Abstract: Techniques for operating a network device for sharing resources in a hardware forwarding table. In some embodiments, the network device may generate groups of routes having a common set of next hops; for each group of routes of the generated groups: collect resilient adjacencies associated with routes in the group; assemble pairs of the collected resilient adjacencies; and determine a number of differences between resilient adjacencies in each of the assembled pairs. The network device may further order the assembled pairs based on the number of differences, identify a pair of resilient adjacencies associated with a lowest number of differences; select a resilient adjacency of the identified pair of resilient adjacencies; program one or more routes associated with the selected resilient adjacency, to refer to the other resilient adjacency of the identified pair of resilient adjacencies; and remove an entry associated with the selected resilient adjacency from a forwarding table.

Abstract: A packet loss processing method and a network device are provided. The method includes: A first node obtains a first forwarding label of a first packet, where the first packet is a discarded packet. The first node determines, based on the first forwarding label, that the first node does not have a LSP corresponding to the first forwarding label. The first node sends a first message to a second node, where the first message includes the first forwarding label, and the first message is used to indicate that the first node does not have the LSP corresponding to the first forwarding label. The second node may be, for example, a peer node of the first node. The first node sends the message to the peer node, to indicate that the first node does not have the LSP corresponding to the forwarding label.

Abstract: Methods and apparatus to measure exposure to streaming media are disclosed. An example apparatus includes at least one memory, instructions in the apparatus and processor circuitry to execute the instructions to: access metadata identifying media presented to a user, and cookie data, the metadata and the cookie data provided by a client device; determine whether the cookie data identifies the user to a database proprietor; in response to a determination that the cookie data does not identify the user to the database proprietor, send a redirect message instructing the client device to retransmit the metadata to a next-hop location; and in response to a determination that the cookie data does identify the user to the database proprietor, provide the metadata and a user identifier to a central facility.

Abstract: Disclosed herein is a system including a wellsite controller. The wellsite controller receives workflow inputs such as wellsite details and communications settings, generates a local configuration entry including the workflow inputs, sensor configuration information about wellsite sensors connected to the controller, and a unique identifier for the controller. The unique identifier is based upon the workflow inputs, the sensor configuration information, and location information for the wellsite. The controller generates a registration message from the local configuration entry. A server receives the registration message, and compares the unique identifier to a store of known identifiers. If the unique identifier does not match one of the known identifiers, the server recognizes the controller as being newly added, adds the wellsite to a monitoring system of the server by creating an entry for the wellsite from the registration message, and attempts to map the wellsite sensors to the entry for the wellsite.

Abstract: Analytics are collected to monitor and report data usage of enterprise applications running on a mobile device. A second line service agent and an analytics agent assure that the mobile device is configured for analytics collection. Once configured, cellular data usage of applications that are monitored by the analytics engine are detected and a VPN connection is established for routing the communications between the monitored app an a public website. If the mobile device switches to WiFi usage, the analytics agent disconnects the VPN connection and routes data directly to the public website. Thus, data usage of the monitored applications can be reported by the VPN gateway.

Abstract: Systems and methods for managing domain name registrations in accordance with rules and regulations of a domain name verification system are disclosed. The disclosed technology enables a domain name verification system to regulate the registration of domain names in accordance with its own domain name registration policies. This disclosed system uses a “whitelist” domain name registry to register “whitelist domain names” once pre-approval to register a corresponding target domain name has been granted. In this manner, the whitelist domain name registry system acts as a repository for pre-approved domain name registrations and enables pre-qualified registrants (including potential or prospective registrants) to then register a target domain name.

Abstract: From among a U-plane and a C-plane, the U-plane is installed in a first user site which has a base station, and the C-plane is installed in a C-plane site (any site that is not a user site). A system sets a U-plane inter-site path which is an inter-site communication path that connects a first user site with a second user site via a wide area network, and a C-plane inter-site path which is an inter-site communication path that connects a C-plane site with the first user site via the wide area network. In addition, the system sets an in-site communication path which is a communication path within the first user site and which connects to an inter-site communication path. A U-plane inter-site path is an inter-site communication path via which data is transmitted or received by a U-plane. A C-plane inter-site path is an inter-site communication path via which a signal is transmitted or received by a C-plane.

Abstract: Systems and methods for creating loopback packets for transmission through a section of a network for the purpose of testing the operability of links and nodes in this section of the network are provided. A method, according to one implementation, includes a step of obtaining information, by a Network Element (NE), about the topology of the network related to at least the nodes in direct communication with a peer node. The method also includes a step of generating one or more loopback packets, where each loopback packet includes at least a header having a path list including one or more nodes of the plurality of nodes in the network. Each path list defines an order of nodes through which the respective loopback packet is to be transmitted.

Abstract: A system and method for data route discovery through cross-connection tunnels uses routing configurations from a local edge router in a private cloud that include learnt and advertised subnets, as well as cross-connection tunnels for the learnt and advertised subnets, to populate a public cloud table of public cloud learnt subnets and a public cloud table of public cloud advertised subnets. The public cloud tables of public cloud learnt subnets and public cloud advertised subnets are applied to discover data routes through the cross-connection tunnels of the hybrid cloud environment.

Abstract: Systems and methods for protecting an automated system (AS) including building a security configuration based on architecture data of the AS such that compliance with the security configuration ensures a security level for AS devices, installing a data transmission application on a gateway of an AS network using the security configuration, and transmitting data from one of the AS devices through the data transmission application such that the actions of the data transmission application are defined by the security configuration.

Abstract: The present invention provides a hardware acceleration method and a communications system. The hardware acceleration method includes: sending, by a network functions virtualization orchestrator (NFVO), first request information to a virtualized infrastructure manager (VIM), wherein the first request information is configured to request the VIM to deploy the to-be-accelerated VNF onto a host in a management domain of the VIM, wherein a hardware resource of the host meets a requirement of the to-be-accelerated VNF, and the requirement of the to-be-accelerated VNF includes information indicating a type of a required hardware acceleration resource and a size of the required hardware acceleration resource in the to-be-accelerated VNF; receiving, by the VIM, the first request information from the NFVO; and deploying, by the VIM, the to-be-accelerated VNF onto the host in the management domain of the VIM.

Abstract: In one embodiment, a method comprises determining, by a controller device in a low power and lossy network (LLN), that a first LLN border device is in a first personal area network (PAN) having a first directed acyclic graph (DAG) topology, and that the first LLN border device is a neighbor of a second LLN border device in a second PAN of the LLN having a second DAG topology; receiving a path request for a third LLN device in the first PAN to reach a fourth LLN device in the second PAN; and generating an inter-PAN path between the third LLN device and the fourth LLN device via the first and second LLN border devices, the inter-PAN path providing a stitching between the first DAG topology and the second DAG topology.

Abstract: The present disclosure relates to capturing the routing topology of a network (e.g., the Internet covering the entire IPv4 address space). An exemplary method comprises: obtaining a first bit array indicative of a plurality of target IP addresses; assigning a first subset of the plurality of target IP addresses to a first source device; assigning a second subset of the plurality of target IP addresses to a second source device; causing the first source device to transmit a first plurality of probing packets to the first subset of the plurality of target IP addresses and receive a first plurality of returned packets, causing the second source device to transmit a second plurality of probing packets to the second subset of the plurality of target IP addresses and receive a second plurality of returned packets, and generating a data structure representing a routing topology of the network.

Abstract: Systems and methods for verifying the validity of a network link are described herein. A verification packet and an associated packet handling flow can be generated and added to a network in order to investigate a link between network nodes (e.g. switches).

Abstract: An apparatus for decoding and rendering or otherwise processing, manipulating, or outputting a variety of digital data is provided. The apparatus may include a browser engine configured to receive first encoded digital data. The apparatus may include a browser extension configured to intercept the first encoded digital data transmitted in response to a first request from the browser engine. The browser extension may be configured to intercept a first decoder written in a platform-independent syntax for decoding at least a portion of the first encoded digital data. The browser extension may be configured to point the browser engine to one or more local storage locations of the first encoded digital data and the first decoder.

Abstract: In a method for distributed upload of documents an upload email address is assigned to a user and associated with a searchable document database accessible by the user via a user device and a network. Sender acceptance criteria are established for the upload email address. An email addressed to the upload email address and having a sender email address is received from an email sender via the network. A determination is made as to whether the received email meets sender acceptance criteria. Responsive to a determination that the email meets sender acceptance criteria, documents attached to the email are identified. Each identified document is associated with a document record comprising a document identifier and a sender identifier associated with the email sender and is stored in the searchable document database with the document record.

Abstract: Various embodiments are described herein to track the state of components within a network element. One embodiment provides for a network element comprising a control plane including logic to transmit configuration and status of the network element during network element operation, the configuration including a configured state of one or more agents of the control plane and the status including operational status of one or more agents of the control plane; and a data plane to forward network data from an ingress interface to an egress interface, each of the ingress interface and egress interface including one or more counters, wherein the status of the continuously transmitted status of the network element additionally includes the one or more counters of each of the ingress interface and egress interface.

Abstract: Mobile device security, device management, and policy enforcement are described in a cloud-based system where the “cloud” is used to pervasively enforce security and policy and perform device management regardless of device type, platform, location, etc. A method includes receiving one of a mobile profile and an application for an enterprise and a cloud-based system; installing the one of the mobile profile and the application on the mobile device; connecting to a network using the one of the mobile profile and the application; and having traffic content inspected and policy enforced thereon to/from the mobile device and the network via the cloud-based system.

Abstract: A method includes receiving a representation of a predefined planned event that includes the use of a first set of cellular data service infrastructure elements. A performance of the first set of cellular data service infrastructure elements is simulated, and a predicted failure of at least one cellular data service infrastructure element from the first set of cellular data service infrastructure elements is identified based on the simulation. In response to identifying the predicted failure, a modification to the at least one cellular data service infrastructure element or an additional cellular data service infrastructure element is determined and included in a second set of cellular data service infrastructure elements whose performance is subsequently simulated. The simulated performance of the first set of cellular data service infrastructure elements is compared with the simulated performance of the second set of cellular data service infrastructure elements to determine a performance improvement.

Abstract: An information processing system includes an acquirer that acquires, from a user, information related to invitation of persons who share a specific purpose, a receiver that receives a response for acceptance of the invitation, and an outputter that outputs information on a candidate place to be used by the user and an accepter who accepts the invitation.