Abstract: In one embodiment, a method includes determining a first template defining a data format for one or more first data records and a second template defining a data format for one or more second data records. The template may be needed to decode the information included in an associated data record. The first template is sent on a first stream of a multi-stream protocol in an ordered fashion, such as SCTP. The one or more first data records are also sent on the first stream in an ordered fashion and include first flow information for data sent through a network device. A second template is sent on a second stream using the multi-stream protocol in an ordered fashion. One or more second data records are sent on the second stream including second flow information for data sent through the network device.

Abstract: A method of aggregating network traffic flows for network traffic elements is described. The traffic elements are characterized by a plurality of characteristics having respective values, where a flow profile is formed by classifying each element into one of a plurality of flows dependent on its characteristic value. The method comprises the steps of obtaining an instantaneous flow profile and aggregating flows from the flow profile having a common value for a characteristic.

Abstract: An approach for managing the consumption of resources uses adaptive random sampling to decrease the collection of flow statistical data as the consumption of resources increases. When a packet is received from a network, a determination is made whether the packet belongs to an existing flow, for which flow statistical data is being collected, or to a new flow. If the packet belongs to an existing flow, then the flow statistical data for the existing flow is updated to reflect the packet. If the packet belongs to the new flow, then a sampling probability is used to determine whether the new flow is to be sampled. The sampling probability is determined, at least in part, upon a current usage of resources.

Abstract: An apparatus and method for collecting network traffic information is arranged to receive network traffic elements including one or more key fields having respective key field values. The apparatus and method further classify received network traffic elements into one of a plurality of flows dependent on the key field value of one or more key fields defined by a flow profile. The method and apparatus are further configurable to vary the flow profile, create a flow record and export the flow record to a collecting node.

Abstract: In one embodiment, a networking device includes logic encoded in one or more tangible media for execution and when executed operable to cause performing receiving a command to collect a unique object identifier that represents a unique management information base (MIB) object; retrieving, in response to receiving the command, a Simple Network Management Protocol (SNMP) MIB variable or table that corresponds to the MIB object; creating an Internet Protocol Flow Information Export (IPFIX) template data structure that includes the object identifier; in which the object identifier is encoded in the IPFIX template data structure as a string that has a variable length; and exporting the encoded object identifier with the variable length string.

Abstract: A method of monitoring network traffic flows of network traffic elements between locations in a data communications network is disclosed. The method comprises the step of classifying, as a first flow, traffic elements from a first to a second network location sharing a flow characteristic. The method further comprises the steps of classifying, as a second flow, traffic elements from said second to said first network location sharing said flow characteristic correlating said first and second flows.

Abstract: An apparatus and method for collecting network traffic information is arranged to receive network traffic elements including one or more key fields having respective key field values. The apparatus and method further classify received network traffic elements into one of a plurality of flows dependent on the key field value of one or more key fields defined by a flow profile. The method and apparatus are further configurable to vary the flow profile, create a flow record and export the flow record to a collecting node.

Abstract: In one embodiment, a method includes determining a first template defining a data format for one or more first data records and a second template defining a data format for one or more second data records. The template may be needed to decode the information included in an associated data record. The first template is sent on a first stream of a multi-stream protocol in an ordered fashion, such as SCTP. The one or more first data records are also sent on the first stream in an ordered fashion and include first flow information for data sent through a network device. A second template is sent on a second stream using the multi-stream protocol in an ordered fashion. One or more second data records are sent on the second stream including second flow information for data sent through the network device.

Abstract: In one embodiment, a networking device includes logic encoded in one or more tangible media for execution and when executed operable to cause performing receiving a command to collect a unique object identifier that represents a unique management information base (MIB) object; retrieving, in response to receiving the command, a Simple Network Management Protocol (SNMP) MIB variable or table that corresponds to the MIB object; creating an Internet Protocol Flow Information Export (IPFIX) template data structure that includes the object identifier; in which the object identifier is encoded in the IPFIX template data structure as a string that has a variable length; and exporting the encoded object identifier with the variable length string.

Abstract: An approach for managing the consumption of resources uses adaptive random sampling to decrease the collection of flow statistical data as the consumption of resources increases. When a packet is received from a network, a determination is made whether the packet belongs to an existing flow, for which flow statistical data is being collected, or to a new flow. If the packet belongs to an existing flow, then the flow statistical data for the existing flow is updated to reflect the packet. If the packet belongs to the new flow, then a sampling probability is used to determine whether the new flow is to be sampled. The sampling probability is determined, at least in part, upon a current usage of resources.

Abstract: A method of aggregating network traffic flows for network traffic elements is described. The traffic elements are characterized by a plurality of characteristics having respective values, where a flow profile is formed by classifying each element into one of a plurality of flows dependent on its characteristic value. The method comprises the steps of obtaining an instantaneous flow profile and aggregating flows from the flow profile having a common value for a characteristic.

Abstract: Apparatus for interactive broadcasting comprises: an in step device for determining predetermined times in a broadcast relevant to user interaction; a content insertion device for inserting interactivity content for sending over a network to users for interaction at the predetermined times; and an embedding unit for embedding timing control into the interactive content to ensure that the interactive content is displayed to the users at the predetermined times. The apparatus is useful for providing timely user interaction even via the cellular network. Further refinements include traffic spreading at the application layer, and the use of SMS to provide a user with the URL for initial logging on.