Abstract: A method and a detection system are provided for detecting encrypted peer-to-peer (EP2P) sessions associated with a particular EP2P network. Seed data associated with the EP2P network is extracted from a selected packet, and an encryption seed is obtained from the seed data. An encryption key is obtained from the encryption seed by using a key function associated with the EP2P network, and a cipher associated with the EP2P network is initialized with the encryption key. A portion or whole of the packet is decrypted, and checksum data associated with the EP2P network is extracted. A checksum is obtained from the checksum data, and the obtained checksum is compared with a reference checksum associated with the EP2P network. If the obtained checksum matches the reference checksum, a session including the packet is determined to be an EP2P session associated with the EP2P network.

Abstract: A method and a discovery system are provided for discovering encrypted peer-to-peer (EP2P) nodes associated with a particular EP2P network. An EP2P connection request associated with the EP2P network is sent to each of a plurality of initial IP address and port number combinations. If an EP2P connection response associated with the EP2P network is received from a particular initial IP address and port number combination, it is determined to belong to an initial EP2P node associated with the EP2P network. An EP2P discovery request associated with the EP2P network is then sent to the particular initial IP address and port number combination, and an EP2P discovery response associated with the EP2P network is received. If the EP2P discovery response includes one or more new IP address and port number combinations, they are determined to belong to one or more new EP2P nodes associated with the EP2P network.

Abstract: According to an aspect of the present invention there is provided a VoIP asset discovery system for discovering and identifying VoIP assets on a VoIP network, the asset discovery system comprising an IP address module for determining at least one IP address to discover, a port scanner for scanning VoIP specific ports of the received IP addresses, a service detection module for detecting a VoIP service at the received IP addresses. The asset discovery system further comprises a fingerprinting module for fingerprinting VoIP applications based on responses received to specific queries and a correlation module for correlating the information from the port scanner module, the service detection module, and the fingerprinting module to identify the instances of the discovered assets.

Abstract: A dynamically adaptive network element telemetry system, leveraging the functionality of a high speed communications network comprising a network element telemetry infrastructure comprised of at least one Performance Monitor (PM) server computer and at least one, and preferably a plurality of Data Collection (DC) node computers comprising a Data Collection Process (DCP) comprising a command handler. The system further comprises a Single Distributed Arena (SDA) encompassing the network element telemetry infrastructure to form a single large parallel virtual application wherein the DCP further comprises a run time telemetry parameter operational change application. The SDA further comprises a telemetry control and collected data filter application providing the primary interface between the DCP and the SDA and a performance telemetry controller to enable the suspension, resumption or change of the parameters of performance telemetry for any network element.

Abstract: A dynamically adaptive network element telemetry system, leveraging the functionality of a high speed communications network comprising a network element telemetry infrastructure comprised of at least one Performance Monitor (PM) server computer and at least one, and preferably a plurality of Data Collection (DC) node computers comprising a Data Collection Process (DCP) comprising a command handler. The system further comprises a Single Distributed Arena (SDA) encompassing the network element telemetry infrastructure to form a single large parallel virtual application wherein the DCP further comprises a run time telemetry parameter operational change application. The SDA further comprises a telemetry control and collected data filter application providing the primary interface between the DCP and the SDA and a performance telemetry controller to enable the suspension, resumption or change of the parameters of performance telemetry for any network element.