Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: Systems and methods are set forth for identifying key-words and key-phrases, collectively referred to as key-terms, from a document. A document is accessed and the document is tokenized, each token corresponding to a word or phrase occurring within the document. Term frequencies of the terms of the tokens may be determined and TF-IDF scores may be generated according to the term frequencies. Embedding vectors for the terms of the tokens may be generated and a document embedding vector may be generated according to the embedding vectors of the documents. A similarity score may be determined for each token according to the embedding vector of a token and the document embedding vector. Additionally, an overall score may be determined for each token according to the term of the token, a TF-IDF score, similarity scores, and the like. Terms from the highest scoring tokens are selected as the key-terms for the document.

Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: Method and system for reducing multicast traffic loss including configuring, on a primary DR including a first configured DR priority, a DR parameter including a value and an attribute; sending to a secondary DR, after a PIM interface comes up, a PIM hello message including a default DR priority lower than a second configured priority of the secondary DR; sending to the secondary DR, after the primary DR reaches a system-up state, a PIM hello message including the default DR priority; performing DR functionality, by the primary DR, after reaching the system-up state; and sending to the secondary DR, after waiting a time period corresponding to the value of the DR parameter, a PIM hello message including the first configured DR priority, where the primary DR waits to send the last PIM hello message to the secondary DR after the time period based on the attribute of the DR parameter.

Abstract: According to one example embodiment, an EID-NOTIFY packet is defined for use with the Location/Identifier Separation Protocol (LISP). A first-hop network element may send EID-NOTIFY responsive to decoding a data packet from a previously undetected host on its subnetwork. A site network element may receive EID-NOTIFY, and send a MAP-REGISTER message to a mapping system. EID-NOTIFY may have substantially the same format as MAP-NOTIFY. This may enable the site network element to be removed more than one hop from the subnetwork.

Abstract: Method and system for reducing multicast traffic loss including configuring, on a primary DR including a first configured DR priority, a DR parameter including a value and an attribute; sending to a secondary DR, after a PIM interface comes up, a PIM hello message including a default DR priority lower than a second configured priority of the secondary DR; sending to the secondary DR, after the primary DR reaches a system-up state, a PIM hello message including the default DR priority; performing DR functionality, by the primary DR, after reaching the system-up state; and sending to the secondary DR, after waiting a time period corresponding to the value of the DR parameter, a PIM hello message including the first configured DR priority, where the primary DR waits to send the last PIM hello message to the secondary DR after the time period based on the attribute of the DR parameter.

Abstract: According to one example embodiment, an EID-NOTIFY packet is defined for use with the Location/Identifier Separation Protocol (LISP). A first-hop network element may send EID-NOTIFY responsive to decoding a data packet from a previously undetected host on its subnetwork. A site network element may receive EID-NOTIFY, and send a MAP-REGISTER message to a mapping system. EID-NOTIFY may have substantially the same format as MAP-NOTIFY. This may enable the site network element to be removed more than one hop from the subnetwork.

Abstract: A method for addressing attacks on a computer connected to a network includes receiving at a router a TCP SYN request to be screened. The method also includes comparing the received TCP SYN request to be screened to at least one stored tuple representative of one or more SYN requests previously received at the router and determining that the received TCP SYN request to be screened matches the stored tuple. In response to determining that the received TCP SYN request to be screened matches the stored tuple, the TCP SYN+ACK response is prevented from being sent by the router in response to the TCP SYN request to be screened.

Abstract: A network element implementing a method for determining an optimal maximum transmission unit (MTU) value on a path between two nodes in a network is described. A sending node interested in learning the optimal MTU path value allows fragmentation of datagrams sent on the path, selects an initial MTU, and sends one or more data packets to a receiving node. Upon receiving the data the receiver determines if fragmentation occurred. If no fragmentation occurred then the MTU path selected is the optimal MTU for the given path between the nodes. If fragmentation did occur then the sender is notified that the selected MTU was not the optimal MTU for the path. Either the receiver proposes a new MTU for the path, or the sender selects a new, smaller MTU. The process repeats until the receiver detects no fragmentation.

Abstract: A method and system for determining path maximum transfer unit (PMTU) in an Internet Protocol (IP) multicast is described. If a packet of a size greater than the MTU of any link of a path, with its Don't Fragment (DF) bit set, is sent by the source, the packet is dropped and an ICMP message, stating “Destination unreachable, DF bit set”, is sent to the source. The rate of messages to the source is controlled to avoid implosion of traffic. In response to the messages, the source sends multicast probe packets of multiple sizes to multicast distribution tree to determine its PMTU.

Abstract: A method and system for filtering traffic in a multicast network are disclosed. Multicast packets are received at a network device which has a multicast routing table and a list containing nodes or interfaces authorized for transmitting multicast traffic into the network at the network device. The method includes determining if the network device is directly connected to a source of the multicast packet and only if the network device is directly connected to the source of the multicast packet, checking the list to determine if the source is an authorized source and dropping or blocking multicast packets from the source if the source is not an authorized source. The method further includes processing multicast packets from the source according to the multicast routing table.

Abstract: A method and system for filtering traffic in a multicast network are disclosed. Multicast packets are received at a network device which has a multicast routing table and a list containing nodes or interfaces authorized for transmitting multicast traffic into the network at the network device. The method includes determining if the network device is directly connected to a source of the multicast packet and only if the network device is directly connected to the source of the multicast packet, checking the list to determine if the source is an authorized source and dropping or blocking multicast packets from the source if the source is not an authorized source. The method further includes processing multicast packets from the source according to the multicast routing table.

Abstract: A network element implementing a method for determining an optimal maximum transmission unit (MTU) value on a path between two nodes in a network is described. A sending node interested in learning the optimal MTU path value allows fragmentation of datagrams sent on the path, selects an initial MTU, and sends one or more data packets to a receiving node. Upon receiving the data the receiver determines if fragmentation occurred. If no fragmentation occurred then the MTU path selected is the optimal MTU for the given path between the nodes. If fragmentation did occur then the sender is notified that the selected MTU was not the optimal MTU for the path. Either the receiver proposes a new MTU for the path, or the sender selects a new, smaller MTU. The process repeats until the receiver detects no fragmentation.

Abstract: The present invention relates to the an herbal formulation comprising a combination of fiber, powder, and/or granules of aerial parts of plants selected from Hemedesmus indicus, Acorus calamus, Murraya Koenigii, Alpinia galanga, Papaver somniferum, Amorphophallus campanulatus, Hygrophila auriculata, Hygrophila schulli, Cuminum cyminum, Apium graveolens, Colocasia esculenta. The present invention further relates bidis, cigarettes, cigars, pipes, snuffs, cigars, and chewing gums comprising the herbal composition.

Abstract: An herbal formulation comprising the synergistic combination of fiber/powder/granules of the aerial parts of at least two plants selected from the group comprising Marticaria chamomilla, Hygrophila auriculata, Aquilaria agallocha, Valeriana wallichii, Nordostachys jatamansi, Artemisia pallen, Papaver somniferum(mainlyleaf), Evolvulus alsinoides, Ficus benghalensis, Echinops echinatus, Lobelia nicotianaefolia, Mucuna pruriens, Tribulus terrestris and along with one or more flavoring agents selected from essential/aromatic oils. Thee composition is aromatic and having pleasant smell, are non-irritants, no itching, and has no toxic-effects, no breathing problems, has no bronchial irritation, no pain in nose, ear and throat, has no headache, not allergic. There are no health hazards or health risk in normal subjects when the person attempts to reduce their use of nicotine or non nicotine bidis and cigarettes or stop using such products altogether.

Abstract: A method and system for determining path maximum transfer unit (PMTU) in an Internet Protocol (IP) multicast is described. If a packet of a size greater than the MTU of any link of a path, with its Don't Fragment (DF) bit set, is sent by the source, the packet is dropped and an ICMP message, stating “Destination unreachable, DF bit set”, is sent to the source. The rate of messages to the source is controlled to avoid implosion of traffic. In response to the messages, the source sends multicast probe packets of multiple sizes to multicast distribution tree to determine its PMTU.

Abstract: A method for addressing attacks on a computer connected to a network includes receiving at a router a TCP SYN request to be screened. The method also includes comparing the received TCP SYN request to be screened to at least one stored tuple representative of one or more SYN requests previously received at the router and determining that the received TCP SYN request to be screened matches the stored tuple. In response to determining that the received TCP SYN request to be screened matches the stored tuple, the TCP SYN+ACK response is prevented from being sent by the router in response to the TCP SYN request to be screened.