Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for deep packet inspection (DPI) in a software defined network (SDN). The method includes configuring a plurality of network nodes operable in the SDN with at least one probe instruction; receiving from a network node a first packet of a flow, the first packet matches the at least one probe instruction and includes a first sequence number; receiving from a network node a second packet of the flow, the second packet matches the at least one probe instruction and includes a second sequence number, the second packet is a response of the first packet; computing a mask value respective of at least the first and second sequence numbers indicating which bytes to be mirrored from subsequent packets belonging to the same flow; generating at least one mirror instruction based on at least the mask value; and configuring the plurality of network nodes with at least one mirror instruction.

Abstract: A method for establishing a connection through a communication network that includes multiple segments includes providing a sharing definition defining a sharing of bandwidth among connections in the network. Two or more candidate routes for a new connection to be established through the network are identified. For each of the two or more candidate routes, a cumulative additional bandwidth reservation to be allocated to the new connection in the segments along the candidate route is calculated responsively to the sharing definition. A preferred route having a minimum value of the cumulative additional bandwidth reservation is selected out of the two or more candidate routes. The new connection is established using the preferred route.

Abstract: A method for traffic engineering in a communication system made up of network nodes arranged in multiple interconnected networks, including at least one bi-directional ring network having an inner ring and an outer ring. The bi-directional ring network is defined as a multi-access network for purposes of a routing protocol used in the system. Constraint information is advertised with regard to connections on the inner and outer rings between the nodes within the at least one bi-directional ring network. Traffic flow is routed through the system in accordance with the routing protocol, so that the flow passes through the at least one bi-directional ring network on at least one of the connections on one of the inner and outer rings that is selected responsive to the constraint information.

Abstract: In a bidirectional ring network, in which nodes are mutually connected by network segments, a method of fault protection includes constructing a general mask indicating which of the segments can be reached. For a given data flow to be conveyed through the network from a source node to a destination node, a specific mask is constructed indicating the segments on a desired path of the flow. The general and specific masks are superimposed in order to determine a disposition of the flow.

Abstract: A method for traffic engineering in a communication system made up of network nodes arranged in multiple interconnected networks, including at least one bi-directional ring network having an inner ring and an outer ring. The bi-directional ring network is defined as a multi-access network for purposes of a routing protocol used in the system. Constraint information is advertised with regard to connections on the inner and outer rings between the nodes within the at least one bi-directional ring network. Traffic flow is routed through the system in accordance with the routing protocol, so that the flow passes through the at least one bi-directional ring network on at least one of the connections on one of the inner and outer rings that is selected responsive to the constraint information.

Abstract: In a bidirectional ring network, in which nodes are mutually connected by network segments, a method of fault protection includes constructing a general mask indicating which of the segments can be reached. For a given data flow to be conveyed through the network from a source node to a destination node, a specific mask is constructed indicating the segments on a desired path of the flow. The general and specific masks are superimposed in order to determine a disposition of the flow.