Abstract: The present invention is a system and method for managing content across one or more storage device systems. A typical system according to the present invention includes one or more indexing systems and a set of storage device systems. Each indexing system monitors usage of content stored on the storage systems. Based upon usage of particular content, an indexing system may issue requests such as move, delete or copy to more efficiently utilize the overall storage capacity of the storage system. All indexing systems monitor the servicing of such requests and update stored data concerning the file subject to the request accordingly.

Abstract: Disclosed is a system and method for distributing connections among a plurality of servers at an Internet site. All connections are made to a single IP address and a local director selects the server from among the plurality of servers which is to receive the connection. Thus, the DNS server is not relied upon to distribute connections, and the connection distribution scheme is not avoided when DNS is bypassed. In one embodiment, a session distribution scheme is implemented such that connections are distributed to the server in the group of servers which has the fewest connections of the group. In other embodiments, other session distribution schemes which route connections based on the predicted response times of the servers or according to a round robin scheme are used.

Abstract: A system and method are disclosed for providing perform network address translation of network layer addresses of packets exchanged between nodes on a local network and nodes outside the local network. This allows local hosts in an enterprise network to share global IP addresses from a limited pool of such addresses available to the enterprise. The translation may be accomplished by replacing the source address in headers on packets destined for the Internet and by replacing destination address in headers on packets entering the local enterprise network from the Internet. Packets arriving from the Internet are screened by an adaptive security algorithm. According to this algorithm, packets are dropped and logged unless they are deemed nonthreatening.

Abstract: A method of communicating data between a client and a server includes initiating a participating application for transmitting packets between a client and a server. The participating application participates in a transport protocol. The method also includes initiating a non-participating application for transmitting packets between the client and the server. The non-participating application does not participate in the transport protocol. Additionally, the method includes determining whether to transmit a packet from the client to the server using the participating application or the non-participating application.

Abstract: Disclosed is a system and method for distributing connections among a plurality of servers at an Internet site. All connections are made to a single IP address and a local director selects the server from among the plurality of servers which is to receive the connection. Thus, the DNS server is not relied upon to distribute connections, and the connection distribution scheme is not avoided when DNS is bypassed. In one embodiment, a session distribution scheme is implemented such that connections are distributed to the server in the group of servers which has the fewest connections of the group. In other embodiments, other session distribution schemes which route connections based on the predicted response times of the servers or according to a round robin scheme are used.

Abstract: A system and method are disclosed for transparently proxying a connection to a protected machine. The method includes monitoring a communication packet on a network at a proxy machine. The communication packet has a communication packet source address, source port number, destination address, and destination port number. The proxy determines whether to intercept the communication packet based on whether the communication packet destination address and the communication packet destination port number correspond to a protected destination address and a protected destination port number stored in a proxy list. The proxy machine then determines whether to proxy a proxied connection associated with the communication packet based on the communication packet source address and the communication packet source port number. A protected connection is terminated from the proxy machine to a protected machine.

Abstract: A system and method are provided for translating local IP addresses to globally unique IP addresses. This allows local hosts in an enterprise network to share global IP addresses from a limited pool of such addresses available to the enterprise. The translation is accomplished by replacing the source address in headers on packets destined for the Internet and by replacing destination address in headers on packets entering the local enterprise network from the Internet. Packets arriving from the Internet are screened by an adaptive security algorithm. According to this algorithm, packets are dropped and logged unless they are deemed nonthreatening. DNS packets and certain types of ICMP packets are allowed to enter local network. In addition, FTP data packets are allowed to enter the local network, but only after it has been established that their destination on the local network initiated an FTP session.

Abstract: The present invention is a system and method for managing content across one or more storage device systems. A typical system according to the present invention includes one or more indexing systems and a set of storage device systems. Each indexing system monitors usage of content stored on the storage systems. Based upon usage of particular content, an indexing system may issue requests such as move, delete or copy to more efficiently utilize the overall storage capacity of the storage system. All indexing systems monitor the servicing of such requests and update stored data concerning the file subject to the request accordingly.

Abstract: A system and method are disclosed for transparently proxying a connection to a protected machine. The method includes monitoring a communication packet on a network at a proxy machine. The communication packet has a communication packet source address, a communication packet source port number, a communication packet destination address, and a communication packet destination port number. The proxy determines whether to intercept the communication packet based on whether the communication packet destination address and the communication packet destination port number correspond to a protected destination address and a protected destination port number stored in a proxy list. The proxy then determines whether to proxy a proxied connection associated with the communication packet based on the communication packet source address and the communication packet source port number. A protected connection is terminated from the proxy machine to a protected machine.

Abstract: The present invention is a system and method supporting efficient distribution of file access requests across one or more storage device systems. A typical system according to the present invention includes a gateway system, one or more indexing system and one or more storage device systems. File access requests are initially received by the gateway system. The gateway system forwards a received file access request to a selected indexing system; the gateway system maintains information concerning the connection between the originator of the request and the selected indexing system. The selected indexing system determines the locations at which the requested file is stored among the storage device systems and selects one of these locations. The selected indexing system forwards the file access request to the storage device system indicated by the selected location, which responds by breaking the requested file into data packets and transmitting the data packets to the request originator.

Abstract: A method for eliminating use of a transfer protocol on a proxied connection includes deriving a client originated packet sequence synchronization factor and a server originated packet sequence synchronization factor. The method further includes adjusting a client originated data acknowledgement number and a client originated data sequence number based on the client originated packet sequence synchronization factor, and adjusting a server originated data sequence number and a server originated data acknowledgement number based on the server originated packet sequence synchronization factor. The method also includes initiating a non-participating application that is not participating in the transfer protocol.

Abstract: A system and method are provided for translating local IP addresses to globally unique IP addresses. This allows local hosts in an enterprise network to share global IP addresses from a limited pool of such addresses available to the enterprise. The translation is accomplished by replacing the source address in headers on packets destined for the Internet and by replacing destination address in headers on packets entering the local enterprise network from the Internet. Packets arriving from the Internet are screened by an adaptive security algorithm. According to this algorithm, packets are dropped and logged unless they are deemed nonthreatening. DNS packets and certain types of ICMP packets are allowed to enter local network. In addition, FTP data packets are allowed to enter the local network, but only after it has been established that their destination on the local network initiated an FTP session.

Abstract: A system and method are disclosed for transparently proxying a connection to a protected machine. The method includes monitoring a communication packet on a network at a proxy machine. The communication packet has a communication packet source address, a communication packet source port number, a communication packet destination address, and a communication packet destination port number. The proxy determines whether to intercept the communication packet based on whether the communication packet destination address and the communication packet destination port number correspond to a protected destination address and a protected destination port number stored in a proxy list. The proxy then determines whether to proxy a proxied connection associated with the communication packet based on the communication packet source address and the communication packet source port number. A protected connection is terminated from the proxy machine to a protected machine.

Abstract: Disclosed are systems and methods for performing customer checkout transactions by processing customer-selected items with data on customer cards.

Abstract: Disclosed is a system and method for distributing connections among a plurality of servers at an Internet site. All connections are made to a single IP address and a local director selects the server from among the plurality of servers which is to receive the connection. Thus, the DNS server is not relied upon to distribute connections, and the connection distribution scheme is not avoided when DNS is bypassed. In one embodiment, a session distribution scheme is implemented such that connections are distributed to the server in the group of servers which has the fewest connections of the group. In other embodiments, other session distribution schemes which route connections based on the predicted response times of the servers or according to a round robin scheme are used.

Abstract: A system and method are disclosed for bypassing a participating application that receives data from a client connection between a proxy and a client and receives data from a server connection between a proxy and a server is disclosed. The method includes deriving a client originated packet sequence synchronization factor. The client originated packet sequence synchronization factor is derived from the difference between a last data sequence number sent by the participating application to the server and a last data acknowledgment number sent by the participating application to the client. A server originated packet sequence synchronization factor is derived from the difference between a last data sequence number sent by the participating application to the client and a last data acknowledgment number sent by the participating application to the server.

Abstract: A system and method are disclosed for redirecting a connection from a first server having a first server IP address. Incoming SYN packets sent from a client are intercepted. The SYN packets have a destination IP address corresponding to the connection and the SYN packets are sent from the client for the purpose of establishing the connection, which is supported by the first server. The number of incoming SYN packets sent from the client to the first server is monitored and it is determined whether the number of unanswered SYN packets sent by the client to the first server exceeds a ditched connection threshold number of unanswered SYN packets. The destination IP address of intercepted incoming SYN packets is changed for the connection received after determining that the number of unanswered SYN requests sent by the client to the first server exceeds a ditched connection threshold number of unanswered SYN requests to the destination IP address of a second server.

Abstract: A system and method are disclosed for providing a failover for designating a primary network device and a backup network device and providing direct communication between the primary network device and the backup network device. The cable includes a plurality of conductive wires having a primary end and a backup end. A primary connector is connected to the plurality of conductive wires at the primary end of the plurality of conductive wires. The primary connector has a primary plug driver pin and a primacy select pin, and the primary plug driver pin is connected to the primacy select pin. A backup connector is connected to the plurality of conductive wires at the backup end of the plurality of conductive wires, the backup connector has a grounded pin and a backup select pin and the backup grounded pin is connected to the backup select pin. Thus, the primary end of the failover cable is distinguishable from the backup end of the failover cable.

Abstract: A system and method are disclosed for transferring a network function from a primary network device to a backup network device. The backup network device first detects that the primary network device has failed. The backup network device then sends a message to the primary network device indicating to the primary network device that the primary network device has failed. The IP address of the backup network device changes from a standby IP address to an active IP address, and the IP address of the primary network device changes from the active IP address to the standby IP address. Packets sent to the active IP address are then handled with the backup network device.

Abstract: A system and method are disclosed for redirecting a connection from a first server having a first server IP address. Incoming SYN packets sent from a client are intercepted. The SYN packets have a destination IP address corresponding to the connection and the SYN packets are sent from the client for the purpose of establishing the connection, which is supported by the first server. The number of incoming SYN packets sent from the client to the first server is monitored and it is determined whether the number of unanswered SYN packets sent by the client to the first server exceeds a ditched connection threshold number of unanswered SYN packets. The destination IP address of intercepted incoming SYN packets is changed for the connection received after determining that the number of unanswered SYN requests sent by the client to the first server exceeds a ditched connection threshold number of unanswered SYN requests to the destination IP address of a second server.