Abstract: A fog controller is operable to communicate with fog nodes associated with a plurality of special purpose network connected devices. The fog controller receives, from each of a plurality of the fog nodes, an indication of one or more processing capabilities of the respective fog node. Based on the processing capabilities, the fog controller creates a fog-based service function chain that includes a set of the plurality of fog nodes. The fog controller instantiates the fog-based service function chain at the set of the plurality of fog nodes.

Abstract: An embodiment of a method includes determining a channel signature for each of a plurality of cable devices associated with a selected household; determining whether at least one of the channel signatures is substantially different than the remaining ones of the channel signatures; and if at least one of the channel signatures is substantially different than the remaining ones of the channel signatures, flagging the selected household for potential theft of services review. Additional embodiments may include determining a radio frequency (“RF”) signal power level for each of the cable devices; calculating a sum of the determined RF signal power levels; determining whether the calculated sum is equal to an RF power signal level measured at a tap of the selected household; and if the calculated sum is not equal to the measured RF power signal level, flagging the selected household for potential theft of services review.

Abstract: In one embodiment, an apparatus captures a memory dump of a device in a sandbox environment executing a malware sample. The apparatus identifies a cryptographic key based on a particular data structure in the captured memory dump. The apparatus uses the identified cryptographic key to decrypt encrypted traffic sent by the device. The apparatus labels at least a portion of the decrypted traffic sent by the device as benign. The apparatus trains a machine learning-based traffic classifier based on the at least a portion of the decrypted traffic sent by the device and labeled as benign.

Abstract: In one embodiment, a network assurance service executing in a local network clusters measurements obtained from the local network regarding a plurality of devices in the local network into measurement clusters. The network assurance service computes aggregated metrics for each of the measurement clusters. The network assurance service sends a machine learning model computation request to a remote service outside of the local network that includes the aggregated metrics for each of the measurement clusters. The remote service uses the aggregated metrics to train a machine learning-based model to analyze the local network. The network assurance service receives the trained machine learning-based model to analyze performance of the local network. The network assurance service uses the receive machine learning-based model to analyze performance of the local network.

Abstract: Methods, devices and program instructions are disclosed for performing bit indexed explicit replication (BIER) including fast reroute capability. One embodiment of a method includes receiving, from an egress node of a BIER network, an advertisement at a forwarding node, where the advertisement identifies a mapping of the egress node to a bit position of a packet bit string to be carried by a packet through the network. The embodiment further includes generating or updating a primary entry for the egress node in a bit indexed routing table (BIRT) for the forwarding node, and determining whether a backup entry for the egress node is to be included in the BIRT. In response to a determination that a backup entry is to be included, the embodiment further includes generating or updating the backup entry in the BIRT.

Abstract: Multipoint seamless Bi-directional Forwarding Detection (BFD) may be provided. First, a discriminator and data identifying a headend device may be received by a node from the headend device. The discriminator may be received over a point-to-multipoint pseudowire between the node and the headend device. Next, the node may start a reflector session in response to receiving the discriminator. The reflector session may correspond to the discriminator and the data identifying the headend device. The reflector session may then receive a control packet from the headend device and determine that the control packet includes the discriminator. The control packet may be received over the point-to-multipoint pseudowire. Next, the reflector session on the node may send a reply packet to the headend device in response to determining that the control packet includes the discriminator. The reply packet may be sent over a unicast pseudowire between the node and the headend device.

Abstract: A content delivery node receives data packets carrying content from an upstream source of content, and writes segments of the received content directly to a memory buffer of a memory using direct memory access (DMA) data transfers. The node derives, for each segment, respective segment-specific metadata based on contents of the segment, and stores the respective segment-specific metadata in the memory. The node receives from multiple downstream client devices respective requests for the same content. Each request includes client-specific information.

Abstract: Bypassing radar in wide Dynamic Frequency Selection (DFS) channels utilizing puncturing may be provided. A first client device may be classified as eligible for puncturing and a second client device may be classified as not eligible for puncturing. Next, it may be determined that a subchannel in a bandwidth range should not be used. Then, in response to determining that the subchannel in the bandwidth range should not be used, the first client device may be steered to a first subset of the bandwidth range and the second client device may be steered to a second subset of the bandwidth range. The second subset of the bandwidth range may be smaller than the first subset of the bandwidth range.

Abstract: A method is described and in one embodiment includes receiving at a network node of an Ethernet Virtual Private Network (“EVPN”) an unsolicited neighbor discovery (“ND”) neighbor advertisement (“NA”) message transmitted on behalf of a host; updating an ND cache of the network node with data included in the ND NA message; syncing the received ND NA message to a multihoming peer of the network node; and advertising by the network node the ND NA message to other nodes in the EVPN.

Abstract: Digital pre-distortion may be provided. First, a radio frequency (RF) domain distortion correcting signal and a base band (BB) domain distortion correcting signal may be initialized. Then the RF domain distortion correcting signal may be generated from an input signal. The generated RF domain distortion correcting signal may correspond to an amplifier. Next, the BB domain distortion correcting signal may be generated from the input signal. The generated BB domain distortion correcting signal may correspond to the amplifier. Then the RF domain distortion correcting signal and the BB domain distortion correcting signal may be combined to form a hybrid distortion correcting signal. The hybrid distortion correcting signal may then be provided to input matching circuitry feeding the amplifier.

Abstract: A computer-implemented method includes: obtaining platform dependent data and platform independent data from each of a plurality of first network devices for a computer network environment. The received platform dependent data and platform independent data are converted to key-value pairs. Sequences of the key-value pairs representing the configurations and states of the respective first network device are created. Vectors for the sequences of the key-value pairs are generated in a vector space. The vectors are supplied to a model to train the model to learn relationships of the platform dependent data and platform independent data of each of the plurality of first network devices. Platform dependent data and platform independent data from one or more second network devices are supplied to the trained software model to determine consistency of configurations and states of the one or more second network devices.

Abstract: An apparatus comprising a bidirectional amplifier or node supporting out-of-band signaling may be provided. The apparatus may comprise a first diplexer, a second diplexer, an upstream reverse amplifier, and a downstream Out-of-Band (OOB) amplifier. The first diplexer may comprise a first diplexer band-stop filter and a first diplexer band-pass filter. The first diplexer band-stop filter may be connected between a first diplexer first port and a first diplexer second port. The first diplexer band-pass filter may be connected between the first diplexer first port and a first diplexer third port. The second diplexer may comprise a second diplexer band-stop filter and a second diplexer band-pass filter. The second diplexer band-stop filter may be connected between a second diplexer first port and a second diplexer second port. The second diplexer band-pass filter may be connected between the second diplexer first port and a second diplexer third port.

Abstract: A method and system for multi-bridge LAN aggregation is disclosed. The method includes aggregating a plurality of LANs coupling a host to a first and a second intermediate network device. The system includes an intermediate network device. The intermediate network device includes a multi-bridge engine. The multi-bridge engine includes a tunnel engine coupled to a bridge interconnect port and a first physical port.

Abstract: A network device may receive a request seeking a location identifier for an endpoint identifier from a first router. The network device may determine that the endpoint identifier belongs to a dynamic endpoint identifier range associated with a plurality of routers. The request may be forwarded to the plurality of routers to discover a host having the endpoint identifier and a notification may be received from one of the plurality of routers reporting discovery of the host having the endpoint identifier. The network device may send an identifier of the one of the plurality of routers which reports discovery of the host to the first router as the location identifier for the endpoint identifier.

Abstract: Techniques for providing a reflexive access control list (ACL) on a virtual switch are provided. Embodiments receive a first packet corresponding to a first network flow and a second packet corresponding to a second network flow. Upon determining that a SYN flag is set within the first packet, a first entry is created in the reflexive ACL for the first network flow. Upon determining that the first packet was received over a client port of the first physical switch, the first packet is forwarded to a second physical switch within virtual switch. Upon determining that the second packet has a SYN flag enabled, a second entry is created in the reflexive ACL. Finally, upon determining that the second packet was received from the second physical switch, the second packet is forwarded over an uplink port to a destination defined by the second packet.

Abstract: In one embodiment, a server instructs one or more networking devices in a local area network (LAN) to form a virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to the server. The server identifies a configuration for the particular node based on a node profile for the particular node. The server accesses a configuration interface of the particular node and instructs the particular node to use the identified configuration via the accessed configuration interface.

Abstract: A system, computer-readable storage device and method relate to a local stream storage device of a local proxy that caches streams of data transmitted to a remote proxy. The method includes caching, in the local stream storage device4 of the local proxy, a stream of data transmitted over a wide area network to the remote proxy, wherein the stream is stored in a continuous manner, to yield a cached stream. The method includes comparing a flow of data received from a device with the cached stream to determine whether a portion of the flow of data has been previously transmitted to the remote proxy and, when the portion of the flow has been previously transmitted to the remote proxy, transmitting a message to the remote proxy to indicate that the portion of the flow of data has been transmitted previously to the remote proxy.

Abstract: An apparatus includes an input node, an output node, and successive butterfly elements connected between the input node and the output node. Each butterfly element includes a first branch and a second branch that are cross-coupled with each other and that perform, collectively, sample add and sample delay operations. Either the first branch or the second branch of each butterfly element performs a sample inversion, such that a pattern of the sample inversions across the butterfly elements encodes into the butterfly elements a pattern of negative and positive binary values of a particular row of a Prometheus Orthonormal Sets (PONS) matrix. As a result, the successive butterfly elements correlate input samples applied to the input node against the particular row of the PONS matrix as the input samples are shifted through the successive butterfly elements.

Abstract: In a transmit method, a set of data eigenvectors that are based on a Prometheus Orthonormal Set (PONS) code construction and orthogonal to each other are stored, wherein the data eigenvectors are mapped to unique multi-bit words. A pilot sequence representing a pilot eigenvector that is based on the PONS code construction and orthogonal to each of the data eigenvectors is generated. Input data are grouped into multi-bit words and data eigenvectors among the data eigenvectors are selected based on the multi-bit words. A spread data sequence including the selected data eigenvectors and that is synchronized to the pilot sequence is generated. An acoustic signal including the synchronized pilot sequence and the spread data sequence is generated. The acoustic signal is transmitted.

Abstract: Embodiments herein describe a fiber array unit (FAU) configured to couple a photonic chip with a plurality of optical fibers. Epoxy can be used to bond the FAU to the photonic chip. However, curing the epoxy between the FAU and the photonic chip is difficult. As such, the FAU can include one or more optical windows etched into a non-transparent layer that overlap with epoxy wells in the photonic chip. Moreover, the FAU may include a transparent substrate on which the non-transparent layer is disposed that permits UV light to pass therethrough. As such, during curing, UV light can be pass through the transparent substrate and through the optical windows in the non-transparent layer to cure the epoxy disposed between the FAU and the photonic chip.