Abstract: The embodiments herein use a factorization based technique for determining filter coefficients for a subset of the subcarriers in a wireless frequency band. Once the filter coefficients for the subset of the subcarriers are calculated, the network device uses these filter coefficients to identify the filter coefficients in a neighboring subcarrier. To do so, the network device uses pseudo-inverse iteration to convert the already calculated filter coefficients into filter coefficients for a neighboring subcarrier. The network device can repeat this process for the next set of neighboring subcarriers until all the filter coefficients have been calculated.

Abstract: A management server includes a configuration and management module processing server configuration information, including a VPN peer list and VLAN/subnet settings. The management server automatically calculates the VPN configuration information, including the VPN peer subnet route information identifying which of the subnets participating in the VPN are behind which of the routers and keys to establish VPN tunnels between those routers participating in the VPN. Each of the routers participating in the VPN includes a VPN tunnel with the other routers participating in the VPN, a set of data structures storing data identifying contact information for each of the subnets participating in the VPN, a combination of an IP address and port to reach one of routers that that subnet is behind, and a forwarding module to forward traffic between the subnets.

Abstract: A method for securing an enterprise application on a computing device includes: defining at least one monitored action, where the monitored action is an access of sensitive information in the enterprise application, defining a maximum number of instances of the at least one monitored action to be allowed while the computing device is not secured by a device-level lock, detecting at least one instance of the at least one monitored action, determining whether the computing device is secured by the device-level lock, and if according to the determining, the computing device is not secured by the device-level lock: displaying a warning message in response to the instances, incrementing a warning counter in response to the detecting, and if the warning counter exceeds the maximum number of the instances, preventing access to the enterprise application.

Abstract: In one embodiment, segment routing (SR) network processing of packets is performed which includes operations signaling and processing of packets in manners providing processing and/or memory efficiencies. One embodiment includes acquiring a segment routing particular packet by a particular router in a network. Responsive to the particular router data plane ascertained during fast path processing by a fast path processing unit that the segment routing particular packet is to be Operations, Administration, and Maintenance (OAM) processed by a different processing unit in the particular router, communicating a time stamp of a current time and the segment routing particular packet including a segment routing header that includes OAM signaling from said fast path processing to the different processing unit, with fast path processing being hardware-based packet processing by the fast path processing unit. The segment routing particular packet is OAM processing by the different processing unit.

Abstract: A dual-band antenna array may be provided. The dual-band antenna array may comprise a trace split, a first frequency branch, and a second frequency branch. The trace split may feed the first frequency branch and the second frequency branch. The first frequency branch may comprise a first frequency branch geometry that may cause a majority of a current of a signal fed into the trace split to feed the second frequency branch when the signal comprises a second frequency. The second frequency branch may comprise a second frequency branch geometry that may cause the majority of the current of the signal fed into the trace split to feed the first frequency branch when the signal comprises a first frequency.

Abstract: In one embodiment, longest prefix matching (LPM) operations are performed on a value in multiple interspersed prefix length search spaces to determine an overall longest prefix matching result in a packet switching system. A first LPM lookup unit performs a first LPM operation on the particular lookup value in a first search space finding a first longest matching prefix, and a second LPM lookup unit performs a second LPM operation on the particular lookup value in a second search space finding a second longest matching prefix. The longer of the first and second longest matching prefixes determines the overall LPM. In one embodiment, the first search space and the second search space include non-default route prefixes with interspersed prefix lengths matching a same value, such as, but not limited to the particular lookup value (e.g., a destination address of a packet).

Abstract: A method is provided in one example embodiment and includes receiving a request to create a path through a network, wherein the path originates on a first network device and terminates on the second network device; identifying a first controller associated with the first network device, wherein the first controller proxies control plane functions for the first network device; identifying a second controller associated with the second network device, wherein the second controller proxies control plane functions for the second network device; and computing the path using the first controller as a source and the second controller as a destination. The first controller installs the computed path on the first network device and the second controller installs the computed path on the second network device.

Abstract: Techniques are disclosed to reduce latency of processing for access points using a central controller. For example, an example method of wireless communication includes receiving, at an access point, a signal wirelessly. The method further includes filtering the signal using a first passband filter having a first bandwidth to generate a first filtered signal. The method further includes filtering the signal using a second passband filter having a second bandwidth to generate a second filtered signal, wherein the first bandwidth is less than the second bandwidth. The method further includes determining whether the signal includes a packet based on the first filtered signal and generating a control signal indicative of the determination. The method further includes transmitting the control signal and the second filtered signal to a central controller.

Abstract: Bandwidth usage for an existing communication tunnel between a first device and second device is monitored. A determination is made that additional bandwidth is required for communication between the first network device and the second network device. A determination is made that for the addition of the additional bandwidth would exceed available bandwidth for the existing tunnel. Additional bandwidth is established between the first network device and the second network device.

Abstract: A method for translating network addresses includes receiving a first network packet, the first network packet comprising an internal source address. The method also includes generating, by performing a mapping operation, a mapping value. The generating of the mapping value uses, at least in part, at least a portion of the internal source address, and at least a portion of an external source address. The external source address is associated with the internal source address. The method also includes forwarding, using a second network packet, at least a portion of the first network packet. The second network packet comprises the external source address and at least a portion of the mapping value.

Abstract: Presented herein are network traffic/flow monitoring techniques for identifying a primary/core domain that is representative of the service being accessed by a series/set of network flows, and grouping networking traffic flows that result from the user's accessing of the core domain. In one example, a plurality of core domains each corresponding to a primary web service configured to be directly accessed by network flows via one or more networks is identified. For each of the plurality of core domains, one or more models of traffic activity resulting from access to the corresponding primary web service by a network flow is generated. Based on the models of traffic activity, real-time network traffic flows are associated to a selected one of the core domains.

Abstract: In one embodiment, a method implemented on a computing device includes: selecting a wireless access point (AP) to process from among a deployment of wireless access points (APs), defining a neighborhood based on the AP and neighboring APs, where the neighboring APs are within a one-hop radius of the AP, calculating a client distribution optimal received signal strength indicator (RSSI), where the client distribution optimal RSSI (CD optimal) is a minimum receiver start of packet detection threshold (RX-SOP) setting for maintaining existing client device coverage by the AP, calculating a neighbor relations optimal RSSI threshold (NR optimal), where the NR optimal is a function of at least a transmit power control threshold (TPC) for maintaining visibility between the AP and the neighboring APs, calculating an RX-SOP setting for the AP as a function of CD optimal and NR optimal, and applying the RX-SOP setting to the AP.

Abstract: Described in example embodiments herein are techniques for implementing power savings in a wireless local area network (WLAN). In accordance with an example embodiment, a centralized controller can be employed to gather data about network activity and select access points to switch to power save mode. Optionally, the controller may designate certain access points to remain active so as to monitor for clients attempting to access the WLAN. An aspect of an example embodiment is that it allows the controller to configure and manage power consumption based on demands on the overall system. In an example embodiment, techniques for implementing power savings within individual hardware components, such as access points, are disclosed. An aspect of a technique described in an example embodiment is that it provides flexibility to balance power savings and performance.

Abstract: Methods and systems for searching enterprise data are provided. The method is for searching data and includes identifying edges associating data and/or people. The method also includes assigning a resistance value to an edge based on strength(s) of association, the resistance value being inversely related to the strength of the association. The method further includes forming a resistance graph connecting the user with the data and the people based on the values of the edges. Additionally, the method includes providing results for a search query from a user based on the resistance graph with lower resistance values being prioritized for the user.

Abstract: In one embodiment, a method for presenting content on multiple devices is implemented on a computing device and includes: receiving selection of a multimedia content item, the multimedia content item including at least two media segments each of a different type, defining a first media segment of the at least two media segments as a primary media segment, defining at least a second media segment of the at least two media segments as at least one secondary media segment, allocating the at least one secondary media segment for presentation on at least one secondary presentation device, presenting the primary media segment on the computing device, detecting a current progress in the presenting, and based on said current progress, forwarding to the at least one secondary media segment an indication of an instruction for synchronizing presentation of the at least one secondary media segment with said presenting.

Abstract: In one embodiment, longest prefix matching (LPM) operations are performed on a value in multiple interspersed prefix length search spaces to determine an overall longest prefix matching result in a packet switching system. A first LPM lookup unit performs a first LPM operation on the particular lookup value in a first search space finding a first longest matching prefix, and a second LPM lookup unit performs a second LPM operation on the particular lookup value in a second search space finding a second longest matching prefix. The longer of the first and second longest matching prefixes determines the overall LPM. In one embodiment, the first search space and the second search space include non-default route prefixes with interspersed prefix lengths matching a same value, such as, but not limited to the particular lookup value (e.g., a destination address of a packet).

Abstract: In one implementation, data is communicated along a communications route in a network. A mediatrace request is generated for the communications route. Responses to the mediatrace request are received from along the communications route. The hop-by-hop latency is passively measured, from the responses, with one-way delay along the communications route in the network.

Abstract: The disclosed technology relates to a distributed policy store. A system is configured to locate, in an index, an entry for a network entity, determine, based on the entry, a file identifier for a file containing a record for the network entity and an offset indicating a location of the record in the file. The system is further configured to locate the file in a distributed file system using the file identifier, locate the record in the file using the offset, and retrieve the record.

Abstract: An example system and method for facilitating virtual cable modem termination system (VCMTS) migration in cable modem network environments is provided and includes spawning, by an orchestration component executing using a processor, a first instance of a virtual network function (VNF) on a first server in a cable modem network, storing state of the first instance as state information in an external database, spawning a second instance of the VNF on a different second server, synchronizing state of the second instance with the state information stored in the external database, and deleting the first instance. In specific embodiments, the VNF comprises a VCMTS.