Abstract: A system includes redundant first process controllers configured to communicate over redundant supervisory networks in an industrial process control and automation system. Each first process controller is configured to operate in primary or secondary mode. The system also includes redundant second process controllers configured to communicate over redundant industrial control networks in the industrial process control and automation system. Each second process controller is configured to operate in primary or secondary mode. The system further includes a private network configured to communicatively couple the first and second process controllers. Each controller could be associated with at least three Media Access Control (MAC) addresses.

Abstract: A method includes receiving downlink packets from multiple physical Ethernet interfaces and selectively discarding some of the downlink packets based on a packet filtering criterion. The method also includes updating a network connectivity database using address information in non-discarded downlink packets. The method further includes mapping a path for each of the non-discarded downlink packets using the database and transmitting the non-discarded downlink packets to a single network interface. The method could also include receiving an uplink packet from the single network interface, selecting a primary physical Ethernet interface from the multiple physical Ethernet interfaces based on information in the database, and transmitting the uplink packet through the selected primary physical Ethernet interface.

Abstract: A method includes receiving downlink packets from multiple physical Ethernet interfaces and selectively discarding some of the downlink packets based on a packet filtering criterion. The method also includes updating a network connectivity database using address information in non-discarded downlink packets. The method further includes mapping a path for each of the non-discarded downlink packets using the database and transmitting the non-discarded downlink packets to a single network interface. The method could also include receiving an uplink packet from the single network interface, selecting a primary physical Ethernet interface from the multiple physical Ethernet interfaces based on information in the database, and transmitting the uplink packet through the selected primary physical Ethernet interface.

Abstract: A system includes redundant first process controllers configured to communicate over redundant supervisory networks in an industrial process control and automation system. Each first process controller is configured to operate in primary or secondary mode. The system also includes redundant second process controllers configured to communicate over redundant industrial control networks in the industrial process control and automation system. Each second process controller is configured to operate in primary or secondary mode. The system further includes a private network configured to communicatively couple the first and second process controllers. Each controller could be associated with at least three Media Access Control (MAC) addresses.

Abstract: An apparatus includes at least one processing unit configured to execute a virtual network appliance and a virtual machine. The virtual network appliance includes a virtual NIC driver configured to transfer packets to and from a physical port of the apparatus. The virtual network appliance also includes an internal network interface configured to transfer the packets to and from the virtual machine through a hypervisor. The virtual network appliance further includes an aggregator configured to transfer the packets between the virtual NIC driver and the internal network interface.

Abstract: An apparatus includes at least one processing unit configured to execute a virtual network appliance and a virtual machine. The virtual network appliance includes a virtual NIC driver configured to transfer packets to and from a physical port of the apparatus. The virtual network appliance also includes an internal network interface configured to transfer the packets to and from the virtual machine through a hypervisor. The virtual network appliance further includes an aggregator configured to transfer the packets between the virtual NIC driver and the internal network interface.

Abstract: A method for detecting a proxy Address Resolution Protocol (ARP) agent in a network including at least a first machine with an IP address in a range of a first subnet, and at least one embedded controller with an IP address in a range of a second subnet. A router is also provided, wherein the second subnet is not contactable through the router provided its proxy ARP is disabled. The first machine and second machine each have static routes for inter-subnet communications. A test IP address is identified by the first machine. A test Media Access Control (MAC) address corresponding to the test IP address is then obtained. The test MAC address is compared to a range of MAC addresses for the embedded controller. An alarm is generated at the first machine if the test MAC address is outside the range of MAC addresses that can prompt actions to remove the proxy ARP condition.

Abstract: A method for detecting a proxy Address Resolution Protocol (ARP) agent in a network including at least a first machine with an IP address in a range of a first subnet, and at least one embedded controller with an IP address in a range of a second subnet. A router is also provided, wherein the second subnet is not contactable through the router provided its proxy ARP is disabled. The first machine and second machine each have static routes for inter-subnet communications. A test IP address is identified by the first machine. A test Media Access Control (MAC) address corresponding to the test IP address is then obtained. The test MAC address is compared to a range of MAC addresses for the embedded controller. An alarm is generated at the first machine if the test MAC address is outside the range of MAC addresses that can prompt actions to remove the proxy ARP condition.

Abstract: Devices, systems and methods for network traffic monitoring for a process control network are disclosed. The exemplary system may include a connection to a physical media and a connection to a media access controller of the process control network. The system may also include a filter having a position identifier, a data comparator, a counter, and an access controller. The position identifier may determine the position of relevant data within a packet. The data comparator may compare the relevant data to predetermined criterion. The counter may count the amount of packets transmitted to the media access controller that do not match the predetermined criterion during a specified period. The access controller may pass packets to the media access controller if the relevant data matches the predetermined criterion or a predetermined amount of packets have not been transmitted.

Abstract: A method includes receiving traffic through a first interface in a first group of interfaces at a switch. The first group of interfaces is associated with a first virtual network. The method also includes determining that the traffic is destined for a destination associated with a second virtual network and forwarding the traffic to a second interface in a second group of interfaces at the switch. The second group of interfaces is associated with the second virtual network. The method further includes filtering the traffic that is received at the second interface in the second group of interfaces and communicating the filtered traffic towards the destination. The first and second virtual networks could represent Virtual Local Area Networks associated with different network levels of a process control system.

Abstract: A system for handling data of a process with a primary controller and a redundant controller. The primary controller includes a primary processor that is operable to perform tracking data tasks by using a low speed bus to cooperate with a tracker controller for storage of tracking data in a tracker memory. The primary processor is further operable to perform other tasks by using a high speed bus in cooperation with a primary memory. The second bus has an operating rate considerably higher (for example, a factor of two or more) than that of the first bus.

Abstract: A system for handling data of a process with a primary controller and a redundant controller. The primary controller includes a primary processor that is operable to perform tracking data tasks by using a low speed bus to cooperate with a tracker controller for storage of tracking data in a tracker memory. The primary processor is further operable to perform other tasks by using a high speed bus in cooperation with a primary memory. The second bus has an operating rate considerably higher (for example, by a factor of two or more) than that of the first bus. The primary controller provides tracking data items that each comprise a current data and a current address. The tracker controller accesses the tracking memory using the current address to read a stored data and write the current data. If the current data differs from the stored data, the current tracking data item is written to a buffer. The tracking controller generates an interrupt when the buffer contains a predetermined number of tracking data items.