Abstract: A method of obtaining instructions for routing a packet is described that includes receiving a packet having a packet flow identifier that includes a packet source IP address, a packet destination IP address, a packet source port, and a packet destination port and checking whether the packet flow identifier matches a stored instruction. If the packet flow identifier does not match a stored instruction, whether the packet flow identifier matches a stored criteria is checked and if the packet matches a stored criteria, the packet is forwarded to a service manager.

Abstract: A network is disclosed that includes a first tier of forwarding agents connected to a first tier of network devices. A second tier of forwarding agents is connected to a second tier of network devices. A service manager is configured to receive a packet from one of the forwarding agents; determine the tier of the forwarding agent; and send an instruction to the forwarding agent directing the forwarding agent to forward the packet to a network device connected to the tier of forwarding agents that includes the forwarding agent.

Abstract: This invention is a synchronization abstraction layer (SAL) providing a uniform interface to frameworks operating on sequenced flow data. It allows content developers to design and build interactive content that will operate interchangeably in different multimedia frameworks (e.g., Apple Computer, Inc.'s QuickTime™, Microsoft Corporation's NetShow™, RealNetworks, Inc.'s RealPlayer™, Sun Microsystems, Inc.'s Java™ Media Framework) and on different hardware platforms (e.g., desktop PC, Macintosh™, Television set-top boxes such as those from General Instrument Corporation and Scientific Atlanta Inc., Inc., Internet appliances such as AOL™-TV, and other appliances, e.g., a kitchen Internet radio).

Abstract: A system and method are disclosed for controlling access to a server. Instructions are sent to a forwarding agent that instruct the forwarding agent to forward packets to a service manager from clients attempting to establish a client connection to the server. A client connection is established with the client. A server connection is established from the service manager to the server and data is transferred from the server connection to the client connection.

Abstract: A system and method for providing a network service is described. A fragment criteria is sent from a service manager to a forwarding agent that instructs the forwarding agent how to determine whether a received packet fragment at the forwarding agent matches the fragment criteria. A matching packet fragment is received from the forwarding agent at the fragment service manager. The fragment is assembled into a packet at the fragment service manager and in the event that the fragment completes the packet, a flow identifier specifying a flow is determined from the completed packet and completed packet is sent to a service manager that handles the flow specified in the flow identifier.

Abstract: A system and method are disclosed for providing a plurality of network services. The method includes receiving at a forwarding agent a plurality of matching instructions corresponding to a specified flow from one or more service managers and storing the plurality of matching instructions on the forwarding agent having a forwarding agent network interface. A packet for the specified flow at the forwarding agent is received on the forwarding agent network interface. A highest service priority matching instruction stored on the forwarding agent is determined. The packet is processed according to the highest priority matching instruction. A next highest service priority matching instruction stored on the forwarding agent is determined and the packet is processed according to the next highest service priority matching instruction.

Abstract: A method is disclosed for monitoring a complex system, such as a fleet of aircraft, having multiple sub-systems described by a plurality of operating parameters. Data pertaining to the operating parameters is continually generated during operation of the vehicles. The data is normalized to take into account variability factor and stored in a central database. New incoming data from the sub-systems is continually compared with the stored data to identify abnormalities. The invention is applicable to the monitoring of a fleet of aircraft.

Abstract: A computer server talent management system facilitates management of temporary staff procurement and administration. The server provides a network based implementation of an improved process that allows workplace managers to initiate the procurement of temporary staff in a familiar manner, such as by calling, emailing or faxing the vendor. The Vendor then uses an interface provided by the server to generate a purchase order based on a workplace company's specific template. The purchase order is then sent to the workplace manager, who uses interfaces provided by the server to approve the purchase order in accordance with rules enforced by the server.

Abstract: A system and method are disclosed for providing a fault tolerant network service. A packet is received that corresponds to a flow from a forwarding agent at a primary service manager and instructions are determined at the primary service manager for handling packets corresponding to the flow. The instructions are sent to the forwarding agent and the instructions are stored at the primary service manager. A replication packet is sent to a backup service manager. The replication packet includes the instructions for handling packets corresponding to the flow.

Abstract: A method and system for extending an extensible framework is provided. An extension module for an extensible framework is coupled with an abstraction layer overlaying the extensible framework. The abstraction layer includes a uniform cross-platform interface between the extension module and the extensible framework.

Abstract: A system and method are disclosed for providing a network service. A first criteria specifying a first set of flows from a first service manager is received at a forwarding agent. The first criteria specifies an expiration time interval. The first criteria is stored on the forwarding agent. A second criteria is received that specifies a second set of flows from a second service manager at the forwarding agent. The second set of flows includes flows that are in the first set of flows and the second criteria is designated as a lower priority criteria. The second criteria is stored on the forwarding agent. The first criteria is deleted from the forwarding agent upon the expiration of the expiration time interval. A packet is received that belongs to a flow that is included in the first set and the second set. It is determined that the packet matches the second set ant the packet is forwarded to the second service manager.

Abstract: A method for monitoring information in a network environment is provided that includes receiving one or more packets from a communication flow initiated by an end user. The information associated with the communication flow is then selectively communicated to a plurality of client-aware network elements.

Abstract: A wireless intrusion detection system (WIDS) is disclosed for monitoring both authorized and unauthorized access to a wireless portion of a network. The WIDS consists of a collector and one or more nodes that communicate via an out of band means that is separate from the network. Unauthorized access points and unauthorized clients in the network can be detected. The WIDS can be used to monitor, for example, a network implemented using the 802.11 protocol. In addition, the WIDS can be used by one company to provide a service that monitors the wireless network of another company.

Abstract: A system and method are disclosed for specifying network address translation for a set of packets. A first set of instructions is sent to a forwarding agent specifying criteria for designated packets that are designated to undergo network address translation. A matching packet is received from the forwarding agent that matches the specified criteria. A network address translation scheme is determined for the matching packet. A second set of instructions are sent specifying the network address translation scheme for packets associated with the matching packet.

Abstract: A system and method are described for partitioning a network service among a plurality of service managers. The method includes configuring a first service manager to send a first request to a forwarding agent for packets meeting a first criteria and sending the first request to the forwarding agent. A second service manager is configured to send requests to the forwarding agent for packets meeting a second criteria and the second request is sent to the forwarding agent. Packets are checked at the forwarding agent to determine whether the packets meet the first criteria or the second criteria and packets that meet the first criteria are received at the first service manager; and packets that meet the second criteria are received at the second service manager.

Abstract: A system and method are disclosed for providing a network service. The method includes storing at a forwarding agent a tag table. The tag table includes a list of tags and each tag specifies an interface and a destination. An instruction is received from a service manager specifying an overriding packet destination. The overriding packet destination is a destination that corresponds to a specific destination in a specific one of the tags. A packet is dispatched from the forwarding agent to the overriding packet destination using the specific one of the tags in response to the instruction from the service manager.

Abstract: A method of obtaining instructions for routing a packet is described that includes receiving a packet having a packet flow identifier that includes a packet source IP address, a packet destination IP address, a packet source port, and a packet destination port and checking whether the packet flow identifier matches a stored instruction. If the packet flow identifier does not match a stored instruction, whether the packet flow identifier matches a stored criteria is checked and if the packet matches a stored criteria, the packet is forwarded to a service manager.

Abstract: A system and method are described for gathering statistics about packets. The method includes determining at a service manager statistics that are to be gathered for a flow and sending instructions to a forwarding agent from the service manager detailing how to gather statistics for the flow. The forwarding agent is implemented on a network device and the forwarding agent is operative to receive statistics gathering instructions for a flow from the service manager. A report is received at the service manager of statistics gathered at the forwarding agent according to the instructions sent by the service manager.

Abstract: A method is disclosed for monitoring a complex system, such as a fleet of aircraft, having multiple sub-systems described by a plurality of operating parameters. Data pertaining to the operating parameters is continually generated during operation of the vehicles. The data is normalized to take into account variability factor and stored in a central database. New incoming data from the sub-systems is continually compared with the stored data to identify abnormalities. The invention is applicable to the monitoring of a fleet of aircraft.

Abstract: A system and method are described for providing instructions for forwarding packets. The method includes broadcasting a general instruction specifying a plurality of flows to a plurality of forwarding agents and receiving at a service manager a first message responsive to the general instruction indicating that a packet for a specific flow has been received by a specific forwarding agent. A specific instruction is generated at the service manager for handling the specific flow and the specific instruction for handling the specific flow is sent to the specific forwarding agent.