Abstract: A method and a system for identifying unauthorized accesses to a data network service by a particular node in a data network is disclosed. The NMC communicates with an agent periodically to gather a list of users of the service node. An agent is installed on the service node to monitor all network accesses to the service. By configuring the agent to monitor all access to the service node, through SNMP or a similar protocol, the agent maintains a list of all accesses to that service node. This list is stored internally by the agent and queried for by the NMC periodically. The access information stored by the agent is periodically retrieved by the NMC for all monitored nodes and compared with the authorization list for the node. If unauthorized accesses are found, they are identified by the NMC. These unauthorized accesses can be notified to the appropriate entity in a number of ways such as through paging, email or a report viewable through the NMC.

Abstract: Methods which determine network performance by determining not only the transit delay between nodes in a network but also the variance, or jitter, of such transit delays. A common node, usually a network management computer (NMC), sends out a signal to a first node of interest and measures the time before it receives an acknowledgment from the first node. The NMC then sends out a similar signal to a second node of interest and similarly measures the time required to receive an acknowledgment. Based on these two measurements, the transit delay between the first and second nodes can be calculated if the first node lies on the path between the NMC and the second node or vice versa. For a multiple node communications path, the total transit delay between any two nodes is the sum total of the transit delays between adjacent nodes lying on the path.

Abstract: A data source access editor and a network data management method are disclosed. The method is carried out in a network within which at least one data service element interacts with services. The network has data access layers, an administrator user interface and different platform data sources. The method includes the steps of: accepting administrator input through the user interface, processing the administrator input into executable instructions, and generating an abstraction of one of the platform data sources from the instructions. The abstraction defines a derivative of the one of the platform data sources that the data service element makes available to the services. The abstraction coordinates the data service element in effectuating operations on the one of the platform data sources, such that the operations generate data source responses communicated to the services in order for the services to be performed.

Abstract: A method and a system for identifying unauthorized accesses to a data network service by a particular node in a data network is disclosed. The NMC communicates with an agent periodically to gather a list of users of the service node. An agent is installed on the service node to monitor all network accesses to the service. By configuring the agent to monitor all access to the service node, through SNMP or a similar protocol, the agent maintains a list of all accesses to that service node. This list is stored internally by the agent and queried for by the NMC periodically. The access information stored by the agent is periodically retrieved by the NMC for all monitored nodes and compared with the authorization list for the node. If unauthorized accesses are found, they are identified by the NMC. These unauthorized accesses can be notified to the appropriate entity in a number of ways such as through paging, email or a report viewable through the NMC.

Abstract: A method of determining a connection between a data emitting device j having address IP(j) and a data receiving device i having address IP(i) via a routing device, wherein the routing device utilizes a management information database MIB, establishing a mask field in the MIB for all devices in a subnet which passes data through the routing device having a property (IP(i) AND MASK)=(IP(j) AND MASK), and indicating connection of a device i to a device j for devices in which the property is true.

Abstract: Graphical interface based software for creating communication service agents is disclosed. The software is stored on or embodied in a computer readable medium used in a computer system having at least one display device, at least one input device operated by a computer user and at least one storage device having structured data. The computer readable medium includes code executable in the system to provide a service editor for use by the computer user. The service editor is for creating at least one interactive service and has a graphical user interface (GUI). The GUI permits the computer user to build a flow map defining the interactive service. The flow map is displayable on the display device and includes a plurality of elements connected together by flow lines. At least one of the elements incorporates a customizer for assisting the computer user in further defining the interactive service. Operations on the structured data are effectuated by the interactive service.

Abstract: A method of determining a connection between a data emitting device and a network device which may carry the data, wherein the network device is comprised of a store for a data source address of a last frame transmitted to the network device and an input traffic count comprising: (a) periodically reading the data source address, (b) periodically reading the input traffic count, (c) determining whether the data source address has always stayed the same, (d) in the event the data source address has always stayed the same, determine whether the traffic count has exceeded a predetermined threshold, (e) in the event the result of step (d) is true, indicate that the data source address identifies with acceptable probability a data emitting device directly connected to the network device.

Abstract: A method of determining the topology of a network comprising: transmitting a signal comprised of a sequence of bursts of packets formed of orthogonal signals, monitoring devices in the network including the destination device for reception of the signal, and defining a sequence of devices within the network by sensing a sequence of reception of the signal in the devices from the source device toward the destination device.

Abstract: A method of determining the topology of a network comprising: transmitting a signal comprised of a sequence of bursts of packets formed of orthogonal signals, monitoring devices in the network including the destination device for reception of the signal, and defining a sequence of devices within the network by sensing a sequence of reception of the signal in the devices from the source device toward the destination device.

Abstract: A method of determining a connection between a data emitting device and a network device which may carry the data, wherein the network device is comprised of a store for a data source address of a last frame transmitted to the network device and an input traffic count comprising: (a) periodically reading the data source address, (b) periodically reading the input traffic count, (c) determining whether the data source address has always stayed the same, (d) in the event the data source address has always stayed the same, determine whether the traffic count has exceeded a predetermined threshold, (e) in the event the result of step (d) is true, indicate that the data source address identifies with acceptable probability a data emitting device directly connected to the network device.

Abstract: A method for providing a proxy service in a computer network, comprising the steps of: receiving a request to access a device, determining the path to the device, ascertaining what firewall rules exist for that given path, and redirecting the client to the appropriate proxy, if any is needed, for that path.

Abstract: A method of determining a connection between a data emitting device j having address IP(j) and a data receiving device i having address IP(i) via a routing device, wherein the routing device utilizes a management information database MIB, establishing a mask field in the MIB for all devices in a subnet which passes data through the routing device having a property

Abstract: A method of determining a connection between a data emitting device and a network device which may carry the data, wherein the network device is comprised of a store for a data source address of a last frame transmitted to the network device and an input traffic count comprising (a) periodically reading the data source address, (b) periodically reading the input traffic count, (c) determining whether the data source address has always stayed the same, (d) in the event the data source address has always stayed the same, determine whether the traffic count has exceeded a predetermined threshold, (e) in the event the result of step (d) is true, indicate that the data source address identifies with acceptable probability a data emitting device directly connected to the network device.

Abstract: A method of determining network topologies comprising monitoring traffic received by devices connected in the network and traffic emitted out of the devices, correlating traffic out of the devices with traffic into the devices, indicating a network communication path between a pair of the devices in the event that the correlation of traffic out of one of the pair of the devices and into another of the pair of the devices is in excess of a predetermined threshold.

Abstract: A method of determining network topologies comprising monitoring traffic received by devices connected in the network and traffic emitted out of the devices, correlating traffic out of the devices with traffic into the devices, indicating a network communication path between a pair of the devices in the event that the correlation of traffic out of one of the pair of the devices and into another of the pair of the devices is in excess of a predetermined threshold.

Abstract: A method of determining network topologies comprising monitoring traffic received by devices connected in the network and traffic emitted out of the devices, correlating traffic out of the devices with traffic into the devices, indicating a network communication path between a pair of the devices in the event that the correlation of traffic out of one of the pair of the devices and into another of the pair of the devices is in excess of a predetermined threshold.