Abstract: One example method occurs at a test system implemented using at least one processor, the method comprising: sending, via an application programming interface (API) and to a first traffic generator, a first instruction for setting a rate of background test packets sent to or via a system under test (SUT) for a test session; sending the background test packets to or via the SUT during the test session; receiving, from at least one feedback entity, feedback indicating at least one traffic metric associated with the background test packets sent to or via the SUT during the test session; generating, using the feedback, a second instruction for adjusting the rate of background test packets sent during the test session; and providing, via the API and to the first traffic generator, the second instruction for adjusting the rate of background test packets sent to or via the SUT during the test session.

Abstract: Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

Abstract: Methods, systems, and computer readable media for smart network interface card testing are disclosed. One example method occurs at a network interface card (NIC) comprising a network processing unit executing a monitoring agent for monitoring data traversing the NIC. The method includes obtaining, from a test system or a test traffic generator, at least one test packet; generating, using the monitoring agent, NIC processing information associated with processing the at least one test packet, wherein generating the NIC processing information includes monitoring application layer events, presentation layer events, session layer events, transport layer events, network layer events, driver layer events, kernel layer events, or other events involving the NIC and generating the NIC processing information using the monitored events; and storing or providing the NIC processing information for data analysis.

Abstract: A method for customizing data plane pipeline processing to generate test packets using Berkeley packet filter (BPF) hook entry points is disclosed. The method includes receiving a program code script for customizing a performance of one or more stages of a multistage processing pipeline platform configured for conducting a network operation process, wherein the multistage processing pipeline platform includes one or more predefined hook entry points and compiling the program code script to generate a customized plug-in component that is deployed in at least one of the one or more predefined hook entry points of the multistage processing pipeline platform.

Abstract: One example method occurs at a test system implemented using at least one processor, the method comprising: sending, via an application programming interface (API) and to a first traffic generator, a first instruction for setting a rate of background test packets sent to or via a system under test (SUT) for a test session; sending the background test packets to or via the SUT during the test session; receiving, from at least one feedback entity, feedback indicating at least one traffic metric associated with the background test packets sent to or via the SUT during the test session; generating, using the feedback, a second instruction for adjusting the rate of background test packets sent during the test session; and providing, via the API and to the first traffic generator, the second instruction for adjusting the rate of background test packets sent to or via the SUT during the test session.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for stateless service traffic generation. A method for stateless service traffic generation occurs at a network equipment test system. The method includes generating, at a first transmit port associated with the network equipment test system, a first test packet flow comprising one or more packets, wherein the first test packet flow indicates a match and action instruction for triggering an action at a second transmit port associated with the network equipment test system; sending the first test packet flow toward a node associated with a data center under test (DCUT); receiving the first test packet flow from the node associated with the DCUT; and performing, using the match and action instruction, the action at the second transmit port associated with the network equipment test system.

Abstract: According to one method, the method occurs at a first test device located inline between at least one traffic source and a network and/or system under test (NSUT), wherein the first test device is implemented using at least one processor and at least one memory. The method includes receiving, from a test controller, impairment rules generated from baseline metrics based on monitored live traffic for effecting traffic impairments; receiving traffic destined to the NSUT; impairing the traffic destined to the NSUT based on the impairment rules; sending the impaired traffic towards the NSUT, wherein the NSUT processes the impaired traffic; and sending, from the test device or a related tap, response information from the NSUT to the test controller for analyzing NSUT performance.

Abstract: A method executed by a dynamic session key acquisition (DSKA) engine residing in a virtual environment includes receiving session decryption information extraction instructions that configure the DSKA engine to obtain session decryption information for at least one communication session involving a virtual machine and obtaining the session decryption information from the virtual machine in accordance with the session decryption information extraction instructions. The session decryption information includes cryptographic keys utilized by an application server instance in the virtual machine to establish the at least one communication session. The session decryption information obtained from the virtual machine is stored and provided to a network traffic monitoring (NTM) agent. The NTM agent utilizes the session decryption information to decrypt copies of encrypted network traffic flows belonging to the at least one communication session involving the virtual machine.

Abstract: One method occurs at a test controller of a network test system implemented using at least one processor.

Abstract: One method occurs at a test controller of a network test system implemented using at least one processor.

Abstract: According to one method, the method occurs at a test system implemented using at least one processor. The method includes receiving test configuration information associated with a test session for configuring a test infrastructure connecting at least one test application and a system under test (SUT), wherein the test infrastructure includes at least two CTI devices that are dynamically configurable to perform one or more test related functions; configuring, using test configuration information, the test infrastructure to handle traffic for the test session; initiating the test session, wherein the test session involves using the at least two CTI devices and the at least one test application to test the SUT; and obtaining and reporting test results associated with the test session.

Abstract: Methods, systems, and computer readable media for optimizing storage of application data in memory are disclosed. According to one method for optimizing storage of application data in memory, the method includes receiving application data associated with an application. The method also includes generating, using information about the application, information about a processor, and information about a memory, a memory map indicating one or more memory locations in the memory for storing the application data. The method further includes storing, using the memory map, the application data in the one or more memory locations. The method also includes executing, using the processor, the application that uses the application data.

Abstract: According to one method, the method occurs during a test session for testing a system under test (SUT) and at a network test system comprising physical application-specific integrated circuit (ASIC) switching resources, wherein the network test system emulates a data center switching fabric comprising virtualized data center switching fabric elements: transmitting, to an inline impairment device, a test packet via an egress portion of an external physical port interface associated with the network test system, wherein the inline impairment device is connected via the external physical port interface associated with the network test system; receiving, from the inline impairment device, an impaired packet via an ingress portion of the external physical port interface associated with the network test system, wherein the impaired packet is generated when the impairment device applies at least one impairment to the test packet; and transmitting, using one or more of the virtualized data center switching fabric ele

Abstract: The subject matter described herein includes methods, systems, and computer readable media for stateless service traffic generation. A method for stateless service traffic generation occurs at a network equipment test system. The method includes generating, at a first transmit port associated with the network equipment test system, a first test packet flow comprising one or more packets, wherein the first test packet flow indicates a match and action instruction for triggering an action at a second transmit port associated with the network equipment test system; sending the first test packet flow toward a node associated with a data center under test (DCUT); receiving the first test packet flow from the node associated with the DCUT; and performing, using the match and action instruction, the action at the second transmit port associated with the network equipment test system.

Abstract: A method for dynamic firewall configuration for accessing service hosted in virtual networks includes monitoring, in a virtual network, changes in an Internet protocol (IP) address of a service hosted in a virtual network. The method further includes detecting a change the IP address of the service hosted in the virtual network. The method further includes communicating notification of the change in IP address to a firewall policy management interface. The method further includes, automatically configuring a firewall to allow access to the service hosted in the virtual network.

Abstract: A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

Abstract: A method for network flow metadata processing at a network packet broker includes, receiving, as input at the network packet broker, network flow metadata, the network flow metadata including a network flow statistic generated by a network device regarding packets in the network flow. The method further includes accessing, by the network packet broker, a network flow metadata processing rules database and identifying a network flow metadata processing rule to apply to the network flow metadata. The method further includes processing, by the network packet broker, the network flow metadata using the network flow metadata processing rule. The method further includes forwarding, by the network packet broker and based on results of the processing, egress network flow metadata to a network tool.

Abstract: Systems and methods are disclosed for drop detection and protection with respect to packet monitoring in virtual processing environments. Tap agents monitor and capture packets from the network traffic associated with network applications running within these virtual processing environments. Sequence numbers are added in packet encapsulation before tap packets are forwarded to tool agents. The tool agents then use the sequence numbers to detect packet drops within the tap packets. After drop detection, the tool agents send drop detection messages to an agent controller, and the agent controller generates and sends reconfiguration messages to the tap agents based upon the drop detection messages. The tool agents can also send drop detection messages directly to the tap agents. The tap agents adjust their operations based upon the reconfiguration messages and/or the drop detection messages to reduce packet drops within subsequent tap packets communications.

Abstract: A method executed by a dynamic session key acquisition (DSKA) engine residing in a virtual environment includes receiving session decryption information extraction instructions that configure the DSKA engine to obtain session decryption information for at least one communication session involving a virtual machine and obtaining the session decryption information from the virtual machine in accordance with the session decryption information extraction instructions. The session decryption information includes cryptographic keys utilized by an application server instance in the virtual machine to establish the at least one communication session. The session decryption information obtained from the virtual machine is stored and provided to a network traffic monitoring (NTM) agent. The NTM agent utilizes the session decryption information to decrypt copies of encrypted network traffic flows belonging to the at least one communication session involving the virtual machine.

Abstract: A method executed by a dynamic session key acquisition (DSKA) engine residing in a virtual environment includes receiving session decryption information extraction instructions that configure the DSKA engine to obtain session decryption information for at least one communication session involving a virtual machine and obtaining the session decryption information from the virtual machine in accordance with the session decryption information extraction instructions. The session decryption information includes cryptographic keys utilized by an application server instance in the virtual machine to establish the at least one communication session. The session decryption information obtained from the virtual machine is stored and provided to a network traffic monitoring (NTM) agent. The NTM agent utilizes the session decryption information to decrypt copies of encrypted network traffic flows belonging to the at least one communication session involving the virtual machine.