Abstract: A method and system are disclosed for providing functionality on a network. A mobile agent moves from a first node to a target node and, at the target node, performs as an application layer gateway.

Abstract: A method and apparatus to improve packet processing is disclosed.

Abstract: A method and system are disclosed for analyzing traffic on a network by monitoring network traffic and, when a particular network condition (for example, a network attack) is detected, gathering information about the traffic on the network by launching an agent and having the agent iteratively identify which of the links on the node on which the agent operates accepts a type or class of traffic, traverse the identified link to the node across the link, and repeat the process.

Abstract: In one embodiment, a method is provided. The method of this embodiment includes generating, by a processor that includes a plurality of processing engines capable of executing program instructions, a packet. The method of this embodiment also includes transmitting the packet to at least one of the processing engines. Additionally, the method of this embodiment also includes, in response, at least in part to receipt of the packet by the at least one of the processing engines, modifying at least in part, by the at least one of the processing engines, a set of program instructions that the at least one processing engine is capable of executing. Of course, many modifications, variations, and alternatives are possible without departing from this embodiment.

Abstract: A method and system are disclosed for providing an environment allowing agents to function on a set of devices having resources, the environment providing services allowing agents access to resources. Each agent has an associated permission list indicating which services the agent may access. Each agent may move from an environment on one device on a network to an environment on another device.

Abstract: A method, system or product that identifies data packets with a common characteristic and routes all data packets having the same characteristic to the same thread of execution or device in a system which processes data packets in parallel.

Abstract: Extending network capabilities for a network with a policy-based network management (PBNM) architecture. The method includes sending a first message from a policy enforcement point (PEP) to a policy decision point (PDP) in response to an external action, and sending a Java object in a second message from the PDP to the PEP in response to receiving the first message. The Java object may be executed on the PEP to implement a policy.

Abstract: A system and method of transmitting network packets between network processing elements through links are disclosed. One or more configuration entities may allocate one or more fixed length slots to be appended to network packets forwarded on a link between network processing elements in-band of the link.

Abstract: A method and system analyze traffic on a network by monitoring network traffic and, when a particular network condition (for example, network congestion) is detected, gathering information about the traffic on the network by launching an agent and having the agent iteratively identify which of the links on the node on which the agent operates accepts a type or class of traffic, traverse the identified link to the node across the link, and repeat the process.

Abstract: Enhancing quality of network service for multimedia streams by recognizing audio and video packets over Point-to-Point Protocol links independent of the presence of announcement protocols comprises identifying multimedia packets from data streams and prioritizing each packet according to information that each packet carries.

Abstract: Extending network capabilities for a network with a policy-based network management (PBNM) architecture. The method includes sending a first message from a policy enforcement point (PEP) to a policy decision point (PDP) in response to an external action, and sending a Java object in a second message from the PDP to the PEP in response to receiving the first message. The Java object may be executed on the PEP to implement a policy.

Abstract: An apparatus and method for secure, automated response to distributed denial of service (DDoS) attacks are described. The method includes notification of a DDoS attack received by an Internet host. Once received by an Internet host, the Internet host establishes security authentication from an upstream router from which the attack traffic, transmitted by one or more host computers, is received. The Internet host then transmits filter(s) to the upstream router generated based upon characteristics of the attack traffic. Once installed by the upstream router, the attack traffic is dropped to terminate a DDoS attack. In addition, the router may determine upstream router(s) coupled to ports from which attack traffic is received, and securely forward the filter(s) to the upstream routers as a routing protocol updated in order to drop the attack traffic at a point closer to a source of the DDoS attack.

Abstract: A multicast transmission gating system is provided as a gateway for reception of multicast transmissions for various multicast groups from a public network to a private network having a number of clients. The gating system provides transcoding capability to provide real-time sub-groups to the private network and provides control of access by network clients to prevent bandwidth conflicts and dissemination of secure information. Firewall capabilities are also supported to prevent security breaches of the private network via the multicast facilities of the public network.

Abstract: Enhancing quality of network service for multimedia streams by recognizing audio and video packets over Point-to-Point Protocol links independent of the presence of announcement protocols comprises identifying multimedia packets from data streams and prioritizing each packet according to information that each packet carries.

Abstract: A method for communicating between a sender and a receiver a set of dependencies among a set of media streams in a data network. The method comprises the step of creating a payload data packet having a header and a set of stream descriptors, where the header has a required stream field. Each stream descriptor is uniquely associated with a media stream belonging to the set of media streams and has a connection field to provide a network address for its associated media stream. Each stream descriptor that is associated with a media stream having a dependency also has a dependency field. The method also comprises the steps of creating a control data packet having the payload data packet as a payload; setting the required stream field to a value indicative of a required set of media streams, the required set of media streams being a subset of the set of media streams; and setting the dependency fields to indicate the set of relationships.