled to participate. The service receives from a user device a join request from a requester. The join request indicates a particular communication identifier of a particular user registered with the service and a requester identifier. The service connects the user device to a communication session, if any, based on the particular communication identifier and the requester identifier.

Abstract: Methods and network devices are disclosed for traversal, within a network configured for bit indexed forwarding, of a subnetwork having nodes not configured for bit indexed forwarding. In one embodiment, a method includes receiving, from a first network node not configured for bit indexed forwarding, a data message comprising a local label and a message bit array. Bit values in the message bit array identify intended destination nodes for the message. The embodiment further includes modifying the message bit array to exclude as intended destination nodes for the message any nodes not represented by one or more relative bit positions associated with the local label and stored in an ingress filter data structure. In addition, the embodiment includes forwarding a copy of the data message to a second network node, which is configured for bit indexed forwarding, identified in an accessed entry of a bit indexed forwarding table.

Abstract: A plurality of digital data packets may be received via a wireless data interface, wired data interface, or data path. Code may be executed for a data communications protocol in which one or more of the filtered digital data packets causes the code to transition to different states of the protocol. A protocol state machine may be executed comprising a plurality of states and a plurality of transitions between the states to simulate correct execution of a particular data communication protocol. An anomaly may be detected between a first particular state of the protocol during the execution of the code and a second particular state of the protocol state machine, and in response, an anomaly event may be generated comprising digital data indicating that the anomaly has occurred. An anomaly event log based on the anomaly event and the filtered digital data packets may be transmitted to a computing device.

Abstract: An access point (AP) operates in a network of APs, each configured with a distinct IP address with which to communicate with a wide area network (WAN), and each configured to connect wirelessly with wireless client devices seeking access to the WAN via the each AP. The AP derives, based on the distinct IP address, a standalone pool of IP addresses for assignment to wireless client devices, such that the IP addresses do not overlap with IP addresses of any other standalone pool of IP addresses derived by any other of the APs; The AP operates in a standalone mode to: receive from wireless client devices connecting with the AP respective requests for IP addresses for use by the wireless client devices; and responsive to each request, dynamically assign to the wireless client device that sent the request a respective IP address from the standalone pool of IP addresses.

Abstract: A computer-implemented method is provided for a security platform to implement network service policies based on custom attributes assigned to endpoints. An attribute agent on the security platform monitors at least one custom attribute and corresponding attribute value associated with endpoints. The security platform generates a host map associating a network address of each endpoint with one or more of the custom attributes and corresponding attribute values. The security platform determines network access policies based on at least one custom attribute and corresponding attribute value. The security platform generates an access control list based on the network access policies and the host map, and implements the access control list to control network traffic between the endpoints.

Abstract: In one embodiment, a network assurance service that monitors a network detects a behavioral anomaly in the network using an anomaly detector that compares an anomaly detection threshold to a target value calculated based on a first set of one or more measurements from the network. The service uses an explanation model to predict when the anomaly detector will detect anomalies. The explanation model takes as input a second set of one or more measurements from the network that differs from the first set. The service determines that the detected anomaly is explainable, based on the explanation model correctly predicting the detection of the anomaly by the anomaly detector. The service provides an anomaly detection alert for the detected anomaly to a user interface, based on the detected anomaly being explainable. The anomaly detection alert indicates at least one measurement from the second set as an explanation for the anomaly.

Abstract: A host bus adapter of a target device is associated with a Fibre Channel driver and is connected to a Fibre Channel switch fabric. The host bus adapter receives from the switch fabric an inbound frame having a header including a source identifier and a virtual machine (VM) tag, stores a mapping between the source identifier and the VM tag, and passes the inbound frame to the Fibre Channel driver. The host bus adapter receives from the Fibre Channel driver an outbound frame having a header including a destination identifier, and determines, based on the mapping, whether there is a match at least between the source identifier of the inbound frame and the destination identifier of the outbound frame. If there is a match, the host bus adapter tags the header of the outbound frame with the VM tag, and transmits the tagged outbound frame to the switch fabric.

Abstract: In one embodiment, a video encoder generates an encoded bitstream representing a sequence of video frames including a keyframe. The encoder generates information for use by a decoder that receives the encoded bitstream to enable the decoder to generate display frames from a pre-keyframe video frame that is prior to the keyframe in the sequence of video frames. The encoded bitstream is sent to the decoder. In another embodiment, a video decoder receives from an encoder an encoded bitstream representing a sequence of video frames including a keyframe. The keyframe includes information to enable the decoder to generate display frames from a pre-keyframe video frame that was received prior to the keyframe in the sequence of video frames. The decoder generates display frames using the pre-keyframe video frame, information included with the keyframe and information included with an encoder-determined number of decoded frames subsequent to the keyframe.

Abstract: Methods and systems for configuring a local switch and a remote switch configured as peers. The method includes: receiving a configuration for configuring the local switch and the remote switch; checking if resources are available for the configuration on the local switch; when resources are available on the local switch, reserving those resources; checking if resources are available for the configuration of the remote switch; when resources are available on the remote switch, reserving those resources; and applying the configuration to the local switch and the remote switch when resources are available on the local switch and the remote switch.