Abstract: An optical network packet configured to transmit over an optical communication link from a first optical network having a first control plane to a second optical network having a second control plane is generated. Generating the optical network packet comprises generating the packet configured to be transmitted from the first optical network to the second optical network in the optical domain.

Abstract: In one aspect, a system for providing automated root cause analysis of a monitored business transaction is disclosed. The system includes a processor; a memory; and one or more modules stored in the memory and executable by a processor to perform various operations. For example, a performance issue associated with the business transaction running in a monitored environment can be detected and automated root cause analysis can be provided to present to a user a chain of entities associated with detected performance issue. A score can be provided for each node of entity in the chain to indicate which node of entity is likelihood to be a root cause candidate for the performance issue.

Abstract: In one embodiment, a device in a network receives telemetry data regarding a traffic flow in the network. One or more features in the telemetry data are individually compressed. The device extracts the one or more individually compressed features from the received telemetry data. The device performs a lookup of one or more classifier inputs from an index of classifier inputs using the one or more individually compressed features from the received telemetry data. The device classifies the traffic flow by inputting the one or more classifier inputs to a machine learning-based classifier.

Abstract: Various implementations disclosed herein enable identifying anomalies in a network. For example, in various implementations, a method of identifying anomalies in a network is performed by a network node. In various implementations, the network node includes one or more processors, and a non-transitory memory. In various implementations, the method includes generating a characteristic indicator that characterizes a device type based on communications associated with a first device of the device type. In various implementations, the method includes determining, based on communications associated with the first device, a performance indicator that indicates a performance of the first device. In various implementations, the method includes synthesizing an anomaly indicator as a function of the performance indicator in relation to the characteristic indicator.

Abstract: A network controller controls optical nodes configured to communicate with each other at multiple line rates using different tuples of [bits/symbol, symbol rate] for each line rate. The network controller determines multiple paths between two optical nodes, selects a desired line rate at which to communicate between the two optical nodes, and accesses a path database that indicates an available optical bandwidth and an available optical signal-to-noise ratio (SNR) along each path. The network controller determines feasible paths among the paths. To do this, the network controller, for each path, searches the different tuples of the desired line rate for a tuple for which a desired optical bandwidth and a desired optical SNR are accommodated by the available optical bandwidth and the available optical SNR of the path, respectively. The network controller programs optical nodes of one of the feasible paths with a tuple found in the searching.

Abstract: In one embodiment, a device in a network places a path of a service function chain into a testing state. The device causes a self-assessment instruction to be propagated along the path while the path is in the testing state. The device analyzes self-assessment results from nodes along the path. The device adjusts a state of the path based on the analyzed self-assessment results.

Abstract: Presented herein are techniques for classifying devices as being infected with malware based on learned indicators of compromise. A method includes receiving at a security analysis device, traffic flows from a plurality of entities destined for a plurality of users, aggregating the traffic flows into discrete bags of traffic, wherein the bags of traffic comprise a plurality of flows of traffic for a given user over a predetermined period of time, extracting features from the bags of traffic and aggregating the features into per-flow feature vectors, aggregating the per-flow feature vectors into per-destination domain aggregated vectors, combining the per-destination-domain aggregated vectors into a per-user aggregated vector, and classifying a computing device used by a given user as infected with malware when indicators of compromise detected in the bags of traffic indicate that the per-user aggregated vector for the given user includes suspicious features among the extracted features.

Abstract: In one embodiment, a device in a network receives traffic information regarding one or more secure sessions in the network. The device associates the one or more secure sessions with corresponding certificate validation check traffic indicated by the received traffic information. The device makes a self-signed certificate determination for an endpoint domain of a particular secure session based on whether the particular secure session is associated with certificate validation check traffic. The device causes the self-signed certificate determination for the endpoint domain to be used as input to a malware detector.

Abstract: In one embodiment, a service receives data indicative of roaming failures along mobility paths in a network. The mobility paths represent ordered series of wireless access points via which wireless clients have accessed the network over time. The service uses, based on the data indicative of the roaming failures, a machine learning-based model to associate mobility path failure metrics with portions of the mobility paths. The service identifies, for a first mobility path, an alternate mobility path that has a lower mobility path failure metric than that of the first mobility path. The service triggers a mobility path reroute for a particular client device in the network on the first mobility path to the alternate mobility path.

Abstract: A server receives, from each of a plurality of participant devices in a communication session, a respective one of a plurality of audio streams. The server estimates an audio energy of each of the plurality of audio streams and determines whether to perform a transform on at least one of the plurality of audio streams. If so, the server performs the transform on the at least one of the plurality of audio streams and transmits the at least one of the plurality of audio streams to at least one of the plurality of participant devices.

Abstract: In one implementation, the method comprises, in response to obtaining a request to associate an electronic device with the one or more WLAN termination nodes: generating, between a base station and a networking device, a control link based on a first identifier associated with the base station; generating, between the networking device and a first WLAN termination node, a control link based on a second identifier that corresponds to a pseudonym for the base station; and associating the first and second identifiers in a control table. The method further comprises: instantiating, between the base station and the networking device, a first data tunnel associated with a first tunneling protocol; instantiating, between the networking device and the first WLAN termination node, a second data tunnel associated with a second tunneling protocol; and associating the first and second data tunnels.

Abstract: A mobile device transmits data over a shared spectrum in an uplink channel to a base station in a contention-based access scheme. The mobile device obtains data to be wirelessly transmitted over the shared spectrum in the uplink channel to the base station. The uplink channel is formatted with a frame/subframe structure with a predetermined timing. The mobile device determines whether the shared spectrum is free for transmission according to a listen before transmit procedure. When the shared spectrum is free for transmission, the mobile device contends with other mobile device to gain access to the uplink channel. After gaining access to the uplink channel, the mobile device transmits the data over the shared spectrum in the uplink channel to the base station.

Abstract: In some embodiments, a device in a network receives vehicle characteristic data regarding one or more autonomous vehicles. Each autonomous vehicle of the one or more autonomous vehicles is equipped with a vehicle-based charging coil configured to receive electrical power from a ground-based charging coil of a wireless power transfer (WPT) system. The device, based on the received vehicle characteristic data, identifies one or more ground-based charging coils of the WPT system available to provide power to the one or more autonomous vehicles. The device determines driving parameters for the one or more autonomous vehicles to optimize power transfer from the one or more ground-based charging coils to the one or more autonomous vehicles. The device sends the driving parameters to the one or more autonomous vehicles to control movement of the one or more autonomous vehicles.

Abstract: A virtual physical layer may be provided. When providing the virtual physical layer, a remote radio head may be used. The remote radio head may comprise a first interface device, a second interface device, a digital-to-analog converter, and an analog-to-digital converter. The first interface device may be connected to a virtual physical layer instance instantiated in a cloud-based environment. The second interface device may be connected to customer premises equipment. The digital-to-analog converter may be connected between the first interface device and the second interface device and the analog-to-digital converter may also be connected between the first interface device and the second interface device.

Abstract: One embodiment of the present invention provides a system for assembling a single content stream that enables downloading of a content collection using the single content stream over a network. During operation, the system obtains the content collection that includes a plurality of content components, and generates a manifest for the content collection. A respective entry in the manifest corresponds to a content component. The system assembles the single content stream by including the manifest followed by the plurality of content components. The manifest and the content components are packaged into objects under a same namespace, thereby facilitating a requester requesting one or more content components within the content collection using interests under the same namespace.

Abstract: Semantic checking of multi-device and protocol configurations based on an extensible rules database for a variety of devices and operating systems may be provided. First, a configuration may be received. Then parent-child hierarchical relationships in the configuration may be determined. Next, a set of rules may be applied to the configuration based upon the determined parent-child hierarchical relationships. A report of errors found and corrective suggestions may then be produced in response to applying the set of rules.

Abstract: In one embodiment, packets are forwarded in a network based on multiple compact forwarding identifiers represented in a single 128-bit Internet Protocol Version 6 (IPv6) address, such as, but not limited to being in the destination address field of the IPv6 header (e.g., possibly in an extended IPv6 header). One embodiment follows the forwarding order of these multiple compact forwarding identifiers by respectively placing them in the single IPv6 address from high-order to lower-order bit positions. In one embodiment, a compact forwarding identifier prefix is part of the address represented by each compact forwarding identifier, typically with the compact forwarding identifier prefix stored in the highest-order bit positions. One embodiment uses a longest prefix matching operation to match the compact forwarding identifier to be used in determining how to next process the packet.

Abstract: Techniques are provided for enabling tag networking. In one example, a network device (e.g., switch, router, etc.) is configured to receive a packet of a traffic flow and to analyze the traffic flow to determine the packet belongs to a particular type of traffic. The network device can then add and/or change a tag in a data field of the packet. The tag, among other things, serves as an identifier for the particular type of traffic flow. The tag is identifiable by a downstream node that is preconfigured to recognize the tag and to carry out logic in response to recognizing the tag. Advantageously, the tag functionality of the present approach provides a generalized way of adding information to packets; the information and the associated functionalities are customizable during a runtime of the network.

Abstract: The present disclosure discloses that a device uses precoding to transmit independent data streams to existing users and additional independent data streams to one or more new users simultaneously. During a first transmission of a first one or more data streams that are precoded using a first precoding matrix, the device determines to transmit a second one or more data streams in a second transmission. Before the first transmission is complete, the device calculates a combined precoding matrix for precoding the first one or more data streams and the second one or more data streams. The device transmits the first one or more data streams in the first transmission and the second one or more data streams in the second transmission simultaneously using the combined precoding matrix.

Abstract: An example system for Predictive Services Management (PSM) in cable network environments is provided and includes a data collector located in a cable network that captures multi-tone signals traversing the cable network, a data repository located in a cloud network, and a central server having PSM algorithms configured for: retrieving key performance indicators from the multi-tone signals; identifying a fault signature based on the key performance indicators, the fault signature being identified based on phase domain analysis of a channel response; accessing the data repository for geographical information; determining a location of a fault in the cable network based on the fault signature and the geographical information; accessing the data repository for device information; determining a type of fault based on the location of the fault and the device information; and activating repair and maintenance activities based on the type of fault, location of the fault and the fault signature.