Abstract: In one embodiment, a method includes determining that a packet has been dropped for a flow of packets between a source and destination. This may be determined at a network device that is forwarding the packets. Information related to a possible cause for the packet being dropped is then determined. For example, a context as to why the packet is dropped may be determined. The context is then associated with information for the flow and is useful to perform a packet drop analysis for the flow. For example, a source and destination for the flow is recorded along with the possible cause of the packet drop. This information may be stored and sent to an aggregation device. The aggregation device may then analyze the entry, possibly along with other entries from this network device or other network devices, and determine any troubleshooting information for the packet drops.

Abstract: A method and a system for collecting information in a network. A wiretap tunnel interface is initialized between a wire-tapping device and a network device. The wire-tapping device receives information related to routing protocol traffic from the network device through the wiretap tunnel interface. The wire-tapping device collates the received information about the routing protocol traffic. This collated information is used by the network administrator to manage the network.

Abstract: Methods and systems have been provided for pushing critical configuration to a set of network devices. According to various embodiments of the invention, a Network Management Station (NMS) creates a Simple Network Management Protocol (SNMP) context and an SNMP view. Additionally, the NMS specifies a network configuration and a set time period. The NMS pushes the network configuration to the set of network devices. The set of devices apply the network configuration after the set time period.

Abstract: In an embodiment, methods and systems have been provided for detecting changes in a network using improved Simple Network Management Protocol (SNMP) polling that reduces network traffic. Examples of changes in the network include, but are not limited to, configuration and behavioral changes in a network device, and response of network device to a network change. A Network Management Station (NMS) periodically polls Management Information Base (MIB) groups instead of periodically polling individual MIB object instances. The NMS receives the Aggregate Change Identifiers (ACIs) of MIB groups in response to polling, from a SNMP agent. The changes in the received ACIs represent the changes in the MIB groups. A change in an MIB group represents changes in the MIB object instances of the MIB group. The ACIs can be checksum, timestamp, and a combination of number of MIB object instances in a group and checksum of the MIB group.

Abstract: Methods and systems have been provided for pushing critical configuration to a set of network devices. According to various embodiments of the invention, a Network Management Station (NMS) creates a Simple Network Management Protocol (SNMP) context and an SNMP view. Additionally, the NMS specifies a network configuration and a set time period. The NMS pushes the network configuration to the set of network devices. The set of devices apply the network configuration after the set time period.

Abstract: A method and a system are provided for tracking a user in a network. The method and system includes a Network Management System (NMS) to receive notifications from one or more network devices in the network. The notifications are generated by push-based mechanisms. Thereafter, the NMS combines the information received from the notifications in a database. Subsequently, a correlating engine correlates the combined information to track the user.

Abstract: In an embodiment, methods and systems have been provided for detecting changes in a network using improved Simple Network Management Protocol (SNMP) polling that reduces network traffic. Examples of changes in the network include, but are not limited to, configuration and behavioral changes in a network device, and response of network device to a network change. A Network Management Station (NMS) periodically polls Management Information Base (MIB) groups instead of periodically polling individual MIB object instances. The NMS receives the Aggregate Change Identifiers (ACIs) of MIB groups in response to polling, from a SNMP agent. The changes in the received ACIs represent the changes in the MIB groups. A change in an MIB group represents changes in the MIB object instances of the MIB group. The ACIs can be checksum, timestamp, and a combination of number of MIB object instances in a group and checksum of the MIB group.

Abstract: Methods and systems have been provided for pushing critical configuration to a set of network devices. According to various embodiments of the invention, a Network Management Station (NMS) creates a Simple Network Management Protocol (SNMP) context and an SNMP view. Additionally, the NMS specifies a network configuration and a set time period. The NMS pushes the network configuration to the set of network devices. The set of devices apply the network configuration after the set time period.

Abstract: In one embodiment, an apparatus comprises one or more forwarding logic components and logic coupled to a plurality of network interfaces. The logic is operable to: receive address information that identifies a packet flow; generate a synthetic packet based on the address information; provide the synthetic packet to the one or more forwarding logic components; retrieve forwarding information that indicates one or more forwarding decisions for the synthetic packet made by the one or more forwarding logic components; and report the forwarding information. Each of the one or more forwarding logic components is operable to make a forwarding decision for the synthetic packet as part of processing packets in the packet flow, and to store, as part of the forwarding information, data indicating the forwarding decision for the synthetic packet that is made by that forwarding logic component.

Abstract: Various embodiments provide an apparatus and method for sharing a generic configuration across a group of network devices. An example embodiment includes sending a scope challenge to a plurality of network devices; receiving a response to the scope challenge from a plurality of in-scope network devices; sending a configuration change message including a configuration change to the plurality of in-scope network devices; and receiving a commit message from the plurality of in-scope network devices indicating that the configuration change has been committed.

Abstract: In one embodiment, an apparatus comprises one or more forwarding logic components and logic coupled to a plurality of network interfaces. The logic is operable to: receive address information that identifies a packet flow; generate a synthetic packet based on the address information; provide the synthetic packet to the one or more forwarding logic components; retrieve forwarding information that indicates one or more forwarding decisions for the synthetic packet made by the one or more forwarding logic components; and report the forwarding information. Each of the one or more forwarding logic components is operable to make a forwarding decision for the synthetic packet as part of processing packets in the packet flow, and to store, as part of the forwarding information, data indicating the forwarding decision for the synthetic packet that is made by that forwarding logic component.

Abstract: In one embodiment, a method includes determining that a packet has been dropped for a flow of packets between a source and destination. This may be determined at a network device that is forwarding the packets. Information related to a possible cause for the packet being dropped is then determined. For example, a context as to why the packet is dropped may be determined. The context is then associated with information for the flow and is useful to perform a packet drop analysis for the flow. For example, a source and destination for the flow is recorded along with the possible cause of the packet drop. This information may be stored and sent to an aggregation device. The aggregation device may then analyze the entry, possibly along with other entries from this network device or other network devices, and determine any troubleshooting information for the packet drops.

Abstract: A method and a system are provided for tracking a user in a network. The method and system includes a Network Management System (NMS) to receive notifications from one or more network devices in the network. The notifications are generated by push-based mechanisms. Thereafter, the NMS combines the information received from the notifications in a database. Subsequently, a correlating engine correlates the combined information to track the user.

Abstract: In an embodiment, methods and systems have been provided for detecting changes in a network using improved Simple Network Management Protocol (SNMP) polling that reduces network traffic. Examples of changes in the network include, but are not limited to, configuration and behavioral changes in a network device, and response of network device to a network change. A Network Management Station (NMS) periodically polls Management Information Base (MIB) groups instead of periodically polling individual MIB object instances. The NMS receives the Aggregate Change Identifiers (ACIs) of MIB groups in response to polling, from a SNMP agent. The changes in the received ACIs represent the changes in the MIB groups. A change in an MIB group represents changes in the MIB object instances of the MIB group. The ACIs can be checksum, timestamp, and a combination of number of MIB object instances in a group and checksum of the MIB group.