Abstract: A method, computer program product, apparatus, and system that detects a substring in an input data string by producing a fingerprint of a portion of the data string and comparing the fingerprint of the portion of the data string to at least one predefined fingerprint. The predefined fingerprint may be a fingerprint of a portion of a predefined pattern of interest. If the fingerprints match, further pattern recognition processing may be performed on the input string.

Abstract: The present invention describes methods, systems, and data structures to create and search index records within a trace of a packet-based communications link that has been compressed by organizing the data packets according to which flow they belong. Index points are inserted within the compressed flow trace file to create frames and index records are created and saved for each index point. Consequently, searching for a particular data packet does not require sequentially reading the compressed flow trace file, but rather locating the appropriate index record and its corresponding frame in the compressed flow trace file.

Abstract: The invention relates to a system and method for generating realistic network traffic by replaying captured network traffic using parallelized streams of subtraces. In accordance with one method of the invention, a captured trace of network traffic from a network link is provided. The captured trace is split into a number of subtraces. The subtraces are replayed and then recombined into a recombined trace, wherein the timing of packets in the recombined trace approximates the timing of packets in the captured trace.

Abstract: A method and computer-program product are provided for measuring the Round-Trip Time (RTT) of data flowing thorough a communications network using a single measurement point. The method includes timestamping a first packet traveling past the measurement point and timestamping a second packet traveling past said measurement point. These difference of these two values is the RTT. This RTT can be continuously updated during the life of the connection to provide an evermore accurate RTT measurement. Alternatively, two sub RTTs can be computed and then summed to arrive at the connection's RTT.

Abstract: A method and computer-program product are provided for distinguishing packets sent in successive packet groups. The packet groups are related to each other. The method includes providing an identification point to a connection of a communications network; receiving a sequence number associated with a first packet, which is part of a first group of packets; and receiving a packet-group-length parameter that denotes the number of packets in the first group of packets. Other embodiments are described herein.

Abstract: A method, computer program product, apparatus, and system that detects a substring in an input data string by producing a fingerprint of a portion of the data string and comparing the fingerprint of the portion of the data string to at least one predefined fingerprint. The predefined fingerprint may be a fingerprint of a portion of a predefined pattern of interest. If the fingerprints match, further pattern recognition processing may be performed on the input string.