Abstract: A device may include one or more memories, and one or more processors to receive a plurality of packets over a network. Packets, of the plurality of packets, may relate to a subscriber. The subscriber may be a source subscriber from which the packets are initiated or a destination subscriber to which the packets are destined. The device may determine whether a rate of receipt of the packets satisfies a first threshold, detect whether a level of processor usage satisfies a second threshold, and perform one or more actions to cause filtering of additional packets relating to the subscriber based on whether the rate of receipt of the packets satisfies the first threshold and based on whether the level of processor usage satisfies the second threshold. The device may monitor filtering of the additional packets to determine whether to filter further packets relating to the subscriber.

Abstract: A system may include one or more devices to receive a flow record. The one or more devices may identify a type of the flow record. The one or more devices may parse the flow record for a template identifier (ID) if the type of the flow record is a data record. The one or more devices may further compare the template ID from the data record to a predetermined template ID identifying a data record of template IDs. The one or more devices may identify the data record as a data record of template IDs if the template ID matches the predetermined template ID. The one or more devices may further generate a map associating template IDs, from the data record of template IDs, to template information for decoding and/or interpreting data records. The one or more devices may store the map.

Abstract: A distributed computing system includes a primary device and one or more backend devices. The primary device provides a management interface for the distributed computing system. A plurality of applications may be installed on the backend devices for execution. The primary device generates registration data that associates the applications with management interface commands or configuration parameters in response to messages received from the applications. Subsequently, when the primary device receives a particular command at the management interface, the primary device identifies, based on the registration data, a particular application from among the plurality of applications. In response to identifying the application, the primary device may send to the application an outgoing message.

Abstract: A distributed computing system includes a primary device and one or more backend devices. The primary device provides a management interface for the distributed computing system. A plurality of applications may be installed on the backend devices for execution. The primary device generates registration data that associates the applications with management interface commands or configuration parameters in response to messages received from the applications. Subsequently, when the primary device receives a particular command at the management interface, the primary device identifies, based on the registration data, a particular application from among the plurality of applications. In response to identifying the application, the primary device may send to the application an outgoing message.

Abstract: According to one embodiment of the present disclosure, a method and technique is disclosed for maintaining a network connection during transfer of the workload from a global environment of a logical partition to a workload partition of the logical partition and during any subsequent transfer(s).

Abstract: A multi-display system and method supporting differing accessibility feature selection provides a suitable display for a user with limited visual acuity, while providing a second display having a different accessibility feature set to a second user. An application or operating system checks selected accessibility features and display settings corresponding to each graphical display device and generates multiple graphical outputs in conformity with program output and the corresponding accessibility features and display settings for each device. One graphical display may be a personal computer display and the other a projector, so that an accessible desktop can be presented to the presenter, while the presentation can be shown with a desired set of attributes. The operating system may support the above-described operation by generating the multiple display outputs from the accessibility settings and a single program output.

Abstract: A computer implemented method, computer program product, and system for creating a checkpoint of a stream. A stream checkpoint request to create the checkpoint of the stream is received, wherein the stream is used by a process as a communications path, and wherein the communications path is modified by a set of modules. In response to identifying the identity of each module in the set of modules, the identity of each module in the set of modules is stored in the checkpoint. In response to identifying an order of the set of modules, the order of the set of modules is stored in the checkpoint. In response to sending a stream checkpoint message to each module in the set of modules, module data is received from each module in the set of modules to form received module data. The received module data is stored in the checkpoint.

Abstract: Determining availability of a destination for computer network communications that include providing on a caching device a destination availability cache comprising at least one cache entry representing availability of a destination and providing, from the caching device to a source, through computer network communications, information indicating the availability of the destination. In typical embodiments, the cache entry comprises a network address of a destination device and a time limitation for the cache entry.

Abstract: A method, computer program product, and data processing system for efficiently discovering and storing path MTU information in a sending host are disclosed. In a preferred embodiment, two path MTU tables are maintained. One path MTU table contains MTU values corresponding to the first-hop routers associated with the sending host. The other path MTU table contains MTU values corresponding to individual destination hosts. When the sending host needs to send information to a destination, it first consults the MTU table associated with individual destination hosts. If an entry for that destination host is found in the table, the sending host uses that MTU value. If not, the sending host consults the MTU table for the first-hop router on the path to the destination host and uses that MTU value. If that MTU value is too high, a new entry is made in the host-specific MTU table for the destination host.

Abstract: A device receives, from a client device, a request for a resource available from an origin device, and determines whether the resource is cached in a cache server. When the resource is cached, the device provides a first command instructing the client device to request the resource from the cache server, receives, from the client device, a first new request for the resource, and enables, based on the first new request, the client device to receive the resource from the cache server. When the resource is not cached, the device creates a firewall filter, provides a second command instructing the client device to request the resource from the origin device, receives, via the firewall filter and from the client device, a second new request for the resource, and enables, based on the second new request, the client device to receive the resource from the origin device.

Abstract: A method of configuring a data processing system for facilitating network communications involves creating a primary logical partition (LPAR) in the data processing system, the LPAR configured to host a specified operating system. The method further includes creating a first virtual network adapter within the LPAR, associating the first virtual network adapter with a first network address, and binding the first virtual network adapter to the LPAR. The method additionally involves creating a first logical subpartition (LSPAR) within the LPAR, the first LSPAR configured to employ said specified operating system and no other. The method also includes creating a second virtual network adapter within the LPAR, associating the second virtual network adapter with a second network address, wherein the second network address is not an alias network address of the first network address, and binding the second virtual network adapter to the first LSPAR.

Abstract: A communication system, which facilitates distribution of electronic communications for a user account, includes an emergency auto-reply agent that scans each received communication addressed to the user account for a particular communication sent from at least one emergency address specified for the user account separate from the address of the user account. Responsive to the communication system detecting the particular communication sent from one of the emergency addresses, the emergency auto-reply agent parses the content of the particular communication to detect whether the particular communication comprises a required password. Responsive to detecting the required password within the content of the particular communication, the emergency auto-reply agent directs the communication system to compose and send auto-reply communications from the user account in reply to received communications addressed to the user account.

Abstract: A technique for facilitating identification of a matching search term in one or more images includes selecting at least a portion of an image and creating search enriched metadata for a document that includes the image. The search enriched metadata includes a text portion that provides one or more search terms that are associated with the selected portion of the image and a location portion that provides a location of the selected portion of the image.

Abstract: A method of configuring a data processing system for facilitating network communications involves creating a primary logical partition (LPAR) in the data processing system, the LPAR configured to host a specified operating system. The method further includes creating a first virtual network adapter within the LPAR, associating the first virtual network adapter with a first network address, and binding the first virtual network adapter to the LPAR. The method additionally involves creating a first logical subpartition (LSPAR) within the LPAR, the first LSPAR configured to employ said specified operating system and no other. The method also includes creating a second virtual network adapter within the LPAR, associating the second virtual network adapter with a second network address, wherein the second network address is not an alias network address of the first network address, and binding the second virtual network adapter to the first LSPAR.

Abstract: The present invention provides a computer implemented method, data processing system and computer program product for limiting instances of a client-server program within a plurality of platforms in a restricted distributed network. The data processing system receives an invocation of the client-server program. The data processing system assigns a write file to the client-server program wherein the write file has a write file name and the write file is on a distributed file system accessible to the plurality of platforms. The data processing system determines whether the write file is available. Responsive to a determination that the write file is available, the data processing system opens the write file for writing wherein the write file is associated with the client-server program. The data processing system, responsive to a determination that the write file is available, forms an addressing file having addressing information of a first instance of the client-server program.

Abstract: A method for virtual segmentation off-load in a logically partitioned data processing system is provided. A data transmission protocol stack formats a data message for segmentation off-load to form a virtual segmentation off-load package. The size of the data message is larger than a size of a maximum transmission unit. A partition manager firmware copies the virtual segmentation off-load package from a first logical partition to a virtual Ethernet adapter associated with a second logical partition. The virtual segmentation off-load package is copied without performing a segmentation operation on the data message associated with the virtual segmentation off-load package.

Abstract: According to one embodiment of the present disclosure, a method and technique is disclosed for maintaining a network connection during transfer of the workload from a global environment of a logical partition to a workload partition of the logical partition and during any subsequent transfer(s).

Abstract: A method for processing data packets in an interception proxy server without using a Network Address Translation module. A TCP packet received at a router is encapsulated using generic routing encapsulation (GRE). The TCP packet is redirected to a proxy server through a GRE tunnel which includes a redirection rule comprising a local destination IP address and port to be used for traffic passed through the tunnel. When the proxy server receives the TCP packet, the TCP packet is decapsulated. If a flag is set in the payload header of the TCP packet indicating that a redirection rule has been configured for traffic passed through the tunnel, the payload header of the TCP packet is modified according to the redirection rule. The modified TCP packet is then passed to a transmission control protocol of the proxy server.

Abstract: The present invention provides a computer implemented method, data processing system and computer program product for limiting instances of a client-server program within a plurality of platforms in a restricted distributed network. The data processing system receives an invocation of the client-server program. The data processing system assigns a write file to the client-server program wherein the write file has a write file name and the write file is on a distributed file system accessible to the plurality of platforms. The data processing system determines whether the write file is available. Responsive to a determination that the write file is available, the data processing system opens the write file for writing wherein the write file is associated with the client-server program. The data processing system, responsive to a determination that the write file is available, forms an addressing file having addressing information of a first instance of the client-server program.

Abstract: A communication system which facilitates distribution of electronic communications for a user account includes an emergency auto-reply agent that scans each received communication addressed to the user account for a particular communication sent from at least one emergency address specified for the user account separate from the address of the user account. Responsive to the communication system detecting the particular communication sent from one of the emergency addresses, the emergency auto-reply agent parses the content of the particular communication to detect whether the particular communication comprises a required password. Responsive to detecting the required password within the content of the particular communication, the emergency auto-reply agent directs the communication system to compose and send auto-reply communications from the user account in reply to received communications addressed to the user account.