Abstract: Techniques are described for monitoring performance of a network. Particularly, network devices within the network exchange routing communications in accordance with one or more routing protocols, such as the Border Gateway Protocol (BGP), to automatically establish a community for monitoring performance throughout the network. Upon establishing the community, the network devices of the community exchange performance probes to collect comprehensive performance information for the network. This performance information may be aggregated via one or more computing devices. Using the aggregated performance information, numerous network performance characteristics may be computed, including delay, jitter, throughput, availability and packet loss.

Abstract: A network router includes a set of interface cards to receive packets from a network, and a set of accounting modules to calculate flow statistics for the packets. The router further includes a control unit to adaptively update routing information in response to the calculated flow statistics, and to route the packets in accordance with the routing information. The control unit identifies potentially malicious packet flows for the received packets based on the flow statistics, and applies an intercept filter to intercept the packets of the identified packet flows. The control unit analyzes the intercepted packets in real-time to determine the presence of a network event, and updates the routing information based on the determination, e.g., by terminating routing for packets associated with malicious packet flows. In this manner, the router may adaptively respond to network events, such as network security violations.

Abstract: A network device integrates accounting functionality for generation of flow statistics with packet intercept functionality to provide a comprehensive traffic analysis environment. The device comprises a set of network interface cards to receive packets from a network, and a set of accounting service cards to calculate flow statistics for the packets. The device further comprises a control unit to receive the network packets from the interface cards and distribute the packets to the set of accounting service cards. The accounting service card comprises an interface for insertion within a slot of a network device. Accounting service cards may be added to easily scale the network device to support higher bandwidth communication links, such as OC-3, OC-12, OC048 and higher rate links. Additional accounting service cards may be used for purposes of redundancy to support continuous, uninterrupted packet processing and accounting in the event of a card failure.

Abstract: Techniques are described for monitoring performance of a network. Particularly, network devices within the network exchange routing communications in accordance with one or more routing protocols, such as the Border Gateway Protocol (BGP), to automatically establish a community for monitoring performance throughout the network. Upon establishing the community, the network devices of the community exchange performance probes to collect comprehensive performance information for the network. This performance information may be aggregated via one or more computing devices. Using the aggregated performance information, numerous network performance characteristics may be computed, including delay, jitter, throughput, availability and packet loss.

Abstract: A network router includes a set of interface cards to receive packets from a network, and a set of accounting modules to calculate flow statistics for the packets. The router further includes a control unit to adaptively update routing information in response to the calculated flow statistics, and to route the packets in accordance with the routing information. The control unit identifies potentially malicious packet flows for the received packets based on the flow statistics, and applies an intercept filter to intercept the packets of the identified packet flows. The control unit analyzes the intercepted packets in real-time to determine the presence of a network event, and updates the routing information based on the determination, e.g., by terminating routing for packets associated with malicious packet flows. In this manner, the router may adaptively respond to network events, such as network security violations.

Abstract: A network device integrates accounting functionality for generation of flow statistics with packet intercept functionality to provide a comprehensive traffic analysis environment. The device comprises a set of network interface cards to receive packets from a network, and a set of accounting service cards to calculate flow statistics for the packets. The device further comprises a control unit to receive the network packets from the interface cards and distribute the packets to the set of accounting service cards. The accounting service card comprises an interface for insertion within a slot of a network device. Accounting service cards may be added to easily scale the network device to support higher bandwidth communication links, such as OC-3, OC-12, OC048 and higher rate links. Additional accounting service cards may be used for purposes of redundancy to support continuous, uninterrupted packet processing and accounting in the event of a card failure.

Abstract: A network router integrates routing functionality with accounting functionality for generation of flow statistics, and provides packet intercept functionality to provide a comprehensive traffic analysis environment. The router includes a set of interface cards to receive packets from a network, and a control unit to generate a first and second duplicate stream of the packets. The control unit provides the packets of the first stream to accounting modules for calculation of flow statistics, and applies an intercept filter to intercept at least a subset of the packets of the second stream for selected packet flows.

Abstract: A network router includes a set of interface cards to receive packets from a network, and a set of accounting modules to calculate flow statistics for the packets. The router further includes a control unit to adaptively update routing information in response to the calculated flow statistics, and to route the packets in accordance with the routing information. The control unit identifies potentially malicious packet flows for the received packets based on the flow statistics, and applies an intercept filter to intercept the packets of the identified packet flows. The control unit analyzes the intercepted packets in real-time to determine the presence of a network event, and updates the routing information based on the determination, e.g., by terminating routing for packets associated with malicious packet flows. In this manner, the router may adaptively respond to network events, such as network security violations.