Abstract: As described herein, a node may include storage to store a cost for each of a number of paths, where a path connects two nodes in a system. A path may be determined between the node and a destination node based on execution of a shortest path first algorithm, the shortest path first algorithm to determine if a cost between two nodes is stored in storage prior to communication with another node to determine cost.

Abstract: Techniques are provided for sending response messages based on pending requests. A request message identifying a data packet may be received. A pending request structure may be used to determine output queues that are in need of the data packet identified in the request message. A response message may be sent indicating if the request message is being refused based on the output queues.

Abstract: Techniques are provided for sending request messages to destination nodes. Destination nodes may be indicated as unresolved. Request messages are sent to destination nodes indicated as unresolved.

Abstract: An apparatus includes a checking functionality (CF) for processing data packets in a computer network that comprises a plurality of CFs. The CF includes an interface for communication with one or more source switches that route data packets to the CF for processing, a packet processing capability for processing the data packets, and logic for communicating data regarding the packet processing capability to the source switch through the interface.

Abstract: One embodiment disclosed relates to a method of mirroring network traffic. A data packet is received by a network device, and an algorithm including randomization is applied to determine whether the data packet is selected to be mirrored. The packet is sent to a destination port, and if the data packet is selected to be mirrored, then the packet is also sent to a mirror port. Another embodiment of the invention relates to a networking device. The networking device includes at least a plurality of ports, a switching/routing engine, and a mirroring engine. The plurality of ports receive and transmit packets therefrom, and the switching/routing engine is coupled to the ports for transferring the packets therebetween. The mirroring engine is configured to apply an algorithm including randomization to select data packets for mirroring. Other embodiments are also disclosed.

Abstract: One embodiment disclosed relates to a method of sampling network traffic. A data packet is received by a network device. Information is extracted from fields in the data packet, and a look-up word is created using the extracted information. A content addressable memory is searched for entries matching the look-up word. If a match is found, then a sampling circuit is queried, and a response is received therefrom. The data packet may be sent to a destination port. In addition, if the response from the sampling circuit indicates that the data packet is chosen to be mirrored, then the data packet may be also sent to a mirror port. Other embodiments are also disclosed.

Abstract: An apparatus includes a checking functionality (CF) for processing data packets in a computer network that comprises a plurality of CFs. The CF includes an interface for communication with one or more source switches that route data packets to the CF for processing, a packet processing capability for processing the data packets, and logic for communicating data regarding the packet processing capability to the source switch through the interface.

Abstract: One embodiment relates to a method of a single network device outside of a group of switches connecting via multiple connections to the group of switches. Multiple ports of the single network device are connected with ports of at least one switch within the group, and the connected ports on the at least one switch are mapped to different virtual local area networks configured in the group of switches. A path from each of the connected ports on the at least one switch are replicated through the group of switches. Other embodiments are also disclosed.

Abstract: Methods of balancing network packet traffic among multiple checking functionalities (CFs) are described. A network has at least one client operatively connected to at least one source switch and multiple available CFs operatively connected to at least one destination switch. Each available CF has predetermined, but possibly different inspection capabilities. A source switch receiving packets from a client inspects each packet and can optionally choose an available CF having at least the minimum necessary inspection capabilities to inspect the particular packet, and tunnel the packet to the chosen CF.

Abstract: A method for checking expected network traffic is disclosed. The method for checking expected network traffic includes accessing pre-registered expected results of a network traffic checking exercise that include expected packet content verification information for individual packets of the network traffic. In addition, the method includes accessing network traffic where individual packets of the network traffic include actual packet content verification information. Individual packets are identified that have expected packet content verification information that does not match their actual packet content verification information and individual packets are identified that have expected packet content verification information that does match their actual packet content verification information.

Abstract: Methods of balancing network packet traffic among multiple checking functionalities (CFs) are described. A network has at least one client operatively connected to at least one source switch and multiple available CFs operatively connected to at least one destination switch. Each available CF has predetermined, but possibly different inspection capabilities. A source switch receiving packets from a client inspects each packet and can optionally choose an available CF having at least the minimum necessary inspection capabilities to inspect the particular packet, and tunnel the packet to the chosen CF.

Abstract: One embodiment relates to a method of processing a broadcast packet by a switch. If the packet is received from another switch within a same mesh, then the packet is flooded to appropriate destination ports based on a flood map corresponding to an existing mesh tag in the packet. If the packet is received from an end node, then a new mesh tag is added to the packet and then the packet is flooded to appropriate destination ports based on a flood map corresponding to the new mesh tag in the packet. If the packet is received from a meta mesh, then an existing meta-mesh tag is stripped from the packet, a mesh tag in the packet is modified, and the packet is flooded to appropriate destination ports based on a flood map corresponding to the modified mesh tag in the packet. Other embodiments, aspects and features are also disclosed.