Abstract: A method of storing log entries of events from a plurality of network elements in a communication network, comprising the steps of: a) receiving log entries at a control processor of events from a plurality of different elements positioned, the log entries grouped into threads based on a common purpose; b) converting each log entry into a compact log record in a logging module, and c) storing the compact log records in a first memory buffer in random access memory (RAM) forming a first log file.

Abstract: A method of collecting information about a plurality of test devices connected in a network is provided. The method includes: identifying routable network addresses within a plurality of the network addresses, and sending discovery packets to the plurality of routable network addresses, receiving responses from the test devices, obtaining the information about the test devices, and storing the information so as to associate, for each of the test devices, the test-device information with at least one of the routable network addresses. The routable network addresses are stored in non-volatile memory for repeated use in re-discovery of the test devices in the network.

Abstract: A method of providing topology information about a network to a topology manager is disclosed. The network includes a plurality of sensors each having a sensor ID, and the method includes performing the following steps at each of the plurality of sensors: receiving a stream of packets and identifying a topology trace packet in the stream of packets, wherein the topology trace packet has a destination address and an ID of a previous sensor, including the sensor ID in the topology trace packet, sending the topology trace packet to the destination address, forming a report message so as to include the sensor ID, the previous sensor ID, sending the report to the topology manager; and, providing network addresses of adjacent nodes to the topology manager.

Abstract: Systems and methods for managing communication in an IP network between a server and a probe that does not maintain an IP address by selectively restricting which IP addresses that are identified as active in the network may be borrowed for the probes. Restriction of IP addresses may include a black list to exclude specific IP addresses, a white list from which IP addresses can be drawn or both. This permits control over which IP addresses may be borrowed by probes, reducing false alarms, alerts or other network concerns caused by unexpected IP traffic on a particular IP address in the network.

Abstract: Systems and methods for managing communication in an IP network between a server and a probe that does not maintain an IP address by selectively restricting which IP addresses that are identified as active in the network may be borrowed for the probes. Restriction of IP addresses may include a black list to exclude specific IP addresses, a white list from which IP addresses can be drawn or both. This permits control over which IP addresses may be borrowed by probes, reducing false alarms, alerts or other network concerns caused by unexpected IP traffic on a particular IP address in the network.

Abstract: Systems and methods for managing communication in an IP network between a server and a probe that does not maintain an IP address by selectively restricting which IP addresses that are identified as active in the network may be borrowed for the probes. Restriction of IP addresses may include a black list to exclude specific IP addresses, a white list from which IP addresses can be drawn or both. This permits control over which IP addresses may be borrowed by probes, reducing false alarms, alerts or other network concerns caused by unexpected IP traffic on a particular IP address in the network.

Abstract: A method of storing log entries of events from a plurality of network elements in a communication network, comprising the steps of: a) receiving log entries at a control processor of events from a plurality of different elements positioned, the log entries grouped into threads based on a common purpose; b) converting each log entry into a compact log record in a logging module, and c) storing the compact log records in a first memory buffer in random access memory (RAM) forming a first log file.

Abstract: A method of collecting information about a plurality of test devices connected in a network is provided. The method includes: identifying routable network addresses within a plurality of the network addresses, and sending discovery packets to the plurality of routable network addresses, receiving responses from the test devices, obtaining the information about the test devices, and storing the information so as to associate, for each of the test devices, the test-device information with at least one of the routable network addresses. The routable network addresses are stored in non-volatile memory for repeated use in re-discovery of the test devices in the network.

Abstract: A method of storing log entries of events from a plurality of network elements in a communication network, comprising the steps of: a) receiving log entries at a control processor of events from a plurality of different elements positioned, the log entries grouped into threads based on a common purpose; b) converting each log entry into a compact log record in a logging module, and c) storing the compact log records in a first memory buffer in random access memory (RAM) forming a first log file.

Abstract: A method of collecting information about a plurality of test devices connected in a network is provided. The method includes: identifying routable network addresses within a plurality of the network addresses, and sending discovery packets to the plurality of routable network addresses, receiving responses from the test devices, obtaining the information about the test devices, and storing the information so as to associate, for each of the test devices, the test-device information with at least one of the routable network addresses. The routable network addresses are stored in non-volatile memory for repeated use in re-discovery of the test devices in the network.

Abstract: A method of monitoring packet traffic is provided. The method includes: at a first access point, capturing portions of traffic packets passing therethrough separated by time intervals; encapsulating the portions of traffic packets thereby forming encapsulated packets and adding timestamps to the encapsulated packets so as to preserve the portions of traffic packets and information related to the time intervals; transmitting the encapsulated packets over a network; decapsulating the encapsulated packets so as to obtain replay packets and the capture timestamp, wherein the replay packets include the portions of the traffic packets; and, transmitting the replay packets separated by the time intervals, wherein the timestamps are used to reproduce the time intervals so as to imitate the traffic packets passing through the first access point.

Abstract: A method of providing topology information about a network to a topology manager is disclosed. The network includes a plurality of sensors each having a sensor ID, and the method includes performing the following steps at each of the plurality of sensors: receiving a stream of packets and identifying a topology trace packet in the stream of packets, wherein the topology trace packet has a destination address and an ID of a previous sensor, including the sensor ID in the topology trace packet, sending the topology trace packet to the destination address, forming a report message so as to include the sensor ID, the previous sensor ID, sending the report to the topology manager; and, providing network addresses of adjacent nodes to the topology manager.

Abstract: A method of providing topology information about a network to a topology manager is disclosed. The network includes a plurality of sensors each having a sensor ID, and the method includes performing the following steps at each of the plurality of sensors: receiving a stream of packets and identifying a topology trace packet in the stream of packets, wherein the topology trace packet has a destination address and an ID of a previous sensor, including the sensor ID in the topology trace packet, sending the topology trace packet to the destination address, forming a report message so as to include the sensor ID, the previous sensor ID, sending the report to the topology manager; and, providing network addresses of adjacent nodes to the topology manager.

Abstract: A method of monitoring packet traffic is provided. The method includes: at a first access point, capturing portions of traffic packets passing therethrough separated by time intervals; encapsulating the portions of traffic packets thereby forming encapsulated packets and adding timestamps to the encapsulated packets so as to preserve the portions of traffic packets and information related to the time intervals; transmitting the encapsulated packets over a network; decapsulating the encapsulated packets so as to obtain replay packets and the capture timestamp, wherein the replay packets include the portions of the traffic packets; and, transmitting the replay packets separated by the time intervals, wherein the timestamps are used to reproduce the time intervals so as to imitate the traffic packets passing through the first access point.

Abstract: Systems and methods for managing communication in an IF network between a server and a probe that does not maintain an IP address, by selectively restricting which IP addresses that are identified, as active in the network may be borrowed for the probes. Restriction of IP addresses may include a black list to exclude specific IP addresses, a white list from which IP addresses can be drawn or both. This permits control over which IP addresses may be borrowed by probes, reducing false alarms, alerts or other network concerns caused by unexpected IP traffic on a particular IP address in the network.

Abstract: Systems and methods for managing communication in an IP network between a server and a probe that does not maintain an IP address by selectively restricting which IP addresses that are identified as active in the network may be borrowed for the probes. Restriction of IP addresses may include a black list to exclude specific IP addresses, a white list from which IP addresses can be drawn or both. This permits control over which IP addresses may be borrowed by probes, reducing false alarms, alerts or other network concerns caused by unexpected IP traffic on a particular IP address in the network.

Abstract: A method of monitoring packet traffic is provided. The method includes: at a first access point, capturing portions of traffic packets passing therethrough separated by time intervals; encapsulating the portions of traffic packets thereby forming encapsulated packets and adding timestamps to the encapsulated packets so as to preserve the portions of traffic packets and information related to the time intervals; transmitting the encapsulated packets over a network; decapsulating the encapsulated packets so as to obtain replay packets and the capture timestamps, wherein the replay packets include the portions of the traffic packets; and, transmitting the replay packets separated by the time intervals, wherein the timestamps are used to reproduce the time intervals so as to imitate the traffic packets passing through the first access point.

Abstract: A method of collecting information about a plurality of test devices connected in a network is provided. The method includes: identifying routable network addresses within a plurality of the network addresses, and sending discovery packets to the plurality of routable network addresses, receiving responses from the test devices, obtaining the information about the test devices, and storing the information so as to associate, for each of the test devices, the test-device information with at least one of the routable network addresses. The routable network addresses are stored in non-volatile memory for repeated use in re-discovery of the test devices in the network.

Abstract: A method for storing a plurality of packets includes receiving a packets from a network, applying a hash function to values of one or more fields in the packet so as define a hash key and to select a storage bucket from a plurality of buckets, and adding the packet to the storage bucket. A bucket record associated with the storage bucket includes a flow index determined based on the values of the one or more fields in the packet.

Abstract: A method of storing log entries of events from a plurality of network elements in a communication network, comprising the steps of: a) receiving log entries at a control processor of events from a plurality of different elements positioned, the log entries grouped into threads based on a common purpose; b) converting each log entry into a compact log record in a logging module, and c) storing the compact log records in a first memory buffer in random access memory (RAM) forming a first log file.