Abstract: Embodiments of the present invention provide a feature extraction apparatus, and a network traffic identification method, apparatus, and system. An unidentified data stream sent by a traffic identification apparatus is received, and behavior features of the unidentified data stream are extracted to obtain a traffic behavior feature of the unidentified data stream; the traffic behavior feature is sent to the traffic identification apparatus, so that the traffic identification apparatus identifies the unidentified data stream according to the traffic behavior feature. Therefore, the behavior feature extraction efficiency is high, and the identification ratio of data streams in the existing network is improved.

Abstract: A method to enable mobility while connected to an Internet protocol network comprises receiving a first data packet from a mobile node at a first mobile gateway in a mobile-gateway-communication network via a first access point and determining if a communication session is ongoing responsive to receiving the first data packet. When it is determined that a communication session is not ongoing, the first mobile gateway is established as a home mobile gateway for the duration of the communication session. When the mobile node connects to a second mobile gateway in the mobile-gateway-communication network via a second access point during the communication session, a tunnel is opened from the second mobile gateway to the home mobile gateway so that the communication session is maintained regardless of the protocol implemented by the mobile node and the access points.

Abstract: A system and method for indirectly controlling network devices, implemented using standard protocols, without a server at the network device. The network device monitors the traffic between a WEB server and a WEB browser. The control is implemented by embedding commands and responses in standard HTTP redirect requests sent by the WEB server to the WEB browser. The network device monitors the requests, and detects the commands according to the port number they are sent from. If the commands are HTTP redirect requests and comply with a specific command format, the network device implements the commands. Additional services may be provided, wherein a RADIUS server, security module etc. are connected to the network device.