Abstract: A network switch includes multiple ports that serve as ingress ports and egress ports for connecting to a communication network, and processing circuitry. The processing circuitry is configured to receive packets via the ingress ports, select one or more of the packets for mirroring, create mirror copies of the selected packets and output the mirror copies for analysis, mark the packets for which mirror copies have been created with mirror-duplicate indications, and forward the packets to the egress ports, including the packets that are marked with the mirror-duplicate indications.

Abstract: A network element includes multiple ports and packet processing circuitry. The ports are configured for exchanging packets with a communication network. The packet processing circuitry is configured to forward first packets over a forward path from a source node to a destination node, to forward second packets over a reverse path, which is opposite in direction to the forward path, from the destination node to the source node, and to mark one or more of the second packets that are forwarded over the reverse path, with an indication that notifies the source node that congestion is present on the forward path.

Abstract: An Integrated Circuit (IC) includes multiple ports and packet processing circuitry. The ports are configured to serve as ingress ports and egress ports for receiving and transmitting packets from and to a communication network. The packet processing circuitry is configured to forward the packets between the ingress ports and the egress ports, to read an indication that specifies whether the IC is to operate in an internal buffer configuration or in an off-chip buffer configuration, when the indication specifies the internal buffer configuration, to buffer the packets internally to the IC, and, when the indication specifies the off-chip buffer configuration, to configure one or more of the ports for connecting to a memory system external to the IC, and for buffering at least some of the packets in the memory system, externally to the IC.

Abstract: A network element includes circuitry and multiple ports. The multiple ports are configured to connect to a communication network. The circuitry is configured to receive multiple packets from the communication network via one or more input ports, and store the received packets in a buffer of the network element, to schedule transmission of the packets stored in the buffer to the communication network via one or more output ports, and in response to a request to provide a snapshot of at least a portion of the buffer, to mirror for transmission, via one or more dedicated ports, only a part of the portion that was received in the network element prior to the request.

Abstract: A method, system and product for mapping objects on movable platforms, including, obtaining sensor information from sensors of user devices, wherein the sensor information indicates that the user devices are in proximity to anchor stations; defining a timeframe for analysis based on an indication extracted from the sensor information that the movable platform is stationary throughout the timeframe; determining a relative location of the anchor stations within the movable platform, whereby automatically determining a mapping of the anchor stations within the movable platform; obtaining a reading from a user device when the user device is located in proximity to at least one of the anchor stations; and determining a relative location of the user device within the movable platform based on the mapping of the anchor stations within the movable platform and based on the reading from the user device.

Abstract: A method, product and system for three dimensional map generation based on crowdsourced positioning readings. The method comprising obtaining a plurality of positioning readings of a plurality of mobile devices. Each reading of the plurality of positioning readings is indicative of an altitude, latitude and longitude of a mobile device, and is determined using one or more sensors of the mobile device. The method comprises clustering the plurality of positioning readings to determine clusters of positioning readings. for each cluster, an altitude value is computed, based on an altitude of each positioning reading in the cluster, whereby determining an estimated altitude based on non-accurate altitude readings. The three-dimensional map is generated based on the plurality of positioning readings and the altitude value of each cluster.

Abstract: A method, system and product to be implemented at a server, including receiving from a user device a request associated with obtaining a web resource; handling the request, wherein, based on the handling, the web resource is obtained and provided to the user device; and transmitting an indication of the request to a predetermined port of the user device. Another method, system and product to be implemented at a user device, includes transmitting from a software product a plurality of requests of web resources; receiving by a software agent a plurality of indications of the plurality of requests via a predetermined port of the user device; and performing by the software agent an analysis of the plurality of requests of web resources, thereby determining for a user of the user device one or more user parameters associated with a personalized profile of the user.

Abstract: A network element includes a data structure, a cache memory and circuitry. The data structure is configured to store multiple rules specifying processing of packets received from a communication network. The cache memory is configured to cache multiple rules including a subset of the rules stored in the data structure. Each rule that is cached in the cache memory has a respective cost value corresponding to a cost of retrieving the rule from the data structure. The circuitry is configured to receive one or more packets from the communication network, to process the received packets in accordance with one or more of the rules, by retrieving the rules from the cache memory when available, or from the data structure otherwise, to select a rule to be evicted from the cache memory, based on one or more respective cost values of the rules currently cached, and to evict the selected rule.

Abstract: A network element includes multiple output ports and circuitry. The multiple output ports are configured to transmit packets over multiple respective network links of a communication network. The circuitry is configured to receive from the communication network, via one or more input ports of the network element, packets that are destined for transmission via the multiple output ports, to monitor multiple data-counts, each data-count corresponding to a respective output port, and is indicative of a respective data volume of the packets forwarded for transmission via the respective output port, to select for a given packet, based on the data-counts, an output port among the multiple output ports, and to forward the given packet for transmission via the selected output port.

Abstract: A network switch includes multiple ports that serve as ingress ports and egress ports for connecting to a communication network, and processing circuitry. The processing circuitry is configured to receive packets via the ingress ports, select one or more of the packets for mirroring, create mirror copies of the selected packets and output the mirror copies for analysis, mark the packets for which mirror copies have been created with mirror-duplicate indications, and forward the packets to the egress ports, including the packets that are marked with the mirror-duplicate indications.

Abstract: In a packet network of ingress nodes and egress nodes connected by a fabric transmit queues are associated with a hash table that stores packet descriptors. When new packets are received in the ingress nodes, credits are obtained from the egress nodes that reflect capacities of the transmit queues to accommodate the new packets. The credits are consumed by transmitting at least a portion of the new packets from the ingress nodes to the egress nodes via the fabric and storing descriptors of the new packets in a hash table. In order to transmit the packets in order by sequence number, when a desired packet sequence number is found by a hash lookup, the new packet having that sequence number is forwarded through the egress nodes.

Abstract: A network box accepts packets from a network in ingress ports of a first tier of leaf switches, adaptively routes the packets from the leaf switches to a second tier of spine switches within the network box, statically routes the packets from the spine switches to designated egress ports of the leaf switches, and transmits the packets from the designated egress ports into the network.

Abstract: A method, system and product for computer-aided hunting for location-based events. The computer-aided hunting may be based on providing an automatic suggestion of a proposed waiting location. A method includes computing, a proposed location for a driver of a vehicle, wherein the proposed location is an approximated location where the vehicle can wait until a location-based event occurs occurring in a geographical area. The computing includes: computing, for each potential location within the geographical area, computing a measurement indicative of an estimated elapsed time until the location based event occurring in a proximity of the potential location; and selecting the proposed location from the potential location based on the computed measurements, and providing the proposed location to the driver.

Abstract: A method, system and product for computer-aided hunting for location-based events. The computer-aided hunting may be based on providing an automatic suggestion of a proposed waiting location. A method includes computing, a proposed location for a driver of a vehicle, wherein the proposed location is an approximated location where the vehicle can wait until a location-based event occurs occurring in a geographical area. The computing includes: computing, for each potential location within the geographical area, computing a measurement indicative of an estimated elapsed time until the location based event occurring in a proximity of the potential location; and selecting the proposed location from the potential location based on the computed measurements, and providing the proposed location to the driver.

Abstract: A method for packet generation includes designating a group of one or more ports, from among multiple ports of one or more network elements, to perform the packet generation. A circular packet path, which traverses one or more buffers of the ports in the group, is configured. A burst of one or more packets is provided to the group, so as to cause the burst of packets to repeatedly traverse the circular packet path. A packet stream, including the repeated burst of packets, is transmitted from one of the ports.

Abstract: Packet classification apparatus includes a plurality of switches, including one or more leaf switches and one or more spine switches, each including a memory configured to hold packet classification entries. The ports of the leaf switches include external ports for connection to a packet network and internal ports, which are connected to the ports of at least one of the spine switches. The packet classification entries are selected from a database, which includes an outer partition, which is stored in the memory of the leaf switches, and at least one inner partition, which is stored in the memory of the one or more spine switches.

Abstract: A method for packet processing includes representing a routing table for a network as a binary search tree of address prefixes ordered by prefix lengths. For each node j in the binary search tree, a respective hash table is stored, including entries representing the address prefixes of length Lj. Each address prefix includes Lj-c most significant bits (MSB) and c least significant bits (LSB), and each entry in the respective hash table includes a matching value corresponding to the Lj-c MSB of one or more of the address prefixes and one or more action codes indexed by the c LSB of the one or more of the address prefixes. Upon receiving from the network a data packet having a destination address, the binary search tree is traversed to find a longest prefix match by performing, at each node j, a hash lookup in the respective hash table.

Abstract: A method for processing network packets in a network device is described. A network packet is stored in a transient buffer as the network packet is being received at an ingress port of the network device. After at least a first portion of the network packet has been received and before the entire network packet has been received: the first portion is processed to identify an egress port of the network device from which the network packet is to be transmitted; a congestion state of the egress port is determined; and the network packet is selectively transferred from the transient buffer to the identified egress port for transmission from the network device or a different action is performed on the network packet, based on the congestion state.

Abstract: An electronic apparatus includes a permutation circuit and an arbitration circuit. The permutation circuit is configured to apply to an input vector a permutation selected from a plurality of predefined permutations in response to a control word. The arbitration circuit is configured to receive a vector of requests for a resource, to instruct the permutation circuit to apply a randomly-selected permutation to the vector of requests, by configuring the permutation circuit with a corresponding randomly-selected control word so as to produce a permuted vector, to select an element of the permuted vector, to apply to the permuted vector an inverse of the randomly-selected permutation so as to produce an inversely-permuted vector, to identify an element of the inversely-permuted vector to which the selected element of the permuted vector is mapped, and to assign the resource to a client corresponding to the identified element of the inversely-permuted vector.

Abstract: A network device includes circuitry and multiple ports. The circuitry is configured to hold a definition of a normalization function that determines, based on (i) a reference probability of applying a congestion indication operation to packets having a predefined reference packet-size and (ii) a packet-size parameter, a normalized probability of applying the congestion indication operation to packets whose size equals the packet-size parameter. The normalization function depends exponentially on a ratio between the packet-size parameter and the reference packet-size. The circuitry id configured to store packets in a queue, and to schedule transmission of at least some of the queued packets via an output port, to calculate the normalized probability for a given packet, by applying the normalization function to an actual reference probability and an actual size of the given packet, and randomly apply a congestion indication operation to the given packet, in accordance with the normalized probability.