Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

Abstract: Anonymization of IP addresses of a network while preserving a topology of the network is provided. Information is received regarding a network topology. The information is analyzed to generate a first model of the network topology. The first model is converted into a second model preserving the network topology and obfuscating a mapping of the IP addresses. The second model is utilized to simulate processing of network packets consistent with actual processing of the network packets in the network topology.

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

Abstract: Anonymization of IP addresses of a network while preserving a topology of the network is provided. Information is received regarding a network topology. The information is analyzed to generate a first model of the network topology. The first model is converted into a second model preserving the network topology and obfuscating a mapping of the IP addresses. The second model is utilized to simulate processing of network packets consistent with actual processing of the network packets in the network topology.

Abstract: Embodiments are directed to a packet capture ring that provides a single network tap for packet capture and a series of processors (or appliances) for handling serialization and search request processing in a confederated and highly scalable manner. One such appliance (a “primary” appliance) maintains a tap port to the network. Each packet capture appliance has a locally attached repository that stores raw packets and a juxtaposed index that allows for retrieval of those packets. The primary appliance sends a single copy of encapsulated packets in opposite directions around the ring to its descendants. A designation is made across the system as to a “currently designated” appliance for servicing requests for indexing and storage of captured packets. This current designation shifts from appliance to appliance in the system, as a “previously designated” appliance has its storage capacity filled.

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Abstract: A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Abstract: A policy engine generates configlets that are vendor-neutral, vendor-specific or both, based on a selected target level and a selected device/device group. A translator translates and combines the configlets to form vendor-dependent configuration files. The policy engine generates the configlets using policies associated with the selected target level and its sub-target levels, as defined by a target level hierarchy. A policy includes at least a condition, and an action which the policy engine performs if the condition is true. In performing the action, the policy engine typically writes to at least a partial configlet. A policy may further include a verification clause, which is used to verify a running configuration. Policy dependencies may also be defined such that where a second policy is dependent on a first policy, the second policy must be evaluated after the first policy. This is necessary, where, for example, the first policy generates and stores a value to be used by the second policy.