Abstract: Heat sinks having a thermal interface for cooling electronic devices processing units are described herein. In some embodiments, a thermal interface member includes a first material defining a first layer of the apparatus. The thermal interface member further includes a second material being deformable and thermally conductive, and a third material different from the second material, that is an adhesive material. The second material and the third material collectively define a second layer of the apparatus having a first region and a second region. The first region is formed from the second material. The second region is formed from the third material.

Abstract: Network traffic associated with a user is lawfully intercepted by mirroring data packets flowing to and from the user for which interception has been designated. A unique packet structure enables analysis of mirrored data packets of any network type. In one implementation, a packet structure comprises routable packets that encapsulate the mirrored packet stream. The routable packet structure may be formed by prepending a correlation header to each mirrored packet. The correlation header includes a routing header to allow the mirrored packets to be transportable across the public Internet. In addition, an intercept header may be embedded within the correlation header to easily support various analyzer-specific implementations. The intercept header may include a version field that is extensible for the various analyzer implementations.

Abstract: A network device may limit the rate at which control messages are forwarded to a destination device when forwarding traffic pursuant to dynamic flow capture (DFC). In one implementation, a system may receive filtering criteria associated with DFC of network traffic and passively filter incoming traffic based on the filtering criteria to obtain traffic that matches the filtering criteria. The system may transmit a rate limited version of control messages associated with the filtered traffic to a control device.

Abstract: An ATM switch allowing simplified OAM processing only on the line incoming side is disclosed. An incoming line circuit has a header conversion table storing information indicating whether the system is an end point of an OAM processing flow for each connection and an OAM table storing an AIS flag and an RDI flag for each connection. As for an OAM cell found by referring to these tables to be forced to go back to its own port, an switch output port number is rewritten in the OAM function section. In addition, in the case of an AIS cell, the function type is rewritten so as to become an RDI cell. In the case of an LB cell, the LB indication is rewritten so as to become a return LB cell, and switching to its own port is conducted in the ATM switch core.

Abstract: A device may determine, based on layer 2 protocol information of incoming traffic, whether to forward the traffic as layer 2 traffic or terminate the traffic as layer 3 traffic. The device may receive the incoming traffic as packets of a virtual local area network (VLAN) and may analyze a protocol type included in layer 2 header information of the packets to classify, based on the protocol type, the packets as layer 2 output traffic or layer 3 output traffic. The device may transmit, as layer 2 traffic of the VLAN, those of the packets that are classified as layer 2 output traffic, and may terminate, to layer 3 traffic, those of the packets that are classified as layer 3 output traffic.

Abstract: Resource utilization required for processing packets associated with multilink bundles of a router are tracked. Corrective actions can be taken to provide fair usage of the available resources by comparing actual usage to a predetermined threshold value, and taking corrective actions if that threshold is exceeded.

Abstract: A device receives, from a client device, a request for a resource that is available from an origin device, and determines whether the resource is cached in a cache server or not cached in the cache server. The device forwards the request to the cache server regardless of whether or not the resource is cached in the cache server, and receives, when the resource is not cached in the cache server, a redirect command from the cache server based on the request. The device forwards the received redirect command to the client device, where the redirect command instructs the client device to obtain the resource from the origin device. The device receives, from the cache server and based on the request, the resource when the resource is cached in the cache server, and forwards the received resource to the client device.

Abstract: A scheduler in a network element may include a dequeuer to dequeue packets from a set of scheduling nodes using a deficit weighted round robin process, where the dequeuer is to determine whether a subset of the set of scheduling nodes is being backpressured. The dequeuer may set a root rich most negative credits (MNC) value, associated with a root node, to a root poor MNC value, associated with the root node, and set the root poor MNC value to zero, when the subset is not being backpressured, and may set the rich MNC value to a maximum of the root poor MNC value and a root backpressured rich MNC value, associated with the subset, and set the root poor MNC value to a root backpressured poor MNC value, associated with the subset, when the subset is being backpressured.

Abstract: A buffer memory can be configured to temporarily store data in a number of queues. A processor can be configured to measure a fullness of the buffer memory. The processor can be configured to adjust thresholds and drop profiles based on a measured global resource usage for a weighted random early detection (WRED) technique with less resources than a conventional.

Abstract: A hybrid type telephony system capable of establishing a connection between conventional type telephone sets contained in an exchange unit and LAN type telephone sets contained in an IP network, the system comprising: a gateway circuit connected between the exchange unit and the IP network and performing voice data format conversion, and a central control unit connected to the LAN of the. IP network for establishing a communication path to the exchange unit via a control bus, controlling switching of IP packets of the IP network, managing IP address information of the LAN type telephone sets and the gateway circuit via the LAN, and controlling connection between the LAN type telephone sets and connection between the LAN type telephone sets and the gateway circuit.

Abstract: A light-weight resilient mechanism is used to synchronize server secure keying data with member devices in a highly-scalable distributed group virtual private network (VPN). A server device generates an initial secure keying data set, for the VPN, that includes a first version identifier, and sends, to member devices and via point-to-point messages, the secure keying data set. The server device sends, to the member devices, heartbeat push messages including the first version identifier. The server device generates an updated secure keying data set with a second version identifier and sends, to the member devices, a key push message that includes the updated data set. The server device sends, to the member devices, heartbeat push messages including the second version identifier. Member devices may use the first and second version identifiers to confirm that secure keying data sets are current and quickly identify if updates are missed.

Abstract: A system includes a storage device and a processor. The storage device is configured to store a first set of values of TCP options for a first group of servers. The processor is configured to: transmit first requests to the first group of servers; receive first replies, in response to the first requests, from the first group of servers; determine the first set of values of the TCP options for the first group based on values in the first replies; store the first set of values in the storage device; receive a first message from a client to establish a connection between the client and a server in the first group of servers, and transmit, in response to the first message, a second message to the client.

Abstract: A forwarding node decapsulates and encapsulates data. The decapsulation may be performed using pattern matching techniques and the encapsulation may be performed using pattern insertion techniques. The decapsulation and encapsulation are preferably performed by hardware devices such as application specific integrated circuits (ASICs) to enhance the speed of such operations. The decapsulation and encapsulation may be independent of each other and performed on a per virtual circuit basis.

Abstract: Updating a node of a content delivery network is disclosed. In some embodiments, an indication of an event associated with a piece of content, which event is associated with a change in a corpus of content associated with a content delivery network, is received at a node of the content delivery network; and in response to the received indication, an action is performed at the node, if applicable, such that at least a portion of the corpus of content associated with the content delivery network stored at the node is updated based on the event.

Abstract: A method and apparatus for segmenting multiple live media streams of differing qualities into a single output stream. The live media streams may have constant or unpredictable key frame intervals.

Abstract: An egress device of a network tunnel is configured to receive fragmented packets over a tunnel interface when the network tunnel is defined using information that is not present in all of the fragmented packets. For example, an egress device includes an interface to receive packets associated with the network tunnel, at least some of the packets being fragmented packets that are fragments of tunnel encapsulated packets. Some of the fragmented packets include network layer information associated with a network layer header of an original unfragmented tunnel encapsulated packet and do not include transport layer information associated with a transport layer header of the original unfragmented tunnel encapsulated packet. A forwarding engine of the egress device uses a multi-stage chained lookup to determine whether packets conform to tunnel definitions for the network tunnel that define the network tunnel by specifying both network layer information and transport layer information required for the packets.

Abstract: A device receives a data transaction associated with packet, determines a risk level associated with the data transaction, and performs a content type check for the data transaction. The device also performs an infected content check for the data transaction, and classifies, based on the determined risk and the performed checks, the data transaction for one of a slow path virus scanning process or a fast path virus scanning process. The device further performs, based on the classification, one of the slow path virus scanning process or the fast path virus scanning process on the data transaction.

Abstract: A packet scheduler may include logic configured to receive packet information. The packet scheduler may include logic to receive an operating parameter associated with a downstream device that operates with cell-based traffic. The packet scheduler may include logic perform a packet to cell transformation to produce an output based on the operating parameter. The packet scheduler may include logic to use the output to compensate for the downstream device.

Abstract: A router maintains routing information including (i) route data representing destinations within a computer network, (ii) next hop data representing interfaces to neighboring network devices, and (iii) indirect next hop data that maps a subset of the routes represented by the route data to a common one of the next hop data elements. In this manner, routing information is structured such that routes having the same next hop use indirect next hop data structures to reference common next hop data. In particular, in response to a change in network topology, the router need not change all of the affected routes, but only the common next hop data referenced by the intermediate data structures. This provides for increased efficiency in updating routing information after a change in network topology, such as link failure.

Abstract: A multi-chassis network device includes a plurality of nodes that operate as a single device within the network and a switch fabric that forwards data plane packets between the plurality of nodes. The switch fabric includes a set of multiplexed optical interconnects coupling the nodes. For example, a multi-chassis router includes a plurality of routing nodes that operate as a single router within a network and a switch fabric that forwards packets between the plurality of routing nodes. The switch fabric includes at least one multiplexed optical interconnect coupling the routing nodes. The nodes of the multi-chassis router may direct portions of the optical signal over the multiplexed optical interconnect to different each other using wave-division multiplexing.