Patents by Inventor Jean Philippe Vasseur

Jean Philippe Vasseur has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 10003511
    Abstract: In one embodiment, a network device routes traffic along a network path and receives a performance threshold crossing alert regarding performance of the network path. The network device detects that the performance threshold crossing alert is part of a potential network attack by analyzing, by the device, the performance threshold crossing alert. The network device also provides a notification of the detected network attack.
    Type: Grant
    Filed: September 21, 2017
    Date of Patent: June 19, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Jean-Philippe Vasseur, Sukrit Dasgupta
  • Patent number: 10003473
    Abstract: In one embodiment, a time period is identified in which probe packets are to be sent along a path in a network based on predicted user traffic along the path. The probe packets are then sent during the identified time period along the path. Conditions of the network path are monitored during the time period. The rate at which the packets are sent during the time period is dynamically adjusted based on the monitored conditions. Results of the monitored conditions are collected, to determine an available bandwidth limit along the path.
    Type: Grant
    Filed: September 22, 2017
    Date of Patent: June 19, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Jean-Philippe Vasseur, Sukrit Dasgupta
  • Publication number: 20180159755
    Abstract: In one embodiment, a device in a network receives data indicative of traffic characteristics of traffic associated with a particular application. The device identifies one or more paths in the network via which the traffic associated with the particular application was sent, based on the traffic characteristics. The device determines a probing schedule based on the traffic characteristics. The probing schedule simulates the traffic associated with the particular application. The device sends probes along the one or more identified paths according to the determined probing schedule.
    Type: Application
    Filed: January 16, 2018
    Publication date: June 7, 2018
    Inventors: Sukrit Dasgupta, Jean-Philippe Vasseur, Grégory Mermoud
  • Patent number: 9992703
    Abstract: In one embodiment, a method comprises: a first network device in a deterministic network identifying first and second slots for transmission of a data packet toward a destination device along a deterministic track of the deterministic network, the first slot reserved for the first network device receiving the data packet from a second network device and the second slot reserved for transmission by the first network device of the data packet toward the destination device along the deterministic track; the first network device detecting, in the first slot, an absence of receiving the data packet from the second network device; and the first network device selectively generating and transmitting in the second slot, in response to the absence of receiving the data packet, a management packet along the deterministic track.
    Type: Grant
    Filed: April 4, 2016
    Date of Patent: June 5, 2018
    Assignee: CISCO TECHNOLOGY, INC.
    Inventors: Patrick Wetterwald, Pascal Thubert, Eric Michel Levy-Abegnoli, Jean-Philippe Vasseur
  • Publication number: 20180152466
    Abstract: In one embodiment, a device in a network obtains characteristic data regarding one or more traffic flows in the network. The device incrementally estimates an amount of noise associated with a machine learning feature using bootstrapping. The machine learning feature is derived from the sampled characteristic data. The device applies a filter to the estimated amount of noise associated with the machine learning feature, to determine a value for the machine learning feature. The device identifies a network anomaly that exists in the network by using the determined value for the machine learning feature as input to a machine learning-based anomaly detector. The device causes performance of an anomaly mitigation action based on the identified network anomaly.
    Type: Application
    Filed: November 30, 2016
    Publication date: May 31, 2018
    Inventors: Laurent Sartran, Sébastien Gay, Jean-Philippe Vasseur, Grégory Mermoud
  • Publication number: 20180146007
    Abstract: In one embodiment, a traffic model manager node receives data flows in a network and determines a degree to which the received data flows conform to one or more traffic models classifying particular types of data flows as non-malicious. If the degree to which the received data flows conform to the one or more traffic models is sufficient, the traffic model manager node characterizes the received data flows as non-malicious. Otherwise, the traffic model manager node provides the received data flows to a denial of service (DoS) attack detector in the network to allow the received data flows to be scanned for potential attacks.
    Type: Application
    Filed: January 5, 2018
    Publication date: May 24, 2018
    Inventors: Javier Cruz Mota, Jean-Philippe Vasseur, Andrea Di Pietro
  • Publication number: 20180146413
    Abstract: In one embodiment, a method comprises promiscuously detecting, by a network device in a wireless data network, a wireless data packet comprising a source route header specifying a hop-by-hop path for reaching a destination device in the wireless data network; determining, by the network device, that the network device is identified in the hop-by-hop path as following a first next-hop device targeted for reception of the wireless data packet; and executing intercepted forwarding of the wireless data packet, by the network device, to a second next-hop device successively following the network device in the hop-by-hop path.
    Type: Application
    Filed: November 23, 2016
    Publication date: May 24, 2018
    Inventors: PATRICK WETTERWALD, PASCAL THUBERT, ERIC MICHEL LEVY-ABEGNOLI, JEAN-PHILIPPE VASSEUR
  • Patent number: 9979619
    Abstract: In one embodiment, a device in a network performs a first comparison between observed and expected packet error rates for a first path in the network. The device identifies one or more intersecting paths in the network that intersect the first path. The device performs one or more additional comparisons between observed and expected packet error rates for the intersecting paths that intersect the first path. The device identifies a particular node along the first path as a source of packet drops based on the first comparison between the observed and expected packet error rates for the first path and on the one or more additional comparisons between the observed and expected packet error rates for the intersecting paths that intersect the first path.
    Type: Grant
    Filed: November 24, 2015
    Date of Patent: May 22, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Jean-Philippe Vasseur, Pascal Thubert, Patrick Wetterwald, Eric Levy-Abegnoli
  • Patent number: 9980199
    Abstract: In one embodiment, a method comprises: receiving, by a network device in a data network, a wireless data packet containing new data; responding to the wireless data packet, by the network device, by initiating a prescribed randomized collision avoidance method requiring the network device to first wait at least a first half of a prescribed minimum contention interval before attempting transmission at a randomized position within a second half of the prescribed minimum contention interval; selectively retransmitting, by the network device, the wireless data packet based on determining, at the randomized position, that the network device has not received a prescribed number of copies of the wireless data packet; and selectively sending, by the network device to a path computation element in the data network, a message requesting membership in a dominating set in response to transmission of the wireless data packet by the network device.
    Type: Grant
    Filed: September 7, 2016
    Date of Patent: May 22, 2018
    Assignee: CISCO TECHNOLOGY, INC.
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Michel Levy-Abegnoli
  • Patent number: 9973596
    Abstract: In one embodiment, a sender in a shared-communication network determines whether a pending frame is low-latency or high-throughput, and sets a maximum transmission unit (MTU) of the pending frame as a first MTU in response to a low-latency frame and a longer second MTU in response to a high-throughput frame. In another embodiment, a receiver receives a data frame from a sender according to an MTU, and determines a trigger for adjusting the MTU based on latency requirements. In response to the trigger, the receiver sets an interrupt flag in a link-layer acknowledgment for the received data frame. In still another embodiment, a sender determines a pending low-latency data frame to send to a receiver operating according to an MTU, and sends a control message to the receiver to indicate the pending low-latency data frame and an adjusted MTU.
    Type: Grant
    Filed: June 19, 2013
    Date of Patent: May 15, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Jonathan W. Hui, Jean-Philippe Vasseur
  • Patent number: 9967170
    Abstract: In one embodiment, a device in a network identifies a routing domain migration candidate node in a first routing domain that is in range of a second routing domain. The device determines that the second routing domain is able to accommodate the candidate node sending traffic via the second routing domain. The device determines that the candidate node should send traffic via the second routing domain, based in part on a determination that the second routing domain is able to accommodate the candidate node sending traffic via the second routing domain. The device causes the candidate node to send traffic via the second routing domain.
    Type: Grant
    Filed: December 10, 2014
    Date of Patent: May 8, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Jean-Philippe Vasseur, Jonathan W. Hui
  • Publication number: 20180124086
    Abstract: In one embodiment, a device in a network analyzes data indicative of a behavior of a network using a supervised anomaly detection model. The device determines whether the supervised anomaly detection model detected an anomaly in the network from the analyzed data. The device trains an unsupervised anomaly detection model, based on a determination that no anomalies were detected by the supervised anomaly detection model.
    Type: Application
    Filed: November 2, 2017
    Publication date: May 3, 2018
    Inventors: Fabien Flacher, Grégory Mermoud, Jean-Philippe Vasseur, Sukrit Dasgupta
  • Publication number: 20180124632
    Abstract: In one embodiment, a supervisory device in a network forms a virtual access point (VAP) for a node in the network whereby a plurality of access points (APs) in the network are mapped to the VAP as part of a VAP mapping. The node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device determines a data traffic management strategy for the node based on traffic associated with the node. The supervisory device instructs the APs in the VAP mapping to implement the data traffic management strategy for the node.
    Type: Application
    Filed: April 27, 2017
    Publication date: May 3, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli
  • Publication number: 20180123963
    Abstract: In one embodiment, a supervisory device in a network forms a virtual access point (VAP) for a node in the network. A plurality of access points (APs) in the network are mapped to the VAP as part of a VAP mapping and the node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device determines a traffic type of traffic associated with the node. The supervisory device assigns the node to a selected wireless channel based in part on the traffic type of the traffic associated with the node. The supervisory device controls the VAP to use the channel assigned to the node.
    Type: Application
    Filed: April 27, 2017
    Publication date: May 3, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli
  • Publication number: 20180123887
    Abstract: In one embodiment, a supervisory device in a network assigns different access points in the network to different access point groupings. Each of the different access point groupings uses a different network path to communicate with a given endpoint in the network. The supervisory device selects at least one of the access points in each of the different access point groupings for mapping to a virtual access point (VAP) for a node in the network as part of a VAP mapping. The supervisory device instructs the selected access points to form a VAP for the node. The node treats the access points in the VAP mapping as a single access point for purposes of communicating with the network.
    Type: Application
    Filed: May 19, 2017
    Publication date: May 3, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli
  • Publication number: 20180124688
    Abstract: In one embodiment, a supervisory device in a network receives from a plurality of access points (APs) in the network data regarding a network availability request broadcast by a node seeking to access the network and received by the APs in the plurality. The supervisory device uniquely associates the node with a virtual access point (VAP) for the node and forms a VAP mapping between the VAP for the node and a set of the APs in the plurality selected based on the received data regarding the network availability request. One of the APs in the mapping is designated as a primary access point for the node. The supervisory device instructs the primary AP to send a network availability response to the node that includes information for the VAP. The node uses the information for the VAP to access the network via the set of APs in the VAP mapping.
    Type: Application
    Filed: April 19, 2017
    Publication date: May 3, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli
  • Publication number: 20180124646
    Abstract: In one embodiment, a supervisory device in a network forms a virtual access point (VAP) for a node in the network. A set of access points (APs) in the network are mapped to the VAP as part of a VAP mapping and the node treats the APs in the VAP mapping as a single AP for purposes of communicating with the network. The supervisory device receives measurements from the APs in the VAP mapping regarding communications associated with the node. The supervisory device identifies a movement of the node based on the received measurements from the APs in the VAP mapping. The supervisory device adjusts the set of APs in the VAP mapping based on the identified movement of the node.
    Type: Application
    Filed: April 27, 2017
    Publication date: May 3, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli
  • Publication number: 20180109492
    Abstract: In one embodiment, a server instructs one or more networking devices in a local area network (LAN) to form a virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to the server. The server receives the redirected traffic associated with the particular node. The server trains a machine learning-based behavioral model for the particular node based on the redirected traffic. The server controls whether a particular redirected traffic flow associated with the node in the LAN is sent to a destination of the traffic flow using the trained behavioral model.
    Type: Application
    Filed: April 12, 2017
    Publication date: April 19, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli
  • Publication number: 20180109551
    Abstract: In one embodiment, a server instructs one or more networking devices in a local area network (LAN) to form virtual network overlay in the LAN that redirects traffic associated with a particular node in the LAN to the server. The server receives the redirected traffic associated with the particular node. The server determines a node profile for the particular node based in part on an analysis of the redirected traffic. The server configures the particular node based on the determined node profile for the particular node.
    Type: Application
    Filed: April 12, 2017
    Publication date: April 19, 2018
    Inventors: Patrick Wetterwald, Pascal Thubert, Jean-Philippe Vasseur, Eric Levy-Abegnoli
  • Publication number: 20180109496
    Abstract: In one embodiment, a networking device in a local area network (LAN) establishes a virtual network overlay in the LAN to redirect traffic associated with a particular node in the LAN to a server for analysis. The networking device receives an indication from the server that at least a portion of the traffic associated with the particular node is trusted for local sending within the LAN and adjusts the virtual network overlay to locally send the trusted portion of the traffic associated with the particular node to one or more other nodes in the LAN without redirection to the server. The networking device collects characteristic information regarding the trusted portion of the traffic sent locally within the LAN via the adjusted virtual network overlay and sends the collected characteristic information to the server for analysis.
    Type: Application
    Filed: April 12, 2017
    Publication date: April 19, 2018
    Inventors: Pascal Thubert, Jean-Philippe Vasseur, Patrick Wetterwald, Eric Levy-Abegnoli