Abstract: A method provides for differentiating usage permissions between different categories of communication traffic within a given network. The method includes ensuring one or more categories of traffic never transits communication radios, link, and/or spectrums dedicated to a different category of traffic. A combined routing metric is calculated using a scaling factor for discouraging usage of restricted communication links and encouraging usage of non-restricted communication links.

Abstract: A method and apparatus for detecting predefined signatures in packet payload is disclosed. In one embodiment, a method of string matching in a network packet payload includes performing hash on a current search string received in the network packet payload to generate respective search string hash values, storing the search string hash values in a hash buffer, performing rehash using the search string hash values to generate an associated search string rehashed value, performing a parallel search of the search string rehashed value against Content Addressable Memory (CAM) entries to determine if the search string rehashed value matches with one of the CAM entries, and identifying the current search string in the network packet payload as a match with one of the CAM entries based on the outcome of performing the parallel search.

Abstract: Load-aware spanning tree reconfiguration includes determining volumes for information flows in an existing spanning tree in a network. The spanning tree is reconfigured based on the volumes to provide higher-volume information flows with shorter paths in the reconfigured spanning tree.

Abstract: The method, apparatus and system of detecting whether a router is compromised and configured to place malicious packets onto the network are disclosed. In one embodiment, a method for detecting a malicious router includes performing hash on a current ingress packet received via the network packet payload to generate ingress packet hash values. Further, includes performing hash on current egress packet that is associated with the current ingress packet to generate egress packet hash values. The generated ingress packet hash values and the egress packet hash values are then compared. Then the router is checked to determine whether it is potentially compromised and configured to place the malicious packets based on the outcome of the comparison.

Abstract: A system and method for multicast video streaming over a wireless local area network (WLAN) improves scalability and reliability. The method includes configuring the WLAN access point with a reserved video bandwidth (step 1005). A multicast video stream including data packets marked with differentiated services code points (DSCPs) is then received (step 1010). The multicast video stream is then converted to a plurality of “n” unicast streams (step 1015). Data packets in the unicast streams are then streamed from the WLAN access point to a plurality of “n” mobile units using a selective packet discard algorithm that employs the DSCPs (step 1020).

Abstract: Pattern matching for a network flow includes storing a representation of the pattern. The representation of the pattern includes hash values representing blocks of data in the pattern. Hash values are calculated for blocks of data in the network flow. The blocks of data are spread across multiple packets in the network flow. The calculated hash values for the blocks of data in the network flow are compared to the hash values in the representation of the pattern to detect the pattern in the network flow.

Abstract: Methods and apparatus are provided for reliably transmitting data. A method comprises identifying a metric for a first frame of a plurality of frames, wherein the metric is indicative of decoding significance for the first frame among the plurality of frames. When the metric corresponds to a relatively high decoding significance, the method further comprises transmitting the first frame in accordance with an enhanced transmission scheme. When the metric corresponds to a relatively low decoding significance, the method further comprises transmitting the first frame in accordance with a default transmission scheme. The reliability of the enhanced transmission scheme is greater than the reliability of the default transmission scheme.

Abstract: A method provides for differentiating usage permissions between different categories of communication traffic within a given network. The method includes ensuring one or more categories of traffic never transits communication radios, link, and/or spectrums dedicated to a different category of traffic. A combined routing metric is calculated using a scaling factor for discouraging usage of restricted communication links and encouraging usage of non-restricted communication links.

Abstract: A system for communication flow estimation and method therefore are described. The system comprises a filter array arranged to receive a packet, an index hash unit, a flow count array, and a global average counter. The index hash unit generates an index based on a received index set. The flow count array comprises one or more counters and updates a counter based on a received index. The global average counter updates an average count of received packets based on the received packet.

Abstract: A technique for identifying RTP based traffic in routers and switches is disclosed. In one embodiment, a method of identifying RTP based traffic in routers and switches, includes receiving IP packets including a UDP header and a second header located substantially after the UDP header, generating statistical parameters by inspecting predetermined sequence of bits at predetermined offsets in the second header of each received IP packet for a predetermined number of IP packets, and determining whether the IP packet is an RTP based IP packet by comparing the generated statistical parameters to predetermined characteristics. The method also includes pre-filtering the received IP packets to allow only the IP packets comprising the UDP header and the second header to reach an RTP detection engine.

Abstract: A system for communication flow estimation and method therefore are described. The system comprises a filter array arranged to receive a packet, an index hash unit, a flow count array, and a global average counter. The index hash unit generates an index based on a received index set. The flow count array comprises one or more counters and updates a counter based on a received index. The global average counter updates an average count of received packets based on the received packet.

Abstract: Pattern matching for a network flow includes storing a representation of the pattern. The representation of the pattern includes hash values representing blocks of data in the pattern. Hash values are calculated for blocks of data in the network flow. The blocks of data are spread across multiple packets in the network flow. The calculated hash values for the blocks of data in the network flow are compared to the hash values in the representation of the pattern to detect the pattern in the network flow.

Abstract: The method, apparatus and system of detecting whether a router is compromised and configured to place malicious packets onto the network are disclosed. In one embodiment, a method for detecting a malicious router includes performing hash on a current ingress packet received via the network packet payload to generate ingress packet hash values. Further, includes performing hash on current egress packet that is associated with the current ingress packet to generate egress packet hash values. The generated ingress packet hash values and the egress packet hash values are then compared. Then the router is checked to determine whether it is potentially compromised and configured to place the malicious packets based on the outcome of the comparison.

Abstract: A method and apparatus for detecting predefined signatures in packet payload is disclosed. In one embodiment, a method of string matching in a network packet payload includes performing hash on a current search string received in the network packet payload to generate respective search string hash values, storing the search string hash values in a hash buffer, performing rehash using the search string hash values to generate an associated search string rehashed value, performing a parallel search of the search string rehashed value against Content Addressable Memory (CAM) entries to determine if the search string rehashed value matches with one of the CAM entries, and identifying the current search string in the network packet payload as a match with one of the CAM entries based on the outcome of performing the parallel search.

Abstract: The embodiments described herein provide a method, program and computing network for processing a content request received via a computing network. The method comprises the steps of receiving an incoming request for content from a remote computing device, determining the content type requested by the incoming request and delivering the request to one of a plurality of servers according to the determined content request type.

Abstract: Load-aware spanning tree reconfiguration includes determining volumes for information flows in an existing spanning tree in a network. The spanning tree is reconfigured based on the volumes to provide higher-volume information flows with shorter paths in the reconfigured spanning tree.

Abstract: Data-type-based spanning tree reconfiguration includes determining volumes for one or more types of data transmitted in information flows in an existing spanning tree in a network. The spanning tree is reconfigured based on one or more of the volumes and the types of data transmitted in the flows.