Abstract: A network device includes circuitry and multiple ports. The circuitry is configured to hold a definition of a normalization function that determines, based on (i) a reference probability of applying a congestion indication operation to packets having a predefined reference packet-size and (ii) a packet-size parameter, a normalized probability of applying the congestion indication operation to packets whose size equals the packet-size parameter. The normalization function depends exponentially on a ratio between the packet-size parameter and the reference packet-size. The circuitry id configured to store packets in a queue, and to schedule transmission of at least some of the queued packets via an output port, to calculate the normalized probability for a given packet, by applying the normalization function to an actual reference probability and an actual size of the given packet, and randomly apply a congestion indication operation to the given packet, in accordance with the normalized probability.

Abstract: In a method for managing a network device a current hash value is determined for a current key to be inserted into a lookup table. The current hash value associated with a current set of memory locations in the lookup table, wherein the current set of memory locations includes a memory location corresponding to the current hash value and one or more other memory locations. In response to determining that each memory location in the current set of memory location is occupied, one or multiple previously stored keys in the lookup table are iteratively moved to other memory locations in the lookup table to free up a memory location in the current set of memory locations, the current key is inserted into the freed up memory location.

Abstract: A network element includes multiple interfaces and circuitry. The interfaces are configured to connect to a communication system. The circuitry is configured to monitor a respective buffering parameter of data flows received via an ingress interface and queued while awaiting transmission via respective egress interfaces, to identify, based on the respective buffering parameter, at least one data flow for mirroring, to select one or more packets of the identified data flow for analysis by a network manager, and to send the selected packets to the network manager over the communication system via an egress interface.

Abstract: Methods, apparatuses and products for associating external devices to vehicles and usage of said association. One method obtains information from one or more mobile devices that are connected to the external device. The information is used to determine that the external device is associated with a vehicle, whereby another mobile device is enabled to determine that it is being located on the vehicle based on the mobile device being connected to the external device. Another method obtains an indication that a mobile device is connected to an external device. A database is accessed to retrieve an associated of the external device with a vehicle, whereby it is deduced that the mobile device is located in or on the vehicle. In response to the deduction, a predetermined action may be performed.

Abstract: A collection of rules comprising fields that may have wildcard values. The method includes defining first and second subsets of the fields, the second subset being exclusive of the first subset. Intersections of overlapping fields of the first subset are added to the first subset to form an augmented first subset. Metadata from the augmented first subset and the fields not selected for the first subset are combined to define second parts of the rules. Data items are classified by matching a search key to one of the first parts and one of the second parts of the rules.

Abstract: A method for packet processing includes representing a routing table for a network as a binary search tree of address prefixes ordered by prefix lengths. For each node j in the binary search tree, a respective hash table is stored, including entries representing the address prefixes of length Lj. Each address prefix includes Lj?c most significant bits (MSB) and c least significant bits (LSB), and each entry in the respective hash table includes a matching value corresponding to the Lj?c MSB of one or more of the address prefixes and one or more action codes indexed by the c LSB of the one or more of the address prefixes. Upon receiving from the network a data packet having a destination address, the binary search tree is traversed to find a longest prefix match by performing, at each node j, a hash lookup in the respective hash table.

Abstract: A method, product and system for three dimensional map generation based on crowdsourced positioning readings. The method comprising obtaining a plurality of positioning readings of a plurality of mobile devices. Each reading of the plurality of positioning readings is indicative of an altitude, latitude and longitude of a mobile device, and is determined using one or more sensors of the mobile device. The method comprises clustering the plurality of positioning readings to determine clusters of positioning readings. for each cluster, an altitude value is computed, based on an altitude of each positioning reading in the cluster, whereby determining an estimated altitude based on non-accurate altitude readings. The three-dimensional map is generated based on the plurality of positioning readings and the altitude value of each cluster.

Abstract: A method, system and product for computer-aided hunting for location-based events. The computer-aided hunting may be based on providing an automatic suggestion of a proposed waiting location. A method comprising: computing, a proposed location for a driver of a vehicle, wherein the proposed location is an approximated location where the vehicle can wait until a location-based event occurs occurring in a geographical area, wherein said computing comprises: computing, for each potential location within the geographical area, computing a measurement indicative of an estimated elapsed time until the location based event occurring in a proximity of the potential location; and selecting the proposed location from the potential location based on the computed measurements; and providing the proposed location to the driver.

Abstract: A data packet is received in a network element. The network element has a cache memory in which cache entries represent a portion of addresses stored in a main memory, The destination address and the cache entries each comprise a binary number. A hash function is applied to the masked destination address to access a hash table. When the number of most significant bits corresponding to the value in the hash table in one of the cache entries and in the destination address are identical, routing information for the packet is retrieved from the cache entry.

Abstract: Communication apparatus includes multiple interfaces connected to a packet data network and at least one memory configured as a buffer to contain packets received through the ingress interfaces while awaiting transmission to the network via respective egress interfaces. Processing circuitry is configured to identify data flows to which the data packets that are received through the ingress interfaces belong, to assess respective bandwidth characteristics of the data flows, and to select one or more of the data flows as candidate flows for mirroring responsively to the respective bandwidth characteristics. The processing circuitry selects, responsively to one or more predefined mirroring criteria, one or more of the data packets in the candidate flows for analysis by a network manager, and sends the selected data packets to the network manager over the network via one of the egress interfaces.

Abstract: A method for classification includes extracting respective classification keys from a collection of data items and defining a set of patterns for matching to the classification keys. A plurality of memory banks contain respective Bloom filters, each Bloom configured to indicate one or more patterns in the set that are candidates to match a given classification key. A respective first hash function is applied to the classification keys for each pattern in order to select, for each classification key, one of the Bloom filters to query for the pattern. The selected Bloom filters are queried by applying a respective second hash function to each classification key, so as to receive from the Bloom filters an indication of the one or more candidate patterns. The data items are classified by matching the respective classification keys against the candidate patterns.

Abstract: In a network element cache operation is enhanced by extracting a set of fields from a packet, constructing a hash key from the extracted fields, and identifying a subset of the fields, wherein the field values thereof fail to exist in a set of classification rules. The hash key by is modified by masking the subset of the extracted fields. A hash lookup is performed using the modified hash key in a cache memory that stores a portion of the classification rules. The packet is processed responsively to the lookup.

Abstract: Communication apparatus includes a TCAM, which stores a corpus of rules, including respective sets of unmasked and masked bits. The rules conform to respective rule patterns, each defining a different, respective sequence of masked and unmasked bits to which one or more of the rules conform. A RAM caches rule entries corresponding to rules belonging to one or more of the rule patterns that have been selected for caching. Decision logic extracts respective classification keys from data packets, each key including a string of bits extracted from selected fields in a given data packet, and classifies the data packets by first matching the respective classification keys to the cached rule entries in the RAM and, when no match is found in the RAM, by matching the respective classification keys to the rules in the TCAM.

Abstract: A network element includes multiple output ports and circuitry. The multiple output ports are configured to transmit packets over multiple respective network links of a communication network. The circuitry is configured to receive from the communication network, via one or more input ports of the network element, packets that are destined for transmission via the multiple output ports, to monitor multiple data-counts, each data-count corresponding to a respective output port, and is indicative of a respective data volume of the packets forwarded for transmission via the respective output port, to select for a given packet, based on the data-counts, an output port among the multiple output ports, and to forward the given packet for transmission via the selected output port.

Abstract: A data packet is received in a network element. The network element has a cache memory in which cache entries represent a portion of addresses stored in a main memory, The destination address and the cache entries each comprise a binary number. A hash function is applied to the masked destination address to access a hash table. When the number of most significant bits corresponding to the value in the hash table in one of the cache entries and in the destination address are identical, routing information for the packet is retrieved from the cache entry.

Abstract: A network element includes circuitry and multiple ports. The ports are configured to transmit packets to a common destination via multiple paths of a communication network. Each port includes multiple serializers that serially transmit the packets over respective physical lanes. The power consumed by each port is a nonlinear function of the number of serializers activated in the port. The circuitry is configured to select one or more serializers among the ports to (i) meet a throughput demand via the ports and (ii) minimize an overall power consumed by the ports under a constraint of the nonlinear function, and to activate only the selected serializers. The circuitry is configured to choose for a packet received in the network element and destined to the common destination a port in which at least one of the serializers is activated, and to transmit the packet to the common destination via the chosen port.

Abstract: A network box accepts packets from a network in ingress ports of a first tier of leaf switches, adaptively routes the packets from the leaf switches to a second tier of spine switches within the network box, statically routes the packets from the spine switches to designated egress ports of the leaf switches, and transmits the packets from the designated egress ports into the network.

Abstract: A method, apparatus and product for automatic accident detection. The method comprising: obtaining readings from a mobile device of a user carried thereby and not affixed to a vehicle in which the user is riding; determining, based on the readings obtained from the mobile device, that the user is riding in the vehicle; obtaining data from the mobile device of the user; and determining automatically, based on the data obtained from the mobile device, that the vehicle was involved in an accident.

Abstract: A method, apparatus and product for parking auctions. One method comprises: detecting a parking exit event is about to occur for a vehicle in a parking spot; initiating a real-time auction between relevant drivers that are in a proximity of the parking spot and are searching for parking; selecting a winning bid from one or more bids for the parking spot, wherein the winning driver provided the winning bid; displaying locations over time of the winning driver, whereby the user can track the location of the winning driver; and notifying the user upon the winner driving arriving at the parking spot, whereby the user can vacate the parking spot for the winner driver. Another method comprises while a vehicle is searching for parking, participating, using a mobile device, in an auction for a parking spot.

Abstract: A meter module for use in a network device comprises conformance circuitry configured to: access a first memory device storing a conformance indicator that indicates whether a permitted rate of packet traffic has been exceeded, and classify packets received at the network device based at least in part on the conformance indicator. Sampling circuitry is configured to, responsively to the conformance circuitry classifying the packets: sample events associated with at least some of the received packets, and generate indicators of the sampled events. Update circuitry is configured to: access a second memory device, slower than the first memory, to update a number of tokens stored in the second memory device, and access the first memory device to update the conformance indicator when the updated number of tokens indicates that the permitted rate of packet traffic has been exceeded.