Abstract: The subject matter described herein relates to methods, systems, and computer readable media for test system connection resiliency. In some examples, a method for testing a network device under test (DUT) includes exchanging a sequence of data packages over a transmission control protocol (TCP) connection between a client and a server and through the network DUT. The method includes storing client sequence identifiers and server sequence identifiers. The method includes synchronizing, in response to detecting an error on the TCP connection, the client and the server to a last data package exchanged prior to the error using the client sequence identifiers and the server sequence identifiers and resuming a test script at a next data package after the last data package exchanged prior to the error in the sequence of data packages.

Abstract: A method for validating a network packet broker is disclosed. The method includes configuring in software at least one of a on filter and a load balancer, processing a packet capture file containing data packets using the at least one filter and the load balancer such that data packets processed is output from an output port of the network packet broker. The method also includes analyzing, using a protocol analyzer, the data packets output by the output port of the network packet broker to validate the network packet broker.

Abstract: Methods, systems, and computer readable media for initiating and executing a performance test of a private network and/or components thereof are disclosed. Methods and systems include a receiver endpoint in a private network, and a sender endpoint in a public network. The receiver endpoint initiates a transport layer connection with the sender endpoint. The sender endpoint allocates a port, binds to the port, and sends an Internet Protocol (IP) address and a port number over the transport layer connection. The receiver endpoint then sends a hole punch datagram from the private network to the public network to create a hole in a firewall that is separating the public and private networks. The sender endpoint receives the hole punch datagram and uses IP address and port information in the hole punch datagram to send test traffic through the hole in the firewall.

Abstract: Methods, systems, and computer readable media for deploying a virtual machine (VM) are disclosed. According to one exemplary method, the method includes receiving a request for creating a VM. The method also includes creating the VM using a VM operating system (OS) stored in a read-only memory, wherein the read-only memory is shared among a plurality of VMs.

Abstract: Methods, systems, and computer readable media for monitoring latency and/or time-based data locations of multicast communications are disclosed. One exemplary method includes monitoring sequence numbers of multicast messages at a plurality of physical network locations, reporting when a sequence number value for the multicast messages reaches a predetermined value, and receiving the reports and using the reports to generate an indication of relative latencies and/or time-based data locations across the physical network locations.

Abstract: Methods, systems, and computer readable media for receiving test configuration information are disclosed. According to one exemplary method, the method occurs at a node configured to operate in a private network. The method includes registering node identification information with a registration server. The method also includes sending a keep-alive message to the registration server. The method further includes receiving, in response to the keep-alive message and via the registration server, test configuration information from a configuration system outside the private network.

Abstract: Methods, systems, and computer readable media for obtaining power consumption data associated with packet processing are disclosed. One method for obtaining power consumption data associated with packet processing occurs at a test device. The method includes sending, via a first communications interface, at least one test packet to a system under test (SUT). The method also includes receiving, via a second communications interface, power consumption data associated with the at least one test packet. The method further includes correlating the power consumption data and test packet information.

Abstract: Systems and methods are disclosed for parallel match processing of network packets to identify data for masking or other actions. In part, the disclosed embodiments receive packets and identify packet data, such as sensitive data, by rapid parallel matching of packet data being communicated in multi-byte wide data paths to match parameters in order to generate match vectors. The match vectors are then used to generate control vectors that are subsequently used by packet processing circuitry to perform desired actions for this packet data (e.g., mask data) and/or for related packets (e.g., drop packets). For example, data identified through the match processing can be masked, and control vectors can be mask control vectors applied to parallel multiplexers. In certain embodiments, the parallel data multiplexers are controlled by the mask control vectors to selectively output either original packet data or mask data that obscures original packet data.

Abstract: Network tool optimizer devices and related methods are disclosed that provide selective scanning of network packet traffic using cloud-based virtual machine tool platforms. Rather than require local network analysis tool resources, the disclosed embodiments identify subsets of packet traffic of interest, and these subsets are forwarded to a cloud-based server system where cloud-based virtual machine tool platforms are used to process the subsets of traffic of interest. Results from this processing are then provided back to adjust the operation of the network tool optimizers. Some further embodiments use local capture buffers and remote cloud replay buffers to stored subsets of traffic locally for later communication to cloud server systems where cloud-based tools analyze replays of the captured network traffic. Some further embodiments also use results from cloud-based tools to initiate local virtual machine tool platforms that are used to further analyze traffic of interest.

Abstract: Latency-based timeouts are used for concurrent security processing by multiple in-line network security tools. A network system forwards secure network packets to the tools and uses latency-based timeouts with respect to the return of processed packets from the tools. Initially, the network system measures processing latencies for the tools and sets at least one timeout threshold based upon the processing latencies. The network system then receives an input packet from a network source, generates a timestamp, concurrently sends an output packet to the tools based upon the input packet, tracks return packets from the tools, and determines whether a timeout has occurred with respect to the timeout threshold based upon a difference between the timestamp and a current timestamp. If a timeout does not occur, a secure packet is forwarded to a network destination. If a timeout does occur, return packet tracking for the input packet is ended.

Abstract: Systems and methods are disclosed for hash level load balancing for removal of duplicate network packets to form deduplicated packet streams. Hash values for input packets are used in part to select deduplication engines to receive hash data associated with received input packets, and this hash data is then forwarded to the selected deduplication engines for deduplication processing. The hash level load balancing reduces bandwidth requirements within the deduplication processing as compared to prior packet-based load balancing solutions for deduplication systems. Additional embodiments utilize port identifiers in addition to hash values to allow for increased flexibility in deduplication of packets from multiple input ports.

Abstract: The subject matter described herein relates to methods, systems, and computer readable media for emulating network devices with different clocks. One method includes steps occurring in a network equipment test device. The steps include generating or obtaining timing information. The steps further include obtaining clock modification information. The steps further include emulating a plurality of different clocks using the timing information and the clock modification information. The method further includes emulating at least one network device that transmits test packets to a device under test using the different clocks.

Abstract: Systems and methods are disclosed to provide egress port overload protection for network packet forwarding systems. Input packets are received at one or more ingress ports and load balanced among a plurality of egress ports for the packet forwarding system. Load balanced packets associated with each egress port are then sampled to generate sampled load balanced packets that are output from the egress port. For certain embodiments, a sampling percentage is used for the packet sampling, and the sampling percentage for each egress port is set based upon a comparison of a current traffic rate for the egress port to a threshold rate for the egress port. The threshold rates for the egress ports are allowed to be configured through a user interface. Further, session and non-session traffic can be identified, and session aware load balancing and/or per-port packet sampling can be applied.

Abstract: Systems and methods are disclosed herein to provide improved data communication test systems for the testing of wireless data communication devices and systems. A flexible arrangement of physical layer interfaces, hardware traffic generator/analyzers and software traffic generator/analyzers is disclosed that partitions the data communication test system into interfacing and processing modules. Such a system may offer improved capabilities such as a lower-cost and more efficient test system, a reduction in redundant processing capabilities, and a dynamic balancing of interfaces and processing power.

Abstract: A network tap with battery assisted and programmable failover is disclosed. The network tap includes a processing element, at least one optical-electrical transceiver, and at least one multiplexer/demultiplexer module. A backup battery provides power to the optical-electrical transceiver(s) and the multiplexer/demultiplexer module(s) but not the processing element when operating in a failover mode. The network tap is programmable to operate in a fail open mode in which traffic received from the network passes through the network tap during failover or a fail closed mode in which traffic receive from the network is blocked during failover.

Abstract: Systems and methods are disclosed to forward packets not passed by criteria-based filters in packet forwarding systems. The disclosed embodiments include one or more Not Passed By Criteria (NPBC) filters that are defined for input ports along with one or more criteria-based filters, such as for example, Pass by Criteria (PBC) filters and/or Deny by Criteria filters (DBC), that forward packets not passed by these criteria-based filters. NPBC filters include, for example, Pass Unmatched PBC filters associated with PBC filters and configured to forward packets not passed by PBC filters and/or Pass Matched DBC filters associated with DBC filters and configured to forward packets not passed by DBC filters. Using one or more NPBC filters within the disclosed embodiments, packet data that is not being passed along to output ports by the criteria-based filters can be easily passed to one or more designated output ports.

Abstract: There is disclosed a system and method for high precision packet generation in software using a hardware time stamp counter. The method may include receiving user selection to create a network test and receiving test information from the user, the test information including a packet transmission rate. A packet transmission interval may be calculated based on the packet transmission rate. The network test is executed. Packets are transmitted at the packet transmission rate, including checking a hardware counter to learn if the packet transmission interval has elapsed and, when the packet transmission interval has elapsed, sending the packet over a network. The method may be performed by a network testing system or computing device.

Abstract: A radio transceiver apparatus configured to transmit and receive radio frequency signals, the apparatus comprising, a sample clock configured to generate samples at a clock frequency fs, a processor configured to generate a transmission data stream signal, wherein the transmission data stream signal comprises frames separated by frame boundaries between the frames, and wherein the frames are comprised of at least one sample, and a sample clock correction unit, wherein in a first transmission configuration when the clock frequency fs is greater than a desired clock frequency fr, the sample clock correction unit is configured to insert at least one sample into at least one frame boundary between frames, or in a second transmission configuration when the clock frequency fs is less than a desired clock frequency fr, the sample clock correction unit is configured to remove at least one sample from at least one frame boundary between the frames.

Abstract: Methods and systems for network packet impairment within virtual machine (VM) host systems are disclosed that provide virtual impairment processors within VM host hardware systems. One or more processing devices within a virtual machine (VM) host system are operated to provide at least one virtual machine (VM) platform, a virtual switch, and a virtual impairment processor within a virtualization layer for the VM host system. Network packets associated with packet traffic for the at least one VM platform using the virtual switch. The virtual impairment processor then applies one or more impairments to the network packets such as a drop, modify, delay, and/or other packet impairment. The impaired packets are then forwarded by the virtual switch to target destinations for the impaired network packets using the virtual switch.

Abstract: Methods and systems for forwarding network packets within virtual machine (VM) host systems are disclosed that provide virtual packet brokers and related virtual test access ports (TAPs) within VM host hardware systems. One or more processing devices are operated to provide a virtual machine (VM) platform, virtual test access port(s) (TAPs), and a virtual packet broker within a virtualization layer. Network packets are then received using the virtual TAPs and copied network packets are sent from the virtual TAPs to the virtual packet broker. The virtual packet broker applies packet content filter(s) to the copied network packets to determine selected packets within the copied network packets to forward to virtual and/or external network packet analysis tool(s). Virtual switches can also be provided within the virtualization layer to forward packets among a plurality of VM platforms and/or external networks.