Abstract: Principles of the invention relate to techniques for transmission of Layer 2 (L2) multicast traffic over a point to multi-point (P2MP) label switched path (LSP) within a multi-protocol Label Switching (MPLS) network. The principles of the invention include configuring circuit cross-connect (CCC) switches that transparently cross-connect L2 interfaces to a P2MP LSP within an MPLS network. The transparent cross-connections allow L2 multicast traffic to be encapsulated as MPLS packets regardless of the type of payload the L2 multicast traffic is carrying. A CCC switch may be configured within an ingress router of a P2MP LSP to cross connect an L2 interface to the P2MP LSP. CCC switches may also be configured within each egress router of the P2MP LSP to cross-connect each leaf of the P2MP LSP to one or more L2 interfaces.

Abstract: A memory controller includes a circuit to generate a strobe signal for write operations to a DDR SDRAM. The circuit efficiently generates a glitch free strobe signal for a group of data lines. In one implementation, the memory controller includes a write data generation circuits to each transmit a data signal to the memory on a data line, the write data generation circuits being controlled by write enable signals. A write strobe generation circuit generates the strobe signal and the write enable signals, the strobe signal including a preamble window to signal the beginning of the data burst, a data transfer window, and a postamble window to signal the end of the data burst, the write strobe generation circuit generating the write enable signals a half memory cycle early and terminating the write enable signals a half memory cycle late with respect to the data signals generated by the write data generation circuits.

Abstract: A buffer memory may be configured to temporarily store data in a number of queues. A processor may be configured to measure a fullness of the buffer memory. The processor may also be configured to assign sizes to the number of queues based on the fullness of the buffer memory. The processor may also adjust thresholds of drop profiles associated with the number of queues based on the sizes assigned to the number of queues.

Abstract: In general, the invention is directed to techniques for improving the performance of route filtering methods. More specifically, an interval tree data structure is assembled from one or more address prefix outbound route filter (ORF) entries by partitioning, according to the characteristics of the ORF entries, a two-dimensional space defined by the address prefix and prefix length domains into non-overlapping intervals. Each node in the interval tree represents a non-overlapping interval in the address prefix dimension. In addition, each node includes a distinct tree structure having nodes that maintain information about the ORF entries that map onto the represented interval for various non-overlapping intervals in the prefix length domain. By traversing the two tiers of trees, a network device can quickly determine the appropriate action to apply to a route.

Abstract: An ATM switching system 1 is provided with an ATM switch 11, a reserved connection memory 12 for storing reserved connection information, a call history memory 13 for maintaining call histories of requests for connection from subscriber's terminal units 2-1 to 2-n, and a call-signal processing section 15. The call-signal processing section 15 generates a request for connection with respect to a trunk ATM switching network 3 by the use of the call histories in the call history memory 13 in the case where no call was issued from the subscriber's terminal units, and stores response results thereof in the reserved connection memory 16. Thereafter, when there was a call from the subscriber's terminal units 2-1 to 2-n, and contents of the request for connection thereof are the same as the reserved connection information, which has been stored in the reserved connection memory 16, processing for connection is executed by the use of the reserved connection information.

Abstract: A system may identify a group of first links in a document, where the first links correspond to a group of objects within the document and are associated with a same identifier. The system may replace the first links in the document with second links that point to a number of different identifiers, and forward the document with the second links to a client.

Abstract: A method performed by a first network device may include receiving a request for a resource from an end-point device and acknowledging the request for the resource to the end-point device. The method may also include receiving a resource coordination message from a second network device and transmitting a return resource coordination message to the second network device.

Abstract: Computer program products and methods of inspecting a log of security records in a computer network are provided. The method includes retrieving a log record, processing the log record including deriving a key to a table, determining a data value from information in the log record and adding the data value to a list of data values associated with the key if the data value is unique. One or more entries of the table are evaluated based on predetermined criteria to detect attempted security breaches.

Abstract: A base station, in a mobile communication network, includes a receive component to receive, from a higher rank station in the network, a particular data unit that includes multiple data units multiplexed together; a master processor to determine that the first portion of the particular data unit is destined for the base station and that the second portion of the particular data unit is not destined for the base station, and discard the second portion of the particular data unit; and a slave processor to determine that the second portion of the particular data unit is destined for the other base station and that the first portion of the particular data unit is not destined for the other base station, and send the second portion of the particular data unit to the other base station.

Abstract: A transmitting system inserts runt abort packets in an outgoing data stream during idle time inter-frame time fill. The runt abort packets cause the receiving system to synchronize itself to the transmitting system so that even if an error during inter-frame time fill causes the receiving system to go into an erroneous state, the receiving system will be synchronized with the transmitting system before receiving valid data. In one embodiment, the transmitting system transmits data in packets over SONET. The packet data is scrambled at the transmitting end and descrambled at the receiving end. Runt abort packets sent during inter-frame time fill resynchronize the descrambler. If there is an error in the inter-frame time fill bytes, causing the receiving end descrambler to no longer be synchronized with the transmitting end scrambler, the runt abort packets will cause the descrambler to resynchronize state with the transmitting scrambler.

Abstract: Techniques are described for monitoring performance of a network. Particularly, network devices within the network exchange routing communications in accordance with one or more routing protocols, such as the Border Gateway Protocol (BGP), to automatically establish a community for monitoring performance throughout the network. Upon establishing the community, the network devices of the community exchange performance probes to collect comprehensive performance information for the network. This performance information may be aggregated via one or more computing devices. Using the aggregated performance information, numerous network performance characteristics may be computed, including delay, jitter, throughput, availability and packet loss.

Abstract: Methods and devices for processing packets are provided. The processing device may Include an input interface for receiving data units containing header information of respective packets; a first module configurable to perform packet filtering based on the received data units; a second module configurable to perform traffic analysis based on the received data units; a third module configurable to perform load balancing based on the received data units; and a fourth module configurable to perform route lookups based on the received data units.

Abstract: A device may include first logic configured to receive a data unit and to receive a network policy. The device may include second logic configured to identify how the data unit will be handled by the network policy and to generate a result that includes information about how the data unit will be handled by the network policy.

Abstract: Techniques are described for automatically selecting virtual private network (VPN) site-IDs for each customer site within a VPN established over a network. The techniques described herein enable a network router within a VPN to automatically allocate unique site-IDs for each customer site included in the VPN in a dense manner. In some cases, the VPNs may comprise virtual private local area network (LAN) service (VPLS) domains that transmit layer two (L2) traffic between customer sites, i.e., VPLS sites, via the network. For example, a network service provider may configure a network device, such as a router, to belong to one or more VPNs. When a customer site within one of the VPNs connects to the router, the router configures the customer site on the router. The router then automatically selects a site-ID for the customer site configured on the router.

Abstract: In one example, a management server is configured to provide malware protection for one or more client mobile platforms in communication with the management server via a mobile network. In the example, the management server includes a processor configured to detect malware in the mobile network, select a client mobile platform having a malware scanning agent, and, manage the malware scanning agent of the client mobile platform using a device independent secure management protocol based at least in part on the malware detected in the mobile network.

Abstract: A data prefetching technique optimizes the batch size of prefetch requests. The optimized batch size may be determined based on a prefetch transfer time of a previous prefetch operation, where the prefetch transfer time is measured as an elapsed time interval from when data from the previous prefetch operation is first received to when the data from the previous prefetch operation is finished being received.

Abstract: A reversible airflow fan tray assembly is provided for an electronic device. The fan tray assembly includes a face plate to be removably mounted to the electronic device and a fan tray cassette to be removably mounted to the face plate in multiple orientations. The fan tray cassette includes a fan unit to provide airflow through the electronic device, and an interconnection board to provide an electrical connection between the fan unit and the electronic device, where the interconnection board mates with a connector on the electronic device when the fan tray cassette is in any of the multiple orientations. The interconnection board provides an airflow direction indication to the electronic device for a current orientation of the multiple orientations.

Abstract: A network device may include an input device and a packet forwarding engine. The input device receives a data packet. The packet forwarding engine includes logic configured to determine that the data packet is to be multicast. The logic is also configured to identify one of multiple forwarding schemes, where each of the forwarding schemes is configured such that the packet forwarding engine generates and forwards no more than two copies of the data packet.

Abstract: Techniques are described for dynamically building an Ethernet virtual local area network (VLAN) interface in a network device. The techniques allow dynamic building of a second VLAN interface over a first VLAN interface statically built over an Ethernet port configured to support dynamic VLANs in a network device. A network device may receive a plurality of Ethernet packets from subscriber devices and dynamically build a second VLAN interface over the first VLAN interface for each of the subscribers. Once the second VLAN interface is built, the network device dynamically builds interface columns over the second VLAN interface for each protocol associated with the Ethernet packets. The network device may then authenticate a user associated with the plurality of Ethernet packets. Once the user has logged out of the network device, the network device may tear down the interface columns while persistently maintaining the corresponding second VLAN interface.

Abstract: A network device includes an input device configured to receive a data packet, where the input device includes a number of interfaces and the data packet includes a source address and a destination address. The network device also includes processing logic configured to generate forwarding information identifying a next hop for the data packet and determine whether an interface on which the data packet was received is a same interface on which the data packet is to be forwarded to the next hop. The processing logic is also configured to determine whether the data packet originated from a device that is part of a same subnet as the next hop.