Abstract: Buffer indication signaling during seamless roaming may be provided. A serving access point (AP) establishes one or more links with a client device, wherein the client device is configured to roam from the serving AP to a target AP. The serving AP transmits buffered downlink (DL) data to the client device during a roaming transition from the serving AP to the target AP. The serving AP determines that the buffered DL data for the client device has been transmitted to the client device and transmits to the client device buffer indication signaling indicating that the serving AP has delivered the buffered DL data for the client device.

Abstract: Client preferences signaling for buffered downlink (DL) data delivery during seamless roaming may be provided. A serving access point (AP) receives a roaming request from a client device, the roaming request indicating an intent to roam from the serving AP to a target AP and including one or more preferences for handling buffered DL data at the serving AP. The serving AP sends a roaming response to the client device, the roaming response indicating parameters for delivering buffered DL data based on the one or more preferences. The serving AP then participates in a buffered DL data delivery phase with the client device based on the parameters indicated in the roaming response, including delivering at least a first portion of the buffered DL data to the client device or forwarding at least a second portion of the buffered DL data to the target AP.

Abstract: Client signaling for indicating links for a target Access Point (AP) to use for seamless roaming may be provided. A target AP establishes one or more links with a client device for roaming to the target AP, wherein the links are configured in a power save mode by default. The target AP receives signaling indicating availability of a link of the one or more links for transmissions to the client device. The target AP determines, based on the signaling, when the link is available for transmissions and initiates one or both of downlink transmissions and triggered uplink transmissions to the client device on the link after determining the link is available.

Abstract: The present disclosure describes various optical systems with an optical connector. An optical system includes an integrated circuit and a connector. The integrated circuit includes a grating coupler array. The connector optically couples a plurality of optical fibers to the grating coupler array. The connector engages the integrated circuit at a first attachment point, a second attachment point, and a third attachment point. The first attachment point, second attachment point, and third attachment point are arranged such that a center of optical signals from the plurality of optical fibers remains substantially aligned with a center of the grating coupler array despite thermal expansion that occurs during operation of the integrated circuit.

Abstract: Systems and methods are described for improving data availability and/or resiliency of indexers of a data intake and query system. A data intake and query system can index large amounts of data using one or more indexers. An indexer can store a copy of the data that the indexer is assigned to process in the shared storage system, and a cluster master can track the storage of the data and the indexer assigned to process the data. In the event an indexer fails or is otherwise unable to index data that it has been assigned to index, the cluster master can assign one or more second indexers to process the data. The second indexer can download the data from the shared storage system.

Abstract: In one implementation, a method is disclosed comprising: identifying, by a device, a plurality of functions within a source code based on one or more programmatic annotations of each of the plurality of functions within the source code; monitoring, by the device, execution characteristics associated with each of the plurality of functions within the source code during execution; constructing, by the device, a function call graph from the plurality of functions wherein each particular function in the function call graph is annotated with corresponding execution characteristics; and partitioning, by the device and based on the function call graph and one or more deployment specifications, the plurality of functions within the source code into singularly executable function capsules that meet the one or more deployment specifications.

Abstract: Systems and methods are described for processing ingested data, detecting anomalies in the ingested data, and providing explanations of a possible cause of the detected anomalies as the data is being ingested. For example, a token or field in the ingested data may have an anomalous value. Tokens or fields from another portion of the ingested data can be extracted and analyzed to determine whether there is any correlation between the values of the extracted tokens or fields and the anomalous token or field having an anomalous value. If a correlation is detected, this information can be surfaced to a user.

Abstract: Techniques for identifying ultra-wideband interferers in a wireless communication network are disclosed. These techniques include scanning a plurality of channels relating to a wireless communication network and generating one or more spectrograms based on the scanning. The techniques further include identifying an ultra-wideband interferer for the wireless communication network, using the one or more spectrograms, including: analyzing, using the one or more spectrograms, at least one of: (i) power variations relating one or more channels, (ii) power slopes between one or more pairs of channels, (iii) a power level for one or more channels, (iv) carrier leakage, or (v) a period of pulse transmissions.

Abstract: Physical Layer Protocol Data Units (PPDUs) with an extension and specifically PPDUs with an extension for Ambient Power (AMP) Backscatter Device (BKD) excitation may be provided. A PPDU with an AMP BKD excitation extension can include an AMP BKD excitation extension field indicating the version and duration of the AMP BKD excitation extension. A method for providing the PPDU with the AMP BKD excitation extension includes generating the PPDU with the AMP BKD excitation extension and the AMP BKD excitation extension field and transmitting the PPDU with the AMP BKD excitation extension.

Abstract: In one implementation, a device may obtain performance metrics from vantage points distributed across a computing network. The device may map the performance metrics to a corresponding application based on a network address associated with the performance metrics. The device may establish a performance metric baseline for the corresponding application based on the performance metrics that are mapped to the corresponding application. The device may identify an anomaly in a performance metric mapped to the corresponding application based on a comparison to the performance metric baseline.

Abstract: A method comprises obtaining personal identifiable information (PII) acquired by a production environment of a software application. The method further comprises transforming the PII to produce de-identified data corresponding to the PII, and enabling access to the de-identified data corresponding to the PII by a development environment of the software application while preventing access to the PII by the development environment of the software application.

Abstract: Techniques for making the state of a peering connections or routes between SD-WAN routers of an SD-WAN fabric and external routers dependent on the state of a local instance of a service chain of redundant service chains in the SD-WAN fabric. In examples, an SD-WAN router may determine that a local instance of a service chain is unavailable for inspecting network traffic, and terminate a peering session with an external router such that routes through the SD-WAN router are no longer available to the external router. In other examples where the SD-WAN router determines that the local instance of the service chain is unavailable, the SD-WAN router may use an update message to notify the external router that certain routes are not available through the SD-WAN router for network traffic that needs to be service-chained.

Abstract: Techniques for optimizing technologies related to network path tracing and network delay measurements are described herein. Some of the techniques may include using an IPv6 header option and/or segment identifier field of a segment list or a TLV of a segment routing header as a telemetry data carrier. The techniques may also include using an SRv6 micro-segment (uSID) instruction to indicate to a node of a network that the node is to perform one or more path tracing actions and encapsulating the packet and forward. Additionally, the techniques may include using short interface identifiers corresponding to node interfaces to trace a packet path through a network. Further, the techniques may include using short timestamps to determine delay measurements associated with sending a packet through a network. In various examples, the techniques described above and herein may be used with each other to optimize network path tracing and delay measurement techniques.

Abstract: Techniques for a client device configured with a kernel driver framework (KDF) to establish connection(s) with target workload(s) provisioned in remote network(s) (e.g., an enterprise network) using non-routable synthetic IP address(es) (e.g., a loopback address within a link-local address range, a unique local address within a discard prefix range, and/or the like). The KDF may intercept DNS requests from application(s) executing on a client device, generate and return a synthetic IP address associated with a given domain in the DNS request, and establish a connection with a secure access gateway using the non-routable synthetic IP address. Additionally, the KDF may invoke an external browser with an authentication redirect to a randomly generated synthetic IP address on a randomly generated port, where a local listener on a client device may listen on the synthetic IP address and random port to obtain and/or store authentication data for later use.

Abstract: Embodiments described herein are directed to facilitating efficient management of analytics. In one embodiment, data representing an event associated with a tenant is obtained. Based on the tenant, an analytics pipeline corresponding to the tenant is accessed. The analytics pipeline may include a sequence of analytic indicators referencing a set of cybersecurity analytics, from among cybersecurity analytics in an analytics pool, desired for use in analyzing the data representing the event. The set of cybersecurity analytics, referenced by the analytic indicators in the analytics pipeline, is applied to the data to produce an analytic result. In embodiments, each cybersecurity analytic in the analytics pool is configured to detect a cybersecurity-related anomaly or threat. In accordance with detecting an analytic result, the analytic result, or data associated therewith, is provided to an external user computer system.

Abstract: Hybrid ranging may be provided. A coverage environment may be divided into a plurality of areas and a corresponding plurality accuracy gradients for each of the plurality of areas may be determined. Passive ranging may be implemented for ones of the plurality of areas that have a high accuracy gradient and one of a high client device density and low client device movement. Active ranging may be implemented for ones of the plurality of areas that have a low client device density. Based on at least one of a level of client device density and movement speed of client devices, switching may be performed between passive ranging and active ranging for ones of the plurality of areas that have at least one of high client device density and high client device movement.

Abstract: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.

Abstract: A graphical user interface (GUI) for presentation of network security risk and threat information is disclosed. A listing is generated of incidents identified by use of event data obtained from a networked computing environment. A particular incident is determined to be associated with a risk object, wherein a risk object is a component of the networked computing environment. The listing is populated with a name associated with the risk object. Risk events associated with the incident are determined, wherein each risk event contributes to a risk score for the incident. The risk score indicates a potential security issue associated with the risk object. The listing is populated with the risk score and a summary of the events. An action is associated with the listing, for triggering display of additional information associated with the risk object. The listing can be displayed in a first display screen of the GUI.

Abstract: Methods that control use, trace ownership and authenticity of digital assets and/or brandmarks in a metaverse environment. The methods involve obtaining a first set of control properties associated with a digital asset and a second set of control properties associated with a brandmark. The first set of control properties define first usage rules for rendering the digital asset in the metaverse environment in which a user is immersed into a virtual environment and the second set of control properties define second usage rules for rendering the brandmark in the metaverse environment. The methods further involve determining whether the digital asset is compatible with the brandmark based on the first set of control properties and the second set of control properties and rendering the digital asset with the brandmark in the metaverse environment based on determining that the digital asset is compatible with the brandmark.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for configuration payload separation policies. According to at least one example, a method is provided for device function. The method includes: during a boot sequence of a network device, generating a unique key for encrypting and decrypting data; identifying a secure location in the network device for storing the unique key; storing the unique key in the secure location; encrypting a configuration payload with the unique key; storing the encrypted configuration payload in an external non-volatile memory; and, in response to a request to access data within the configuration payload, decrypting the encrypted configuration payload using the unique key.