Abstract: According to embodiments of the present invention a system and method for encrypting traffic on a network is disclosed. Encrypted data is transmitted between a first network element and a second network element by: acquiring an encryption seed at the first network element, the encryption seed being substantially similar to a decryption seed at the second network element; generating at least one encryption key from the encryption seed; receiving data; encrypting the data using the encryption key to generate encrypted data; transmitting the encrypted data from the first network element to the second network element via a network; and updating the encryption seed at the first network element in response to an event trigger.

Abstract: According to embodiments of the present invention a system and method for encrypting traffic on a network is disclosed.

Abstract: A device may obtain a flow signature, identify a destination collector to which packets bearing the flow signature are sent, obtain a list of potential source collectors that may have sent the packets bearing the flow signature to the destination collector, and identify a source collector, among the potential source collectors, that sent the packets to the destination collector. In addition, the device may output information related to a path from the source collector the destination collector.

Abstract: The present invention provides a system and method for traffic routing. An embodiment includes an engine for identifying groupings of subscriber stations within a particular ISP. The engine can also obtain a block of contiguous addresses for assignment to the subscriber stations. The addresses are assigned from the block to each of the subscriber stations in substantially contiguous sub-blocks based on the groupings. The groupings can be geographic or based on other desired criteria.

Abstract: According to embodiments of the present invention a system and method for encrypting traffic on a network is disclosed.

Abstract: An apparatus comprising a first and a second functional entity operable for supporting traffic in, respectively, first and second traffic categories across a communications network. The second traffic category is associated with specific routing requirements. A network interface releases a request for a first address and a request for a second address. The request for a second address comprises data that is instrumental in causing the second address to be assigned by an address-assigning entity from a particular set of at least one address. The network is pre-configured to route traffic destined for a given address in the particular set of at least one address in accordance with the specific routing requirements. Receipt of the first address from the address-assigning entity enables the first functional entity to act as a receptor of traffic in the first traffic category, while receipt of the second address enables the second functional entity to act as a receptor of traffic in the second traffic category.

Abstract: A device may obtain a flow signature, identify a destination collector to which packets bearing the flow signature are sent, obtain a list of potential source collectors that may have sent the packets bearing the flow signature to the destination collector, and identify a source collector, among the potential source collectors, that sent the packets to the destination collector. In addition, the device may output information related to a path from the source collector the destination collector.

Abstract: A device may obtain a flow signature, identify a destination collector to which packets bearing the flow signature are sent, obtain a list of potential source collectors that may have sent the packets bearing the flow signature to the destination collector, and identify a source collector, among the potential source collectors, that sent the packets to the destination collector. In addition, the device may output information related to a path from the source collector the destination collector.

Abstract: According to embodiments of the present invention a system and method for encrypting traffic on a network is disclosed.

Abstract: The accuracy of configuration data within routers of a network are critical in today's networks for security of the network, efficient operating of the network and to ensure corporate requirements, such as redundancy, are met. Since configuration data is typically entered and modified manually by technicians, considerable human errors occur. A configuration validation system provides an automated capability to ensure accuracy within the routers of a network. In this system, the validation is completed utilizing dynamically set conditions based upon the utilization of the router and a characteristic of the router, such as the model type. The utilization of the router includes the services that are supported by the router and the position of the router within the network, both of these criteria of the router having specific configuration requirements. The utilization of the routers can be detected by look-up within an inventory database and/or analysing the applicable configuration data.

Abstract: The present invention provides a system and method for traffic routing. An embodiment includes an engine for identifying groupings of subscriber stations within a particular ISP. The engine can also obtain a block of contiguous addresses for assignment to the subscriber stations. The addresses are assigned from the block to each of the subscriber stations in substantially contiguous sub-blocks based on the groupings. The groupings can be geographic or based on other desired criteria.

Abstract: An apparatus comprising a first and a second functional entity operable for supporting traffic in, respectively, first and second traffic categories across a communications network. The second traffic category is associated with specific routing requirements. A network interface releases a request for a first address and a request for a second address. The request for a second address comprises data that is instrumental in causing the second address to be assigned by an address-assigning entity from a particular set of at least one address. The network is pre-configured to route traffic destined for a given address in the particular set of at least one address in accordance with the specific routing requirements. Receipt of the first address from the address-assigning entity enables the first functional entity to act as a receptor of traffic in the first traffic category, while receipt of the second address enables the second functional entity to act as a receptor of traffic in the second traffic category.

Abstract: The present invention provides a system and method for traffic routing. An embodiment includes an engine for identifying groupings of subscriber stations within a particular ISP. The engine can also obtain a block of contiguous addresses for assignment to the subscriber stations. The addresses are assigned from the block to each of the subscriber stations in substantially contiguous sub-blocks based on the groupings. The groupings can be geographic or based on other desired criteria.

Abstract: The accuracy of configuration data within routers of a network are critical in today's networks for security of the network, efficient operating of the network and to ensure corporate requirements, such as redundancy, are met. Since configuration data is typically entered and modified manually by technicians, considerable human errors occur. A configuration validation system provides an automated capability to ensure accuracy within the routers of a network. In this system, the validation is completed utilizing dynamically set conditions based upon the utilization of the router and a characteristic of the router, such as the model type. The utilization of the router includes the services that are supported by the router and the position of the router within the network, both of these criteria of the router having specific configuration requirements. The utilization of the routers can be detected by look-up within an inventory database and/or analysing the applicable configuration data.

Abstract: The present invention provides a system and method for traffic analysis. Embodiments can be used to detect malevolent network activity such as worms, viruses, denial of service attacks, and unauthorized network routing. Upon detecting the activity, steps can then be taken to halt the spread and/or remove the malevolent network activity, thereby adding protection from such activity to the network. Other network activity of interest can also be detected.