Abstract: A computer network includes a core network connected with first and second Ethernet access domain networks, each of Ethernet access domain networks including a user-facing provider edge (u-PE) device, a primary network-facing provider edge (n-PE) device, a redundant n-PE device, and a plurality of aggregation provider edge (Agg-PE) devices providing connectivity between to the u-PE device and the primary and redundant n-PE devices, the Agg-PE devices running a spanning-tree protocol (STP) algorithm. A primary data path is provided along with first and second redundant data paths that include first and second redundant pseudowires (PWs), respectively, connected across the core network, the first and second redundant data paths being blocked by the STP algorithm when the primary data path is available, the STP algorithm unblocking either the first or second redundant data path in response to a failure of the primary data path.

Abstract: According to the present invention, methods and apparatus are provided for determining components of a round trip time (RTT). A source node sends data to a destination node. The destination node inserts a timestamp into an acknowledgment and sends the acknowledgment back to the source node. The source node determines the RTT from its own measurements and estimates reverse path delay by comparing timestamps to expected timestamps. Considerations for destination node timestamp speed differences are provided.

Abstract: Apparatus and method of detecting a fault in a network service includes an Ethernet access network domain in which a heartbeat message is broadcast at a periodic interval by each of a plurality of edge devices associated with an instance of the network service. Each of the edge devices also receives the heartbeat messages broadcast at the periodic interval from other edge devices. A fault occurrence is identified when the edge device fails to receive an expected heartbeat message at the periodic interval from one of the other edge devices.

Abstract: A method includes a network originating a QoS reservation message and communicating the network-originated QoS message through a radio access network (RAN) from an access gateway (AGW) to an access terminal (AT). The network-originated reservation message does not cause any network resource reservation by itself, but causes the AT to initiate a network resource reservation according to one or more parameters in the network-originated QoS reservation message. Accordingly, an existing network infrastructure supporting AT-originated QoS reservation may support network-originated QoS reservation (or proxied QoS) without any updates to an access-network infrastructure, such as the RAN. The method includes, in response to the network-initiated QoS reservation message, communicating a reservation confirmation through the RAN from the AT to the AGW. The reservation confirmation whether that the QoS reservation was successful.

Abstract: A pipelined linecard architecture for receiving, modifying, switching, buffering, queuing and dequeuing packets for transmission in a communications network. The linecard has two paths: the receive path, which carries packets into the switch device from the network, and the transmit path, which carries packets from the switch to the network. In the receive path, received packets are processed and switched in a multi-stage pipeline utilizing programmable data structures for fast table lookup and linked list traversal. The pipelined switch operates on several packets in parallel while determining each packet's routing destination. Once that determination is made, each packet is modified to contain new routing information as well as additional header data to help speed it through the switch. Using bandwidth management techniques, each packet is then buffered and enqueued for transmission over the switching fabric to the linecard attached to the proper destination port.

Abstract: An electronic system includes a chassis defining a substantially plane-shaped cavity. The chassis is arranged to contain an air stream (e.g., provided by a cooling subsystem) which flows from an air intake side of the chassis to an air exhaust side of the chassis through the substantially plane-shaped cavity. The air intake side of the chassis is opposite the air exhaust side of the chassis. The electronic system further includes a jacket circuit board disposed within the plane-shaped cavity, and a set of pluggable electronic modules. The jacket circuit board is oriented within the plane-shaped cavity to receive cooling from the air stream. Each pluggable electronic module is arranged to (i) electronically connect to the jacket circuit board through a front of the chassis and (ii) define a supplemental ventilation port through which air passes to augment the air stream.

Abstract: A method for a client to receive streaming media over a network includes receiving data having the streaming media encoded therein and storing the received data in a de-jitter buffer thereby increasing a fullness of the de-jitter buffer. The method further includes, when the fullness reaches a fill level, initiating play out of the stored data from the de-jitter buffer, and changing the fill level while playing out the stored data.

Abstract: A network security monitor system groups a plurality of security events into network sessions, correlates the network sessions according to a set of predefined network security event correlation rules and generates a security incident for the network sessions that satisfy one of the network security event correlation rules. The system then presents the information of the network sessions and security incidents to a user of the system in an intuitive form. The user is able to not only learn the details of a possible network attack, but also creates new security event correlation rules intuitively, including drop rules for dropping a particular type of events.

Abstract: The embodiments described herein present methods and apparatuses for on-path CAC operations in a MPLS-VPN environment. In an example embodiment, an ingress PE device receives a quality of service (QoS) resource reservation request; constructs an outgoing message that includes information allowing an egress PE device to identify the virtual private network routing and forwarding table (VRF) associated with a resource reservation resulting from the QoS resource reservation request; and transmits the outgoing message to the egress PE device, where the information allowing VRF identification is echoed back by the egress PE device and used by the ingress PE device to identify the VRF associated with the resource reservation resulting from the QoS resource reservation request. Other embodiments are described.

Abstract: Method for detecting an attack on a broadcast key shared between an access point and its wireless clients. Upon detection of the attack, actions are implemented to react to the attack as defined in one or more security policies. Detection of the attack is achieved by examining both a link message integrity check and an infrastructure management frame protection (IMFP) message integrity check contained in a broadcast management frame.

Abstract: Disclosed are, inter alia, methods, apparatus, computer-storage media, mechanisms, and means associated with determining and distributing routing paths for nodes in a network. For each route computational node of multiple route computational nodes in a network: a tree of paths between itself and each of multiple nodes in the network is determined. A particular tree of paths is determined for a particular node of these multiple nodes to the other nodes based on at least two of the determined trees of paths for the route computational nodes. The particular node then sends a packet towards a destination based on the particular tree of paths determined for the particular node.

Abstract: Gathering location information from a first wireless network to determine whether to anchor a communication session in a second wireless network, a mobile node capable of communicating with both the first wireless network and the second wireless network, includes receiving location information from the first wireless network as the mobile node moves through one or more service areas of the first wireless network. It is determined whether a triggering event occurs. If the triggering event occurs, the location information is stored to determine whether to anchor a session in the second wireless network.

Abstract: Techniques are provided to analyze video frames of a video signal in order to distinguish regions containing a face (and body torso) from regions that contain a relatively static background. The region containing the face is referred to as a foreground region. A current video frame is divided into a plurality of elements and the foreground regions and background regions are detected. The background regions of a subsequent video frame are detected/registered using the foreground regions of the current video frame. The foreground regions of the subsequent video frame are determined using the background regions of the current video frame as a temporal reference.

Abstract: Disclosed are, inter alia, methods, apparatus, computer-storage media, mechanisms, and means associated with Bidirectional Forwarding Detection (BFD) on multilink bundled interfaces. A packet switching device communicates with another packet switching device through a multilink bundled interface configured for communicating over a plurality of bundled communication links. A separate BFD session is conducted over each link of the multiple bundled communication links, and in response to a BFD-detected failure condition, the use of the one or more links or the entire bundled interface is removed from service.

Abstract: A method for joining a virtual talk group includes facilitating communications of a virtual talk group. The virtual talk group includes a plurality of endpoints of different communication networks. The method also includes recording the communications of the plurality of endpoints of the virtual talk group. The method also includes adding a first endpoint to the virtual talk group and presenting the first endpoint with the recorded communications of the plurality of endpoints of the virtual talk group.

Abstract: A method and apparatus for auto-configuring layer 3 intermediate devices in computer networks by extending the Dynamic Host Configuration Protocol (DHCP). The devices generate, transmit and receive DHCP messages having novel options embedded therein. The options permit a layer 3 device to request and receive from a DHCP server a unique, overall IP address that may be assigned to the device. The device may also request and receive one or more IP subnets and corresponding IP addresses for each of its interfaces. The device may further receive the routing protocols to be used on the various subnets. The layer 3 device can thus be auto-configured with IP configuration parameters, including IP subnets, IP addresses and routing protocols without the time-consuming, manual involvement of a network administrator.

Abstract: In one embodiment, an optimizing device is used to suppress transmission of redundant data over networks. The first optimizing device receives information regarding associated optimizing devices associated with a second optimizing device. The information regarding the associated optimizing devices is received from the second optimizing device. Moreover, the first optimizing device receives information regarding indices identifying redundant data. The redundant data comprises data transmitted by the second optimizing device to the associated optimizing devices. The information regarding the indices identifying the redundant data is received from the second optimizing device.

Abstract: A packet fiber node is described for use in an access network such as, for example, a cable network. The packet fiber node may differ from convention RF fiber nodes deployed in a cable network in that the packet fiber node is configured to communicate with the Head End of the network using baseband optical signals rather than frequency modulated optical signals. According to a specific embodiment of the present invention, one or more packet fiber nodes may be deployed in a cable network to service a plurality of different subscriber groups which are serviced by a single, conventional RF fiber node.

Abstract: A method and system for protecting valuable resources within an autonomous system network. Address prefixes within the system are designated as valuable and a flag bit is associated with the address within routing tables of routers of the network. Interfaces to border routers are identified and when packets are received at those interfaces, the packets are flagged with a flag or tag bit. The destination address of the received packet is compared to the flag bit associated with the valuable resource prefix, and if the packet is directed to that resource the packet is dropped and/or logged, but the packet is not forwarded to that resource. In specific cases an interface from an external source may be configured to not create the flag or tag bit, wherein that packet will be delivered to the destination prefix of the packet.

Abstract: A method for decoding tail-biting convolutional codes is disclosed. In the method, all beginning states of a trellis diagram are initialized. Forward Viterbi metrics are calculated for the trellis diagram. A trace-back process is performed from an ending state of the trellis diagram at a first time instance to a first state where all surviving paths converge at a second time instance. Backward Viterbi metrics are calculated for a predetermined period of time from the first state at the second time instance to a second state at a third time instance. A trace-back process is performed from a designated state, which is equal to the second state, at the first time instance to determine a most likely path for the convolutional codes in the trellis diagram.