Abstract: An apparatus, such as a network element, comprises a receiver to receive a plurality of packets. A memory stores instructions and forms a first and second set of virtual queues to store the plurality of packets. A processor having one or more cores with one or more packet classifiers provides a classification of a packet in the plurality of packets. The processor in communication with the memory executes instructions to transfer the packet from the receiver to a virtual queue in the first set of virtual queues based on the classification. The processor also transfers the packet from the virtual queue to a transmitter based on a demand rate value and supply rate value associated with the virtual queue.

Abstract: Disclosed aspects include managing a set of wear-leveling data with respect to a set of physical cores of a set of compute nodes. A set of physical cores of the set of compute nodes may be monitored using a set of processor utilization resource registers (PURRs) to identify the set of wear-leveling data. By monitoring the set of physical cores of the set of compute nodes, a set of thread events with respect to the set of physical cores of the set of compute nodes may be detected. Based on the set of thread events, the set of wear-leveling data may be determined. The set of wear-leveling data may then be established in a data store. The wear leveling data may be used to manage asset placement with respect to a shared pool of configurable computing resources.

Abstract: An example of an information processing system includes an information processing terminal and a server configured to communicate with the information processing terminal. The information processing terminal starts an application in accordance with an instruction of a user and transmits identification information of the started application to the server. The server stores specifying information for specifying, from among a plurality of contents, a content or a group of contents as a target to be transmitted to the information processing terminal, in association with identification information of an application. The server receives identification information from the information processing terminal and selects, from the stored specifying information, specifying information associated with the identification information received from the information processing terminal.

Abstract: Systems and methods for providing time-shifted data downloads over cellular networks are disclosed. The downloads can be selected using an application or other data consuming application with a “download later” feature, or similar. The application can register with a data shifting service (DSS) to receive a low-priority, or “0-rated,” download of the data. The DSS can place the application in queue waiting for predetermined network conditions (e.g., network utilization to fall below a predetermined level). Upon occurrence of the predetermined network conditions (e.g., network utilization falling below a predetermined rate), the DSS can inform the application that a low-priority download window is available. The application can then download the data from a content provider. The DSS can enable cellular networks to increase average network utilization, while reducing peak demand. The system may offer low-priority downloads at reduced cost, or free, to incentivize use of the DSS.

Abstract: An channel consolidation system and method may include analyzing a channel of a persistent chat platform to determine a plurality of metrics associated with the channel, calculating a message channel vitality score for each channel based on the plurality of metrics of the channel, wherein the message channel vitality score of the channel defines an effectiveness of the channel, comparing the message channel vitality score with a predefined effectiveness threshold, determining an action to be taken for the channel based on the comparing of the message channel vitality score and the predefined effectiveness threshold, and performing, by the processor, the action in response to the determining.

Abstract: First and second network nodes and methods thereof are provided. The method for the first network node to manage a second network node in a mobile communication system includes receiving, from a plurality of second network nodes, application programming interface (API) information related to each of the plurality of second network nodes, composing a plurality of second network node chainings based on the API information, selecting, when an API request is received from an external server, one of the plurality of second network node chainings for supporting the API request, and transmitting the API request to a second network node included in the selected second network node chaining.

Abstract: In one example, a system for device throughput determination includes a monitor engine to monitor an average packet size at a node of a cellular network designated for a device and a channel quality between the device and the node of the cellular network, a classification engine to classify the device based on the monitored average packet size at the node designated for the device and the channel quality, a prediction engine to predict a throughput for the device over a quantity of future transmission time intervals (TTI) based on the classification of the device and a number of resources requested by the device over a period of time.

Abstract: A method is provided in one example embodiment that includes receiving metadata from a host over a metadata channel. The metadata may be correlated with a network flow and a network policy may be applied to the connection. In other embodiments, a network flow may be received from a host without metadata associated with the flow, and a discovery redirect may be sent to the host. Metadata may then be received and correlated with the flow to identify a network policy action to apply to the flow.

Abstract: A method for converting a legacy building into a smart building. The method including calculating a distance between a first connection point and a second connection point; creating a cable having a first length based on the distance between the first connection point and the second connection point; installing a demarcation point; installing a plurality of systems; connecting the demarcation point and a system using the cable, to create a smart building system; connecting the smart building system to a portal; and testing the connection of the smart building system to the portal.

Abstract: A mobile network entity configured to upon reception of a TFR message forwarding a SM towards a UE in extended idle mode DRX, including a SM-Delivery-Timer/Start-Time indicating the time used in the SM gateway SMSC to supervise the receipt of the TFR message, keep the SM for a specified time if the UE is expected to become reachable before the expiration of the timer, and page the UE. If the UE responds to this paging during this specified time, the mobile network entity configured to deliver the SM to the UE, and if the UE does not respond to this paging during this specified time, or if the UE is not expected to respond within this time, send towards a SM gateway SMSC a delivery failure and set a flag to record that the UE is currently not reachable.

Abstract: A virtualized Policy, Charging, Negotiation and Enforcement Entity (PCNE) is disclosed for serving cellular traffic across multiple networks. The PCNE manages signaling and user payloads to apply policies compliant to concerned networks in real time. The PCNE provides policy control to a Home network even when its outbound subscriber traffic is locally offloaded at a Visited network or IP Packet Exchange (IPX) cloud. The PCNE protects the Visited network against capacity overuse by inbound subscriber traffic, thereby providing joint control to the Home and Visited network operators resulting in optimal use of bandwidth and resources along with consistent subscriber experience. The PCNE enables the Home network operator to implement domestic quota buckets and policies while its subscriber is roaming in the Visited network by applying differential policy and charging rules. Traffic can be offloaded to a preferred packet data gateway after enforcing the negotiated policies.

Abstract: A system includes a processor configured to determine that a telematics control unit component temperature is above a predefined maximum temperature. The processor is also configured to send a message to a remote communication server notifying the server that packet communication will be disabled and disable packet communication, responsive to the determination. The processor is further configured to enable binary user-data-embedded SMS message handling for remote commands received from the server, responsive to disabling the packet communication.

Abstract: A system and method for reducing waste of a network resource is disclosed. The method including: providing a group of active subscribers; determining an underutilization level of the network resource for an upcoming allocation interval; calculating a throttle and a resource weight for the group of active subscribers to decrease the underutilization level; allocating the network resource based on the throttle and the resource weight; and adjusting, based on a feedback underutilization level, the throttle and the resource weight. In some embodiments, the throttle is based on congestion metrics including measuring available channel capacity, a latency, a queue depth, a count of subscribers in an outroute channel or the like. In some embodiments, the active subscribers may include under subscribers, over subscribers and premium subscribers, wherein each of the over subscribers have exceeded a respective network resource usage allowance for a respective subscription interval.

Abstract: A wireless device receives downlink control information comprising: an allocation of resource blocks for transmission of uplink data via a subframe of a LAA cell; a first field comprising an index indicating a starting position for the transmission of the uplink data, the index identifying one of pre-configured starting positions; and a second field indicating an ending symbol for the transmission of the uplink data, the ending symbol being one of pre-configured ending symbols. A listen-before-talk procedure indicating a clear channel is performed before the starting position of the subframe. Based at least on the starting position and the ending symbol, the uplink data to resource elements corresponding to the resource blocks are mapped. The uplink data is transmitted, via the LAA cell, starting at the starting position in the subframe and ending before the ending symbol.

Abstract: Improved virtualized application performance is provided through disabling of unnecessary functions, such as unnecessary encryption and decryption operations. An example method performed by a hypervisor includes the steps of obtaining a request to one or more of encrypt and decrypt a communication between a first virtual machine and a second virtual machine; determining if the first and second virtual machines execute on a same host as the hypervisor (e.g., by evaluating a context of the communication); and processing the communication without encrypting or decrypting the communication if the first and second virtual machines execute on the same host. Lawful Interception is performed by forwarding an unencrypted version of the communication to an authorized agency.

Abstract: A system and method for D2D discovery is provided. In an embodiment the method includes sending, by a base station, first parameters to a first User Equipment (UE) indicating a set of discovery resources in a discovery cycle, wherein the discovery cycle comprises a plurality of subframes; and sending, by the base station, second parameters to the first UE indicating a first probability for transmitting a first discovery signal to a second UE on a subframe of the plurality of subframes so that the first UE is capable of transmitting the first discovery signal to a second UE in the discovery cycle according to the first parameters when a random number between 0 and 1, selected by the first UE, is equal or larger than the first probability.

Abstract: Methods and systems for providing a recommendation for improving the security of a networked system against attackers. The recommendation may include a recommendation of a single sub-goal to be protected to achieve optimal improvement in security, or of multiple such sub-goals. If the recommendation includes multiple sub-goals, the sub-goals may be ordered such that the first sub-goal is more important to protect, provides a greater benefit by being protected, or is more cost effective to protect than subsequent sub-goals in the ordered list of sub-goals.

Abstract: Internet protocol packets are statelessly identified as associated with a particular session-instance by identifying a key, or session-instance identifier, within the data (or payload) portion of a user plane packet. This identifier is specific to the session-instance and remains constant throughout the session-instance. Using this stateless identification, transmitted user plane packets are automatically routed at the transmission speed of the transmission link using a method that automatically balances the analysis processing load between network probes. The load is balanced by routing the user plane packet to a network probe that is either already analyzing the session-instance or by routing the user plane packet to a system that has processing capacity to analyze a new session-instance. The network probe then analyzes the user plane packet and the session-instance to measure the quality of the user experience of the session-instance and performance of the network.

Abstract: Methods and apparatus for determining and using link performance measures (DL, CL) in respect of communication links (125) in a cata communication network (100) are disclosed, where the network comprises a plurality of data-forwarding nodes (120) each capable of forwarding data along a plurality of communication links (125). Link performance measures (DL, CL) are determined in dependence on end-to-end path performance measures (Es,u) received in respect of a plurality of end-to-end paths having at least one link in common, and on the basis of route information (Rs,u) identifying the links of which those end-to-end paths are comprised. Methods are disclosed for using link performance measures in relation to decisions regarding the routing and/or re-routing of data in a network, and in relation to determining measures indicative of expected quality of experience in respect of data traversing end-to-end paths across a network.

Abstract: The present disclosure relates to a content supply apparatus, a content supply method, a program, a terminal apparatus, and a content supply system that allow to provide a receiver with pieces of general required network quality information for respective delivery paths for a case of supplying pieces of content of the same content through a plurality of different delivery paths. A content supply apparatus of the present disclosure delivers streams of content through a plurality of different networks, respectively, according to an adaptive streaming technique, and includes: a generating unit that generates metadata describing QoS parameters for the respective plurality of different networks through which the streams are delivered, and condition values of the QoS parameters; and a delivering unit that delivers the generated metadata to a receiver. The present disclosure can be applied to a system that streams content.

Abstract: Embodiments presented herein provide a method, including: receiving, by a policy and charging rules function unit (PCRF) by using a service capability exposure function unit (SCEF), a message sent by an application server (AS). The message is used to request to formulate a service chain policy for a service flow of user equipment (UE), and includes a service chain requirement of the service flow. The method further includes formulating, by the PCRF, the service chain policy for the service flow according to the service chain requirement included in the first message. The service chain policy includes a service chain function provided to the service flow. When a user needs to implement a service, the PCRF formulates, according to a message sent by the AS that includes a requirement of a service flow corresponding to the service, a service chain policy that is suitable for the service flow.

Abstract: Embodiments of the present disclosure disclose a method, a base station, and a system for sending RRC signaling, and in the method for sending RRC signaling provided in the embodiments of the present disclosure, a pico base station and a macro base station participate in configuration and generation of an RRC reconfiguration message; the pico base station establishes only one RRC entity that is used to generate a configuration parameter or an RRC entity; the RRC reconfiguration message cooperatively generated by the pico base station and the macro base station is uniformly sent by the macro base station to a user equipment. Therefore, the user equipment UE can support, only by establishing an SRB corresponding to the macro base station, an RRC reconfiguration message sent by the pico base station, thereby lowering design complexity and costs.

Abstract: Computing systems, devices, and associated methods of managing secure communication using hardware accelerators are disclosed herein. In one embodiment, a method includes receiving messages from a peer computing device via a computer network at a FPGA of a hardware accelerator and examining each of the received messages to determine whether the received messages contain application data. The method can then include forwarding a first subset of the received messages that do not contain application data to the processor for further processing and processing a second subset of the messages containing application data according to a security protocol without forwarding the second subset to the processor to reduce a consumption of bandwidth across the communications bridge.

Abstract: A communication apparatus having a plurality of antennas, comprises a communication unit configured to communicate with an external apparatus with the plurality of antennas, a detection unit configured to detect a status of the communication apparatus, and a specifying unit configured to specify a noise component mixed in signals received from the external apparatus according to the status of the communication apparatus.

Abstract: In some examples, a system for an aggregate interface including a mmWave interface and a WLAN interface consistent with the disclosure includes a sending device to assign a plurality of frames to the WLAN interface and the mmWave interface and send the plurality of frames in a sequence via an aggregate interface, where the aggregate interface includes the WLAN interface and the mmWave interface. Additionally, the system includes a receiving device communicatively coupled to the sending device to determine the plurality of frames is received in a different sequence than the sequence the plurality of frames is sent by the sending device and place the plurality of frames in the sequence the plurality of frames is sent by the sending device.

Abstract: A network controller being executed by a processing device generates a file descriptor indicating when the network controller or a virtual switch being executed by the processing device stored a packet to a shared memory buffer. At least one of a read or write operation being performed on the packet stored at the shared memory buffer is identified. In response to identifying the at least one of the read or write operation being performed on the packet, the file descriptor is modified in view of the at least one of the read or write operation being performed on the packet.

Abstract: Embodiments of the present invention relate to a data shunting method, a data transmission device and a shunting node device, the data shunting method provided in the embodiments of the present invention includes: acquiring the number of to-be-transmitted shunted data packets which are cached in the shunting node device; when the number of the to-be-transmitted shunted data packets is less than a first threshold value, transmitting shunted data to the shunting node device, otherwise, not transmitting the shunted data to the shunting node device. The data shunting method provided in the embodiments of the present invention enables the data transmission device to provide the shunting node device with an appropriate shunted data rate.

Abstract: Reception of network load data is disclosed. For instance, the network load data can provide indication of a utilization level extant in a wireless cellular network. The systems and methods, as a function of the utilization level, determine a congestion metric that indicates a level of congestion determined to have been experienced by a communication packet using the wireless cellular network device. Further, the disclosed systems and methods schedules transmission of communication packets to an end user device via the wireless cellular network device, as a function of the determined congestion metric.

Abstract: A database access control system is augmented to provide additional functionality to enable an external security device (e.g., an EDSM) to fully and accurately assess a database query against one or more security policies even when the EDSM is overloaded. To this end, a pair of channels is established between the ISA and the ESM, wherein the channel pair includes a first channel that is expected to have relatively low packet rate, and a second channel that is expected to have a relatively high packet rate. Packets representing initial session information (i.e., user information sent at the beginning of a user session) are directed to the first channel, whereas packets received following session establishment are directed to the second channel, because the latter are likely to be present during a potential overload scenario.

Abstract: A method for fast initial link setup (FILS) for use in a wireless station, is disclosed. The method includes receiving a FILS discovery (FD) frame from an access point (AP). FD frame includes an FD frame control field and FD frame contents. The FD frame control field includes a capability presence indicator indicating whether a FD capability field is present in the FD frame contents. The method further includes determining to associate with the AP based on the received FD frame, and transmitting an association request frame to the AP.

Abstract: In one embodiment, a network node device includes a hardware platform including a central processing unit (CPU) complex, a storage medium and an input/output subsystem to provide network processing and transport of data in a network. The CPU complex is operative to receive a plurality of hardware platform management decisions from a plurality of different network nodes in the network, process the received hardware platform management decisions to yield a hardware platform management proposed action, and issue a command to implement the hardware platform management proposed action in the hardware platform. The hardware platform is operative to implement the hardware platform management proposed action. Related apparatus and methods are also described.

Abstract: Provided is a radio base station, etc. that realize transmission control in view of QoE. According to a first aspect of the present invention, there is provided a radio base station that receives a packet(s) transmitted from a packet transmission apparatus via a network and transmits the received packet(s) to a wireless terminal(s), the radio base station including: acquisition means that acquires a packet type(s) or a packet identifier(s) set in the packet(s) by the packet transmission apparatus; and control means that performs transmission control to change a transmission order of the packet(s) based on the packet type(s) or the packet identifier(s).

Abstract: A method and associated system for mitigating a Distributed Denial of Service (DDoS) attack on a target device including, receiving a plurality of data packets at a mitigation device, counting a number of occurrences of each destination address signature within each of a plurality of consecutive data packet windows, classifying each data packet window of the plurality of consecutive data packet windows as a potential attack window if the number of occurrences of any one destination address signature within the data packet window exceeds a destination address signature threshold value. The method further includes, determining a total number of potential attack windows within a sliding time window and limiting the transmission of the plurality of data packets from the mitigation device if a total number of potential attack windows within the sliding time window exceeds a potential attack window threshold value.

Abstract: In an embodiment, there is provided a method for reducing the load due to user location change reporting for location-based policy and/or charging control services for said user, in a mobile communication system wherein granularity of user location includes granularity at cell level and/or granularity at service area level, a service area (or Location or Routing or Tracking Area) comprising a set of cells defined at network operation level, a method wherein said user location change reporting is based on at least one of: a granularity of reporting at a base station level, whereby a user location change is reported upon change of serving base station, a granularity of reporting at a policy area level, whereby a user location change is reported upon entering or leaving a policy area, a policy area comprising a set of cells and/or serving areas, defined at policy and/or charging control level, for a granularity of reporting at a cell level or at a service area level or at a policy area level, a deferred user

Abstract: Scheduling of packets to be forwarded onto DOCSIS downstream channels as part of a Virtual Converged Cable Access Platform (CCAP). A packet to be forwarded onto a DOCSIS downstream channel is enqueued in a service flow queue. The packets stored in the service flow queue are associated with a single service flow. A request is propagated up a hierarchy of schedule elements to a scheduler process to schedule the packet for delivery. The scheduler process determines a grant of how much traffic to offer the DOCSIS downstream channel. The grant determined for the DOCSIS downstream channel may be expressed in units of symbols rather than in bytes. The scheduler process extends a particular grant to the service flow queue by translating symbols in the grant for the service flow queue which issued the request.

Abstract: A method and apparatus of a device that triggers a pause watchdog is described. In an exemplary embodiment, the device receives a pause message from a second network element on a first network element, where the pause message indicates that data should not be transmitted by the first network element. The device additionally triggers a pause watchdog on the first network element if the pause message is above a pause watchdog threshold, where the pause watchdog reduces the effect of the pause message.

Abstract: A method for controlling traffic transmission in a control server of a communication system includes receiving information of an application corresponding to a network session; receiving, from a network node, information related to a network congestion condition with respect to the network session; and controlling a traffic flow of the network session on the basis of a traffic quality policy which is determined on the basis of the received application information and/or the information related to the network congestion condition. The control server can receive, from an electronic device, the application information of an application corresponding to the network session. The control server can determine the quality policy on the basis of the application information. The control sever can control the traffic flow of the network session according to the quality policy.

Abstract: A method includes exchanging metadata with a network customer during a first provision of a first service to the network customer. The method also includes receiving a request for a second service from the network customer and determining a quality-of-service requirement based on the metadata and a provider of at least one of the first service or the second service. The method also includes adjusting a network resource based on the quality-of-service requirement. The network resource facilitates a second provision of the second service to the network customer.

Abstract: Example implementations are directed to a method and an apparatus for managing one of a plurality of core networks (CNs) sharing a radio access network (RAN), which may receive a RAN resource allocation control type indicator associated with at least one CN of the plurality of CNs. The RAN resource allocation control type indicator be at least one of: a guaranteed minimum allocation of RAN resources, an absolute allocation of RAN resources, and a percentage-based allocation of RAN resources. The method and apparatus may further include determining a RAN resource allotment parameter for the at least one CN of the plurality of CNs. The RAN resource allotment parameter and an identification of the associated at least one CN may be transmitted to a traffic controller such that the at least one CN is allocated an amount of RAN resources based on the resource allotment value may.

Abstract: A method for estimating reception time of beacon signals includes receiving a beacon from a transmitting device, checking the real-time clock (RTC) of a receiving device, checking a timing synchronization function (TSF) of the received beacon, and estimating a reception time of a next beacon according to the RTC, TSF and a period of the beacon.

Abstract: Disclosed are a method for transmitting and receiving a frame in a wireless local area network (WLAN) system and an apparatus for the same. A method for generating interference/non-interference station lists includes receiving a first frame from a second station, acquiring a receiver address of the first frame from the first frame, and setting, based on whether to receive a second frame that is a response to the first frame from a third station indicated by the receiver address within a preset time from a time when the first frame has been received, the third station as an interference station or a non-interference station. Therefore, the performance of a communication system may be improved.

Abstract: A communication technique and system for converging, with Internet of things (IoT) technology, a 5th generation (5G) communication system for supporting a higher data transmission rate beyond a 4th generation (4G) system is provided. The present disclosure may be applied to intelligent services (for example, smart homes, smart buildings, smart cities, smart cars or connected cards, health care, digital education, retail business, security and safety related services, etc.), on the basis of the 5G communication technology and IoT associated technology. According to an embodiment, a method of a terminal in a wireless communication system is provided. The method includes receiving system information, identifying power information for a synchronization signal and a broadcast channel, based on the system information, and transmitting and receiving a signal, based on the power information. In this method, the power information for the synchronization signal and the broadcast channel are set equally.

Abstract: Embodiments of the present disclosure relate to the field of wireless communications technologies, and disclose an information transmission method and apparatus in a cell, so as to improve information transmission efficiency of a wireless network. The method of the present disclosure includes: obtaining, by a network device, terminal information, where the terminal information includes: a movement speed of the terminal, and/or a location of the terminal in the cell; determining, by the network device, a state of the terminal according to the terminal information, where the state of the terminal includes: a first state or a second state; and when the terminal is in the first state, performing, by the terminal, communication on a contention resource of the cell; and when the terminal is in the second state, allocating, by the network device, a contention-free resource of the cell to the terminal.

Abstract: In some embodiments a method includes receiving, at a first network device, a data unit to be sent to second network device via a tunnel, the data unit associated with an application. The method includes appending, to the data unit, an encapsulation header that includes a first portion configured such that the second network device is configured to forward the data unit based on the second portion of the encapsulation header that is configured to identify the application. The method includes sending, from the first network device to the second network device via a first portion of the tunnel, the data unit such that the second network device appends the encapsulation header to the data unit prior to forwarding the data unit via a second portion of the tunnel.

Abstract: Presented herein are priority route based techniques for mitigation of slow drain devices in a Fibre Channel (FC) fabric comprising a plurality of FC switches. In accordance with examples presented herein, a first FC switch in a FC fabric receives an indication that a first computing device attached to the FC fabric has entered a slow drain condition. The first FC switch is configured to prepare and install a priority route for packet flows directed to the first computing device.

Abstract: A data processing system for processing data messages received from multiple user terminals over one or more data networks includes a processor, an input/output (I/O) range, and multiple processing layers configured to run on the processor. The multiple processing layers include an application layer, including an application, configured when run on the processor to process data messages from the I/O range, a hardware layer configured when run on the processor to communicate with hardware devices including the user terminals, and an operating system kernel layer configured when run on the processor to provide data communications between the application layer and the hardware layer. The application layer can bypass the operating system kernel layer when communicating with the hardware layer to poll the I/O range for data messages for input to and processing by the application.

Abstract: A system and method is provided that enables the recovery of data packets transmitted over an unreliable network. The system and method utilize an algorithm for transmitting the data packets with restoration of lost data during data transfer over UDP Protocol encrypted with DTLS Protocol. Advantageously, the algorithm does not require changes to data for either UDP or DTLS packets, but rather a separate, specifically designed packet is transmitted to the recipient to facilitate and ensure the recovery of any lost data packets over the unreliable network.

Abstract: Some examples described herein relate to deployment of a plurality of programs on a server in a cloud network. An example method may include using a single deployer agent on a server to deploy the plurality of programs on the server, wherein the plurality of programs are deployed from different sources via same port on the server.

Abstract: Methods and systems are provided herein for selecting networks for a mobile communications device. Methods for selecting a network connection for a mobile communications device may include receiving signals that comprise location information of the mobile communications device and selecting a first network type or a second network type for the mobile communications device based upon a magnitude of movement of the mobile communications device determined from the location information, the first network type comprising a network that is capable of handing off active sessions for the mobile communications device, the second network type comprising a network that having a reduced capacity or no capacity to hand off active sessions for the mobile communications device.

Abstract: Expertise, for performing classification of a type of network traffic, can be encapsulated in a module. A set of modules, as currently available to a traffic controller, can be referred to as a collection. Programming language constructs are introduced that facilitate the writing of modules customized to identify network traffic that is peculiar to a particular user, or to a relatively small group of users. An example programming language, based on Tcl, is introduced. A key aspect is event-driven programming, and the “when” command construct is introduced. Three important event types, that can trigger a “when” command, are CLIENT_DATA, SERVER_DATA, and RULE_INIT. Another key aspect is an ability to keep state information between events. Constructs for intra-session, intra-module, and global state are introduced. A module can be blocked from executing more than once for a session. Successful execution of a module can be specified by a “match” statement.