Abstract: A method is provided in one example and includes allocating a first queue, allocating at least two default queues, where the at least two default queues depend from the first queue, allocating a plurality of local queues that each depend from one of the at least two defaults queues, receiving data in a data stream, determining a quality of service (QoS) associated with the data, and assigning the data to one of the plurality of local queues based on the determined QoS. In an example, the QoS is a differentiated services code point.

Abstract: In one embodiment, a method including dividing a reference mask into a plurality of reference mask divisions, determining a plurality of motion vectors respectively associated with a plurality of slice divisions, wherein the plurality of reference mask divisions respectively correspond to the plurality of slice divisions, modifying a blurring kernel in accordance with the plurality of motion vectors, yielding a plurality of modified blurring kernels that are respectively associated with the plurality of slice divisions, and performing at least one action to yield an altered reference mask, including for the plurality of reference mask divisions and the plurality of modified blurring kernels: convolving a reference mask division with a weighted function of at least a modified blurring kernel associated with a slice division, of the plurality of slice divisions, to which the reference mask division corresponds.

Abstract: In one embodiment, a method includes receiving a request for a flight path for a drone, the request including information indicative of a source location within a geographical area and a destination location within the geographical area, modeling the geographical area including a plurality of geographical regions as a data network including a plurality of nodes, determining a network data path from a source node of the plurality of nodes corresponding to the source location to a destination node of the plurality of nodes corresponding to the destination location, determining a flight path for the drone based on the network data path, and transmitting data indicative of the flight path for the drone.

Abstract: A method is provided in which a network access system receives an initial request from a device requesting access to the network. In response to successfully authenticating the initial access request, the system causes a code to be transmitted in light emitted by one or more light fixtures within a physical space in which access to the network is to be restricted. The system receives information from the device requesting access to the network and determines whether to permit the device access to the network based on the initial request and on whether the received information is derived from the code transmitted by the one or more light fixtures, thereby indicating that the requesting device is within the physical space.

Abstract: Presented herein are techniques for determining the impact a policy change might have on a network. The techniques include receiving configuration information from a plurality of network devices in a network, receiving traffic flow records from the plurality of network devices, receiving an indication of an intent to apply a new policy on the network devices, and based on the configuration information, traffic flow records and the new policy, determining an impact of the new policy on the network devices and traffic flowing through the network.

Abstract: In one embodiment, a device in a modular networking rack determines an online insertion and removal (OIR) time for a particular device module of a plurality of device modules contained within the modular networking rack. The device determines an OIR time for the plurality of device modules based on the OIR time for the particular device module and provides an indication of the OIR time for the plurality of device modules for display to a user.

Abstract: In one embodiment, processing is performed based on the result of a lookup operation that determines a matching hash bucket entry, with each of the entries of the hash table spanning at least two memories. A first portion of the matching hash bucket entry is retrieved from a first random access memory from a first hash bucket stored at a first location identified based on a first particular hash function applied to a hash key. First current information of the hash key is determined to match the first portion. A second portion of the matching hash bucket entry is retrieved from a second random access memory from a second hash bucket stored at a second location identified based on a second particular hash function applied to the hash key. Second current information of the hash key is determined to match the second portion.

Abstract: A loudspeaker is driven with a loudspeaker signal to generate sound, and sound is converted to one or more microphone signals with one or more microphones. The microphone signals are concurrently transformed into far-field beam signals and near-field beam signals. The far-field beam signals and the near-field beam signals are concurrently processed to produce one or more far-field output signals and one or more near-field output signals, respectively. Echo is detected and canceled in the far-field beam signals and in the near-field beam signals. When the echo is not detected above a threshold, the one or more far-field output signals are outputted. When the echo is detected above the threshold, the one or more near-field output signals are outputted. A signal based on the one or more output signals is transmitted.

Abstract: In one embodiment, enhanced packet flow monitoring is performed by packet switching devices in a network. A packet switching device is configured to monitor a flow of packets passing through the packet switching device, including detecting a gap in consecutive packets of the flow of packets, and attributing the gap as not being dropped one or more packets based on a particular time duration between a last received packet of the flow of packets before said detected gap and a first received packet of the flow of packets after said detected gap. In one embodiment, the gap is attributed to not being dropped packets when the particular time duration is greater than a threshold value; and conversely, attributed to being dropped packets when the particular time duration is less than a same or different threshold value.

Abstract: In one embodiment, a device in a network identifies a plurality of traffic records as anomalous. The device matches each of the plurality of traffic records to one or more anomalies using one or more anomaly graphs. A particular anomaly graph represents hosts in the network as vertices in the graph and communications between hosts as edges in the graph. The device applies one or more ordering rules to the traffic records, to uniquely associate each traffic record to an anomaly in the one or more anomalies. The device sends an anomaly notification for a particular anomaly that is based on the traffic records associated with the particular anomaly.

Abstract: A session, consisting of multiple page views by a user with a web service, is monitored, analyzed, and diagnosed for a user. The session may include one or more requests or page views experienced by a user during the session. The session may be defined as the user experience on a series of network content pages visited through a single instance of a network browser. The session may be determined to end when no activity is detected from the user for a specified period of time. In other implementations, a session may be based on a user indication, a set period of time, or for some other reason. The data is collected by one or more agents throughout the system, reported to a controller, and correlated together at the controller for querying and reporting. The correlated data is reported by the controller to a user through an interface.

Abstract: In one embodiment, a device in a network identifies a new interaction between two or more nodes in the network. The device forms a feature vector using contextual information associated with the new interaction between the two or more nodes. The device causes generation of an anomaly detection model for new node interactions using the feature vector. The device uses the anomaly detection model to determine whether a particular node interaction in the network is anomalous.

Abstract: In one embodiment, a system has host machines forming a cluster. Each host machine runs containers, where each container includes a segment of hardware resources associated with the host machine, a segment of an operating system utilized by the host machine, and at least one application. Host agents operate on the host machines. Each host agent collects operational parameters associated with the containers on each host machine. A management platform is operative to divide the cluster into container pools, where each container pool includes a sub-set of computation resources in the cluster and has associated container pool metrics including a priority level and computation resource limits. Operational parameters are collected from the host agents. The operational parameters are evaluated in accordance with the container pool metrics.

Abstract: In one embodiment, error detection and correction is performed in a content-addressable memory using single-bit position lookup operations. A lookup operation is performed generating a resultant match vector reflective of matching a single-bit position within each of multiple content-addressable memory entries against a corresponding bit value at the single-bit position within a lookup word. The resultant match vector is processed to determine if there are any errors and typically which entries contain a wrong bit value. The correct match vector (e.g., having no errors) is determined from the correct stored matching values (e.g., those used to program the content-addressable memory entries) and the value at the single-bit position within the lookup word. One embodiment compares the correct and resultant match vectors, while one embodiment performs this comparison using an error-correcting code of the correct match vector.

Abstract: In one embodiment, a device in a network receives data indicative of traffic characteristics of traffic associated with a particular application. The device identifies one or more paths in the network via which the traffic associated with the particular application was sent, based on the traffic characteristics. The device determines a probing schedule based on the traffic characteristics. The probing schedule simulates the traffic associated with the particular application. The device sends probes along the one or more identified paths according to the determined probing schedule.

Abstract: Techniques are disclosed to determine the temperature-dependent insertion loss and propagation delay of traces in a printed circuit board design. For example, an example method includes determining a first temperature at a first portion of a trace of a PCB design based on a thermal map of the PCB design. The method further includes determining a second temperature at a second portion of the trace based on the thermal map. The method further includes calculating a temperature-dependent property of the PCB at the first portion based on the first temperature. The method further includes calculating the temperature-dependent property of the PCB at the second portion based on the second temperature. The method further includes calculating at least one of a signal loss and propagation delay on the trace based on the temperature-dependent property of the PCB at the first portion and the second portion.

Abstract: A host bus adapter of a target device is associated with a Fiber Channel driver and is connected to a Fiber Channel switch fabric. The host bus adapter receives from the switch fabric an inbound frame having a header including a source identifier and a virtual machine (VM) tag, stores a mapping between the source identifier and the VM tag, and passes the inbound frame to the Fiber Channel driver. The host bus adapter receives from the Fiber Channel driver an outbound frame having a header including a destination identifier, and determines, based on the mapping, whether there is a match at least between the source identifier of the inbound frame and the destination identifier of the outbound frame. If there is a match, the host bus adapter tags the header of the outbound frame with the VM tag, and transmits the tagged outbound frame to the switch fabric.

Abstract: In one embodiment, a system and method are disclosed for receiving, at a first network routing element, a discovery message sent via a network, where the discovery message comprises identifying information that identifies a physical location of a first network device. The method modifies the identifying information in the discovery message by adding additional information to the identifying information, where the additional information can, for example, identify a physical location of the first network routing element. Subsequent to modifying the identifying information, the method forwards the discovery message to a network element, where the network element can be, for example, either a second network routing element or a server.

Abstract: Methods for distributing multicast network path information to various network nodes in a network environment are disclosed. An exemplary method includes a downstream node transmitting a first message including a network path indicating a specific desired route that is to be used when delivering multicast traffic from a given multicast source to a given host, as well as an identifier assigned to the network path in order to uniquely identify that network path in the network. The method also includes the downstream node transmitting a second message for announcing that the multicast source is to be reached via the network path announced in the first message. The second message identifies the network path to be used by including the identifier of the path announced in the first message, but not the network path itself.

Abstract: In one embodiment, a system includes a central processing unit (CPU) to identify a ransomware process which encrypted a plurality of files yielding a plurality of encrypted files, in response to identifying the ransomware process, dump a memory space and a state of the CPU yielding a memory dump, and search the memory dump for a plurality of candidate encryption keys, and a decryption engine to attempt to decrypt at least one encrypted file of the plurality of encrypted files with different candidate encryption keys of the plurality of candidate encryption keys until the at least one encrypted file is successfully decrypted with one candidate encryption key of the different candidate encryption keys, and decrypt the plurality of encrypted files using the one candidate encryption key. Related apparatus and methods are also described.