Abstract: In general, techniques are described for facilitating fine-grained charging control for multi-service subscriber sessions by configuring charging control actions for application to services at the rating group level. For example, a mobile network gateway includes configuration information that defines a plurality of rating groups for a subscriber session, wherein each of the plurality of rating groups is associated with at least one service, and wherein the configuration information defines an actionable event and a corresponding charging control action for a rating group of the plurality of rating groups. A subscriber management module establishes a bearer of the mobile network for the subscriber session and associates the plurality of rating groups with the bearer. A charging client determines the occurrence of the actionable event defined by the configuration information for the rating group and applies the corresponding charging control action for the actionable event to the rating group.

Abstract: A device determines a first received power via a first input feed of a circuit board, and determines a second received power via a second input feed of the circuit board. The device further determines whether the first input feed and the second input feed are receiving power based on the first received power and the second received power. The device opens a switch, of the circuit board, when the first input feed and the second input feed are receiving power.

Abstract: A switching device in a network system for transferring data includes one or more source line cards, one or more destination line cards and a switching fabric coupled to the source line cards and the destination line cards to enable data communication between any source line card and destination line card. Each source line card includes a request generator to generate a request signal to be transmitted in order to obtain an authorization to transmit data. Each destination line card includes a grant generator to generate and send back a grant signal to the source line card in response to the request signal received at the destination line card to authorize the source line card to transmit a data cell to the destination line card.

Abstract: A method and apparatus for in-line processing a data packet while routing the packet through a router in a system transmitting data packets between a source and a destination over a network including the router. The method includes receiving the data packet and pre-processing layer header data for the data packet as the data packet is received and prior to transferring any portion of the data packet to packet memory. The data packet is thereafter stored in the packet memory. A routing through the router is determined including a next hop index describing the next connection in the network. The data packet is retrieved from the packet memory and a new layer header for the data packet is constructed from the next hop index while the data packet is being retrieved from memory. The new layer header is coupled to the data packet prior to transfer from the router.

Abstract: A first network device may determine a first auto-negotiation capability associated with the first network device. The first auto-negotiation capability may indicate whether the first network device is configured to establish a communication link with a second network device using auto-negotiation of transmission capabilities. The first network device may determine a second auto-negotiation capability associated with the second network device. The second auto-negotiation capability may indicate whether the second network device is configured to establish the communication link with the first network device using auto-negotiation of the transmission capabilities. The first network device may determine that an auto-negotiation process failed to establish the communication link between the first network device and the second network device.

Abstract: An endpoint integrity system controls access to resources of a protected network for endpoint devices attempting to access the protected network. The system may include a number of evaluation modules that communicate with an endpoint device. The evaluation modules generate policy results for the endpoint device, in which each of the policy results assume one of three or more states, called a multi-state policy result. The multi-state policy results are combined to produce a combined Boolean policy result.

Abstract: In some embodiments, an apparatus includes a first core device configured to be disposed within a network. The network has a set of access nodes and a second core device. The first core device is configured to receive a signal designating the first core device as a master device for a virtual group identifier such that the second core device is designated as a back-up device for that virtual group identifier.

Abstract: A method, computer readable medium, and system for automatically determining resource dependency includes automatically identifying with an application processing device one or more dependencies between two or more modules in an application. The application processing device determines one or more ordered lists of executing the modules based on the identified one or more dependencies. The application processing device provides the determined one or more ordered lists of executing the modules in the application.

Abstract: An apparatus includes a switch that has a module implemented in at least one of a processor or a memory, and multiple ports including a first port and a second port in a predefined sequence relative to the first port. The module is configured to automatically associate a first compute device with a first virtual local area network (VLAN) when the first compute device is coupled to the first port with a first cable. The module is configured to automatically associate a second compute device to the first VLAN when the second compute device is coupled to the second port with a second cable based on the second port being in a predefined sequence relative to the first port. The predefined sequence can include, for example, the second port being next in physical sequence after the first port.

Abstract: A device may receive a file to be analyzed in a sandbox environment, and may determine configuration information for configuring the sandbox environment. The configuration information may be determined based on at least one of: file information associated with the file to be analyzed, or client device information associated with a client device for which the file is intended. The device may configure the sandbox environment using the configuration information. The configuration information may identify a system configuration for the sandbox environment. The device may analyze the file in the sandbox environment based on configuring the sandbox environment using the configuration information.

Abstract: A device may receive an instruction to automatically install a program using a click area prediction model. The click area prediction model may be associated with predicting a click area of a user interface that, when selected, causes a program installation procedure to proceed. The device may identify an installation user interface associated with installing the program. The device may determine a group of regions included in the installation user interface. The device may identify sets of features associated with the group of regions. The device may determine, based on the sets of features and the click area prediction model, a group of scores associated with the group of regions. The device may identify a particular region as a predicted click area based on the group of scores. The device may select the predicted click area to attempt to cause the program installation procedure to proceed.

Abstract: A network device may receive network traffic from a first device. The network device may identify, based on the network traffic and a service level agreement, stored by the network device, that a service is to be applied to the network traffic. The network device may send the network traffic to a second device, the second device using a service plane to apply the service to the network traffic. The network device may receive the network traffic from the second device, the network traffic having the service applied by the second device; and send the network traffic, having the service applied by the second device, to a third device.

Abstract: A node is configured to receive, from a second node, a request to establish a session; perform, in response to the request, a network address translation (NAT) operation to establish the session, the NAT operation causing a first port block to be allocated to the session, the first port block including a first set of ports via which traffic, associated with the session, is transported; determine that the set of ports are no longer available for the session; determine whether a quantity of times that the first port block has been allocated to the session is greater than a threshold; and retain the first port block, for the session, when the quantity of times that the first port block has been allocated to the session is not greater than the threshold.

Abstract: A device may receive rule information, associated with a firewall policy, that includes a set of N rules. The device may add a rule, of the set of N rules, to a detector tree associated with the firewall policy. The device may identify other rules to which the rule is to be compared. The other rules may be included in the set of N rules, and may include a quantity of rules approximately equal to a result of a logarithm to base 2 of N. The device may compare the rule and the other rules, and may detect a rule anomaly based on comparing the rule to the other rules. The rule anomaly may be associated with a conflict between the rule and a particular rule of the other rules. The device may identify the rule anomaly within the detector tree, and may output information regarding the rule anomaly.

Abstract: In some embodiments, an apparatus comprises a core network node and a control module within an enterprise network architecture. The core network node is configured to be operatively coupled to a set of wired network nodes and a set of wireless network nodes. The core network node is configured to receive a first tunneled packet associated with a first session from a wired network node from the set of wired network nodes. The core network node is configured to also receive a second tunneled packet associated with a second session from a wireless network node from the set of wireless network nodes through intervening wired network nodes from the set of wired network nodes. The control module is operatively coupled to the core network node. The control module is configured to manage the first session and the second session.

Abstract: An apparatus may include a multi-throw switch having a common terminal connected to an antenna of a wireless communication system. The multi-throw switch may be configured to direct signals received from the antenna between (1) an amplification path that connects a receive terminal of the multi-throw switch to a receiver of the wireless communication system and (2) at least one bypass path that connects an additional receive terminal of the multi-throw switch to the receiver. The amplification path may include at least one amplifier that amplifies signals received from the antenna, and the bypass path may have a gain that is less than a gain of the amplification path. Various other systems and methods are also disclosed.

Abstract: In general, techniques are described for enhancing operations of virtual networks. In some examples, a network system includes a server that executes a virtual router configured to receive, from a switch fabric, a tunnel packet for a virtual network of the virtual networks, wherein the tunnel packet comprises an outer header and an inner packet that defines a packet flow. The virtual router is also configured to determine, based at least on the outer header, that the packet is associated with a virtual network of the one or more virtual networks, determine a packet flow defined by the inner packet does not match any flow table entry of a flow table that identifies active flows only for virtual network and, in response, add a flow table entry for a reverse packet flow of the packet flow to the flow table.

Abstract: The disclosed computer-implemented method for facilitating dependency-ordered delivery of data sets to applications within distributed systems may include (1) receiving, at a queue of an application running within a distributed system, a data set from at least one other application running within the distributed system, (2) determining that the data set has a dependency on at least one other data set that has yet to arrive, (3) gating the data set at the queue due at least in part to the dependency, (4) receiving, at the queue, the other data set from the other application, (5) determining that the dependency has been satisfied, and then (6) delivering the data set and the other data set to the application to enable the application to process the data set and the other data set in accordance with the dependency. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: An apparatus comprises a routing module configured to receive a data unit having a code indicator. The routing module is configured to identify a virtual destination address based on the code indicator. The routing module is also configured to replace a destination address of the data unit with the virtual destination address to define a modified data unit. The routing module is further configured to send the modified data unit.

Abstract: In general, techniques are described for delegating responsibility for performing a connectivity protocol from one or more endpoint devices to network infrastructure situated along a network forwarding path connecting the endpoint devices. In some examples, an intermediate network device includes a connectivity protocol module of control unit that operates a connectivity protocol session on behalf of a server, wherein the server exchanges application data with the client using an application-layer communication session with the client. The connectivity protocol module monitors connectivity for the application-layer communication session with the connectivity protocol session by exchanging connectivity protocol messages for the connectivity protocol session with the client to determine a connectivity status for the communication session.