Abstract: Methods, systems, and computer readable media for testing and/or determining scheduling fidelity in a time sensitive network (TSN) are disclosed. According to one method for determining scheduling fidelity in a TSN, the method occurs in a test system. The method includes receiving, via a system under test (SUT), at least one expected receive time indicating when a test packet is expected to be received by at least one destination. The method further includes computing, using the at least one expected receive time and at least one actual receive time, a time variation metric associated with the test packet.

Abstract: In one embodiment, packet forwarding apparatus includes a data packet receiving interface, a data packet forwarding interface, and a configuration interface. The apparatus also includes circuitry that defines a plurality of data packet forwarding paths between the data packet receiving interface and the data packet forwarding interface. The circuitry defines at least one of the plurality of data packet forwarding paths in response to input received via the configuration interface, and the circuitry adaptively reconfigures at least one of the plurality of data packet forwarding paths i) in response to input received via the configuration interface, and ii) while data packets are being received by the packet forwarding apparatus.

Abstract: A method for testing network route convergence includes receiving input for specifying a route convergence threshold and a frame loss tolerance for a route convergence test. The route convergence test is initiated by transmitting data plane traffic addressed to at least one destination to a device under test (DUT). At least one route is advertised to the DUT. A first time instance when the at least one route is advertised to the DUT is recorded. Data plane traffic routed by the DUT is monitored. It is detected when data plane traffic for the at least one route reaches the route convergence threshold. In response to detecting that the data plane traffic reaches the route convergence threshold, a second time instance is recorded and a route convergence validation test phase is initiated.

Abstract: Methods, systems, and computer readable media for monitoring, adjusting, and utilizing latency associated with accessing distributed computing resources are disclosed. One method includes measuring a first latency associated with accessing a first computing resource located at a first site. The method further includes the measuring a second latency associated with accessing a second computing resource located at a second site different from the first site. The method further includes selectively impairing transmission of packets to or processing of packets by at least one of the first and second computing resources in accordance with a performance, network security, or diagnostic goal.

Abstract: Methods, systems, and computer readable media for benchmark reference testing of data center or network equipment are disclosed. One method includes, using a network or data center test device, executing a plurality of performance tests to test a plurality of different performance parameters of a network or data center device under test. The method further includes obtaining individual test results for each of the different performance parameters. The method further includes generating a multi-dimensional score that combines the individual test results from the different performance parameters to indicate a composite performance of the data center or network device. The method further includes outputting the multi-dimensional score to a user.

Abstract: Methods, systems, and computer readable media for advertising network security capabilities are disclosed. According to one method, the method occurs at a network node. The method includes receiving a first route advertisement message that includes network security capabilities information indicating capabilities of a network security system associated with a route. The method also includes receiving a packet associated with a packet flow. The method further includes directing the packet associated with the packet flow to a downstream network node associated with the network security system.

Abstract: The subject matter described herein relates to methods, systems, and computer readable media for utilizing an augmented scroll bar. In some examples, a system for utilizing an augmented scroll bar includes a processing unit, a memory accessed by the processing unit, and a scroll bar manager that is stored in memory and when executed by the processing unit is configured to display contents of a data file within a table layout of a display field. The scroll bar manager is further configured to display, within the display field, a scroll bar user interface element that includes a scrolling region and a view slider element that traverses the scrolling region, wherein the view slider element indicates a position of the table layout within a portion of the data file and the scrolling region graphically illustrates indicia corresponding to dynamic status information of data elements included in the data file.

Abstract: A method for optimizing placement of virtual network visibility components includes providing a virtual network monitoring tap instance for copying packets in a network. The method further includes providing a virtual network packet broker instance for receiving and distributing the copied packets to at least one network monitoring tool instance. The method further includes analyzing a network performance or utilization parameter associated with transmission of the copied packets among the virtual network tap instance, the virtual network packet broker instance and the network monitoring tool instance. The method further includes modifying, based on results of the analyzing, placement of at least one of the virtual network packet broker instance and the virtual network monitoring tool instance.

Abstract: Systems and methods are disclosed to recreate real world application level test packets for network testing. Live network traffic is monitored within a live network infrastructure, and live traffic meta-data is then collected for this live traffic. Application level meta-data is then extracted from the live traffic meta-data and stored in one or more data storage systems. Subsequently, the application level meta-data is received from the one or more data storage systems, and application level test packets for network testing are then generated based upon the application level meta-data. Further, application level meta-data collected during a time slot can be segmented in multiple different data segments associated with different time periods within the time slot, and application level test packets can be generated using these different data segments. Further, the live traffic meta-data collection can occur within multiple time slots.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for quiescence-informed network testing. One method for quiescence-informed network testing includes determining, by a first test agent, a quiescence state of the network. The method further includes reporting, by the first test agent and to a test controller, the quiescence state of the network. The method further includes configuring, by the test controller, the first test agent to execute a network test. The method further includes executing, by the first test agent, the network test. The method further includes reporting results of execution of the network test to the test controller.

Abstract: Network packet forwarding systems and methods are disclosed to push pre-processing tasks to network tap devices. In certain embodiments, packet flows from multiple monitoring points within a packet network communication system are monitored by a plurality of network tap devices to generate tapped packet flows associated with monitored network traffic flows. The tapped packet flows are transmitted from each network tap device to a tap controller, and the tap controller generates pre-processing rules based upon the tapped packet flows. Control messages including the pre-processing rules are then transmitted from the tap controller to the network tap devices, and the tapped packet flows are pre-processed at the network tap devices using the pre-processing rules to generate pre-processed packet flows. These pre-processed packet flows are then transmitted back to the tap controller where they are further processed and output to one or more destination devices.

Abstract: Methods, systems, and computer readable media for increasing the rate of established network connections in a test simulation environment are disclosed. The method includes generating, by a network equipment test device in a test simulation environment, a random integer. The method further includes designating the generated random integer as a first twin prime value in the event the generated random integer is a prime number and designating, by the network equipment test device, a generated sum of the first twin prime value and a designated value as a second twin prime value in the event the generated sum is a prime number. The method also includes generating a custom key certificate pair that includes a public encryption key and a private decryption key using the first twin prime value and the second twin prime value and decrypting at least one message received from a device under test using the private decryption key.

Abstract: Systems and methods are disclosed to forward packets not passed by criteria-based filters in packet forwarding systems. The disclosed embodiments include one or more Not Passed By Criteria (NPBC) filters that are defined for input ports along with one or more criteria-based filters, such as for example, Pass by Criteria (PBC) filters and/or Deny by Criteria filters (DBC), that forward packets not passed by these criteria-based filters. NPBC filters include, for example, Pass Unmatched PBC filters associated with PBC filters and configured to forward packets not passed by PBC filters and/or Pass Matched DBC filters associated with DBC filters and configured to forward packets not passed by DBC filters. Using one or more NPBC filters within the disclosed embodiments, packet data that is not being passed along to output ports by the criteria-based filters can be easily passed to one or more designated output ports.

Abstract: Methods, systems, and computer readable media for computing label-switched data communication paths are disclosed. An example method includes receiving, by a path computation element (PCE) implemented on at least one processor, synchronization status information for routing nodes in a label-switched network. The method includes receiving, by the PCE, a request for a label-switched path (LSP) from a client. The method includes determining, by the PCE, a responsive LSP based at least in part on the synchronization status information. The method includes sending, by the PCE, an explicit route object (ERO) for the responsive LSP to the client.

Abstract: Methods, systems, and computer readable media for testing time sensitive network (TSN) elements are disclosed. According to one method for testing a TSN element, the method occurs at a test system. The method includes synchronizing a test system clock with a clock at a system under test (SUT). The method also includes receiving a sequence of messages, wherein the sequence of messages is generated using schedule rules associated with a TSN stream. The method further includes determining, using timing information associated with the test system clock, whether the schedule rules are accurately implemented by the SUT.

Abstract: Methods, systems, and computer readable media for network diagnostics are disclosed. According to one method, the method occurs at a diagnostics controller implemented using at least one processor. The method includes configuring a plurality of diagnostics nodes to observe traffic behavior associated with a system under test (SUT). The method also includes observing, using the diagnostics nodes, traffic behavior associated with the SUT. The method further includes detecting, using the traffic behavior, a SUT issue. The method also includes identifying, using SUT topology information, a network node in the SUT associated with the SUT issue. The method further includes triggering one of the diagnostics nodes to obtain node related information from the network node, wherein the diagnostics node uses at least one communications protocol to poll the network node for the node related information. The method also includes diagnosing, using the node related information, the SUT issue.

Abstract: Network tool optimizers for server cloud networks and related methods are disclosed. In part, master filters are defined to segregate and control user traffic, and user filters are defined to forward the user traffic to cloud-based network tools or tool instances. A master user interface and user interfaces for each user are provided so that the master filters and user filters can be defined and managed. A filter rules compiler within the cloud-based network tool optimizer then combines the master filters with the user filters, resolves conflicts in favor of the master filters, and generates filter engine rules that are applied to filter engines within the network tool optimizer for the cloud network. The filter engines then forward packets received at input ports for the network tool optimizer to output ports for the network tool optimizer that are coupled to network tools or tool instances within the cloud network.

Abstract: Systems and methods are disclosed herein to provide improved online security testing of security devices and networks, including but not limited to networks containing wireless access points. In accordance with one or more embodiments and aspects thereof, a distributed online test system is disclosed that combines an online test manager with one or more remote probes to generate simulated attacks and verify their effectiveness. Such a system may offer improved capabilities such as the ability to conduct attacks over geographically distributed network topologies, the ability to assess the security functions of wireless networks, and simpler and more cost-effective online security testing.

Abstract: Methods, systems, and computer readable media for emulating network traffic patterns on a virtual machine are disclosed. In one example, the method includes generating a user specification based on a plurality of network traffic patterns and computer processing usage patterns and receiving, at a virtual machine hosted by a DUT, the user specification containing the plurality of network traffic patterns and computer processing usage patterns. The method further includes generating a plurality of network traffic sequences based on the plurality of network traffic patterns and a plurality of computer processing usage pattern instruction sequences based on the plurality of computer processing usage patterns.

Abstract: Systems and methods provide concurrent security processing for multiple network security tools. An input packet is received at a network packet forwarding system from a network packet source, and the network packet forwarding system concurrently sends an output packet based upon the input packet to multiple security tools. Return packets are received based upon the output packet from the security tools after their respective security processing. Once return packets are received from each of the security tools, the network packet forwarding system forwards a secure packet to a packet destination. If a timeout occurs before all return packets are received, the network packet forwarding system can assume that the original packet was unsafe and discard information stored for the input packet. If security tools are configured to modify packets, these modifications can also be tracked.