Abstract: Embodiments of the present disclosure provide a solution for operating radio bearers. According to embodiments of the present disclosure, a terminal device monitors a plurality of data packets transmitted from a network device on a radio bearer. If a reception of at least one data packet in the plurality of data packets is failed, the terminal device is able to discard the at least one data packet without requesting retransmission. The network device determines whether a retransmission condition for the at least one data packet is unfulfilled. If the retransmission condition is unfulfilled, the retransmission of the at least one data packet is skipped.

Abstract: A signaling-link retimer concatenates discontiguous leading and trailing portions of a precoded and scrambled symbol stream, shunting the trailing portion of the stream ahead of unneeded stream content to dynamically reduce the number of symbols queued between retimer input and output and thus reduce retimer transit latency.

Abstract: A device, a switch, and a method of determining latency which exceeds a threshold are described. A task is enqueued and a time is determined based on two clocks. A time the task is dequeued is determined based on the two clocks. Based on the time of enqueue and the time of dequeue according to each of the two clocks, the task is identified as meeting or violating a service level agreement.

Abstract: A resource allocation method includes: obtaining, by a first network device, target resource reservation information based on a plurality of transmitted packets, where all of the packets carry a same virtual network identifier, and the virtual network identifier is used to indicate that the packets are transmitted through a same virtual network; and allocating a resource to the virtual network based on the target resource reservation information.

Abstract: The present specification proposes a new procedure of signal transmission or reception between STAs in a case of sensing measurement initiated by an STA rather than an AP. According to an embodiment of the present specification, proposed is a sensing measurement procedure performed by an AP in response to transmission of a sensing initiation frame to the AP by an STA rather than the AP. According to another embodiment of the present specification, according to an embodiment of the present specification, proposed is a procedure in which an STA rather than an AP transmits a sensing initiation frame to the AP, and then the AP requests respondent STAs to transmit NDP frames. According to yet another embodiment of the present specification, proposed is a method for configuring a frame transmitted or received in the above procedures.

Abstract: A device and method may alter the transmission rate of data sent across a computer network based on a time to receive an acknowledgement in response to a packet sent over the network. An embodiment may transmit packets across the computer network according to a rate R, where R is determined based at least on a number of bytes to be sent during a window (cwnd) divided by a duration of time (RTT); and modify RTT based on a current round trip time of a packet sent over the network (e.g. based on a time to receive an acknowledgement in response to a packet sent over the network).

Abstract: Systems and methods include monitoring packets, by a network edge device, from one or more endpoint devices where the packets are destined for corresponding application services in a network; classifying the one or more endpoint devices based on the monitoring into a corresponding trust level of a plurality of trust levels; and, responsive to a first endpoint device of the one or more endpoint devices being untrusted, steering the packets from the first endpoint device into a restricted zone.

Abstract: Methods and systems for managing the operation of data processing systems are disclosed. To manage the operation of data processing systems, a management controller hosted by a data processing system may communicate with other components of the data processing system via sideband communications. To facilitate sideband communications between the management controller and other devices, the data processing system may include a sideband communication system. The sideband communication system may facilitate sideband communications between devices over large distances and/or under conditions that may otherwise render the sideband communications infeasible.

Abstract: This application provides a fake network device identification method and a communications apparatus. An uplink message sent by a terminal device is forwarded to a first network device via a second network device. After receiving the uplink message, the first network device generates a downlink message for the uplink message, performs security processing on the downlink message based on first time information, and/or sends the downlink message to the second network device. The second network device sends, to the terminal device, the downlink message on which the security processing is performed. The terminal device performs security verification on the received downlink message, and/or identifies whether the second network device is a fake network device. This helps improve communication security.

Abstract: Examples herein relate to a system capable of coupling to a remote memory pool, the system comprising: a memory controller and an interface to a connection, the interface coupled to the memory controller. In some examples, the interface is to translate a format of a memory access request to a format accepted by the memory controller and the memory controller is to provide the translated memory access request in a format accepted by a media. In some examples, a controller is to measure a number of addressable regions that are least accessed and cause at least one of the least accessed regions to be evicted to a local or remote memory device with relatively higher latency.

Abstract: A cellular data communication network includes a gNodeB connected to a UPF by an IP network. A first translation module translates GFP packets into IP packets transmitted over the IP network. A second translation module translates the IP packets back into IP packets and forwards the IP packets to the UPF. A PFCP proxy snoops information and provides it to a BGP module that programs the translation modules and a routing module to perform routing of packets in bypass of the UPF. The BGP module may program the first translation module with an SR policy associated with a binding SID that is bound to an interface to the gNodeB. The SR policy may invoke translation according to a function. The routing module may be programmed to embed GTP information in an SRH header that is used by the first translation module. BGP module may also distribute routing and VPN updates.

Abstract: A first router determines a designated router (DR) from a set of routers that are interconnected by a network based on a border gateway protocol (BGP). The set includes the first router. In response to the first router being the DR, the first router forms adjacencies with non-DR routers from the set and distributes reachability advertisements from the set of routers to the non-DR routers in the set. In response to the first router not being the DR, the first router forms an adjacency with the DR. The first router then conveys reachability advertisements to the DR and receives reachability advertisements from the routers in the set via the DR. The DR is determined based on receiving information at the first router indicating an identity of the DR, e.g., configuration information received from a controller, or by electing a DR based on priority values assigned to the routers and advertised in messages transmitted by the routers.

Abstract: Certain aspects of the present disclosure provide techniques for downlink relaying for passive internet of things (PIoT) communication. An example method includes receiving, from a network entity in a wireless network, configuration information for communicating with at least one passive internet of things (PIoT) device and receiving, from the network entity, a PIoT message, the PIoT message including at least a PIoT relay command instructing the UE to communicate with the at least one PIoT device. The method also includes transmitting, based on the PIoT message, one or more signals to the at least one PIoT device in accordance with the configuration information.

Abstract: Methods and apparatus relating to transmission on physical channels, such as in networks on chips (NoCs) or between chiplets, are provided. One example apparatus generally includes a higher bandwidth client; a lower bandwidth client; a first destination; a second destination; and multiple physical channels coupled between the higher bandwidth client, the lower bandwidth client, the first destination, and the second destination, wherein the higher bandwidth client is configured to send first traffic, aggregated across the multiple physical channels, to the first destination and wherein the lower bandwidth client is configured to send second traffic, concurrently with sending the first traffic, from the lower bandwidth client, dispersed over two or more of the multiple physical channels, to the second destination.

Abstract: In one embodiment, a device predicts, for each of a plurality of applications accessible via a network, quality metrics for different network paths where traffic for that application be routed via one or more paths among the different network paths. The device generates a congestion risk prediction model that predicts a risk of traffic congestion for a particular combination of: applications from among the plurality of applications, traffic flows associated with those applications, and paths among the network paths via which those traffic flows may be routed. The device performs a constrained optimization based on the predicted quality metrics and on the risk of traffic congestion predicted by the model, to assign traffic flows for the applications to a selected subset of the different paths. The device causes the traffic flows to be routed in the network via the selected subset of the different paths to which they are assigned.

Abstract: Aspects of the present disclosure include methods, apparatuses, and computer readable media for transmitting, to a receiving device, a first plurality of packets immediately after a first compression memory reset, transmitting, to the receiving device, a second plurality of packets different than the first plurality of packets, receiving, from the receiving device, a memory reset request associated with a second plurality of packets for a second compression memory reset, wherein the memory reset request comprises one or more recent sequence numbers of the second plurality of packets, and refraining from performing a second compression memory reset in response to determining that the at least one of the one or more recent sequence numbers is less than at least one of one or more reset sequence numbers of the first plurality of packets.

Abstract: A user equipment (UE) is configured to access a first base station in a network via an access link, wherein the first base station is an integrated access and backhaul (IAB) node in a first IAB network topology connected to a second base station via one or more backhaul links, wherein the second base station is an IAB-donor for the first base station, report, to the first base station, information for reducing a maximum data rate for the UE when the UE is deployed in one or more IAB network topologies and receive data packages with a reduced maximum data rate based on the reported information.

Abstract: An improved autonegotiation approach includes determining that a negotiated rate between a first network device and a second network device exceeds data transfer capacity over a network path downstream of the second network device. In response, a configuration message is generated and transmitted to the first network device. When received by the first network device, the configuration message causes the first network device to limit data transfer between the first network device and the second network device to no more than the downstream data transfer capacity.

Abstract: Systems and methods comprising determining a first user in proximity to a point of sale (POS) device of a second user, the POS device having detected an identity of the first user and a number of devices associated with the POS device. The number of devices is compared to a baseline number of devices in proximity to the POS device, which is based on a time of day and calculated from a time period prior to the time of day. Based on a determination that the number differs from the baseline number by more than a threshold amount, data is generated that includes an indication configured to be displayed utilizing a client application executing on a device of the first user, wherein user interaction with the indication enables the user to at least one of initiate or modify a transaction with the second user.

Abstract: Systems and methods are provided for reducing WAN bandwidth consumption used by multicast for large scale software-defined branch deployments. In particular, a cloud-based multicast orchestrator may be implemented as part of an SD-WAN service. This cloud-based multicast orchestrator may orchestrate routes for multicast traffic between a multicast source and the various branches of the large scale software-defined branch deployment. This cloud-based multicast orchestrator may orchestrate routes for multicast traffic which reduce/optimize WAN bandwidth consumption. In combination with the cloud-based multicast orchestrator, examples may utilize a branch gateway hierarchy which designates one branch gateway a “leader” for a given multicast stream to further reduce WAN bandwidth consumption used by multicast.

Abstract: Technologies for composing a managed node with multiple processors on multiple compute sleds to cooperatively execute a workload include a memory, one or more processors connected to the memory, and an accelerator. The accelerator further includes a coherence logic unit that is configured to receive a node configuration request to execute a workload. The node configuration request identifies the compute sled and a second compute sled to be included in a managed node. The coherence logic unit is further configured to modify a portion of local working data associated with the workload on the compute sled in the memory with the one or more processors of the compute sled, determine coherence data indicative of the modification made by the one or more processors of the compute sled to the local working data in the memory, and send the coherence data to the second compute sled of the managed node.

Abstract: A network management method. The method includes: obtaining a network type of a target network; obtaining a logical network model of the target network based on the network type and a logical network recommendation model; determining a physical network model of the target network based on the logical network model and a physical network recommendation model; and performing network configuration based on the physical network model of the target network. An advantage of the embodiments lies in that, when a user inputs the network type of the target network instead of a large quantity of detailed network configurations, a network management system can automatically establish the required target network for the user, thereby greatly improving efficiency of establishing the target network.

Abstract: Presented herein are methodologies in which packets or events are selected statistically to update a counter of a network device. The updated value that is stored in the counter also reflects a number of packets (or corresponding bytes) that were not selected to update the counter. The methodology includes receiving, at a network device, a first packet followed by a second packet, probabilistically selecting the second packet to update a value of a counter of the network device while probabilistically not selecting the first packet to update the value of the counter, and updating the value of the counter to account for both the first packet and the second packet.

Abstract: Methods and systems for performing operations comprising: receiving, by a server from a client device, a request to access a data object comprising one or more medical records, the request comprising authentication information; determining, by the server, that the authentication information is valid; in response to determining that the authentication information is valid, transferring, by the server, the data object to a temporary storage location; transmitting a first portion of the data object to the client device from the temporary storage location; and deleting the first portion of the data object from the temporary storage location after the first portion of the data object has been transmitted to the client device.

Abstract: An Internet of Things (IoT) server can transmit a series of data blocks of a software update to an IoT device by sending a series of data block messages to the IoT device over a telecommunication network. The IoT device can return data block receipt messages to confirm receipt of the data block messages. The IoT device can also attempt to validate received data block messages, and can return data block validation messages for the data block messages that have been validated. When the IoT server receives data block validation messages for all of the data blocks of the software update, the IoT server can determine that the IoT device has received a usable version of the software update.

Abstract: A method of determining a passive Round Trip Time, RTT, delay in a telecommunications system for exchanging data packets in accordance with a data transmission protocol between a first device and a second device. The first and second devices are identified by first and second device identifications, respectively. The data packets include an address part including a source address and a destination address. The method is performed in a node by modifying the address part of a received data packet from the first device, and creating a first timestamp before transmitting the modified data packet to the second device. Upon receiving, at the node, from the second device in response to the modified data packet, a data packet having the modified address part of the modified data packet, the node creates a second timestamp that provides for passively measuring the RTT delay.

Abstract: In one embodiment, a service chain data packet is instrumented as it is communicated among network nodes in a network providing service-level and/or networking operations visibility. The service chain data packet includes a particular header identifying a service group defining one or more service functions, and is a data packet and not a probe packet. A network node adds networking and/or service-layer operations data to the particular service chain data packet, such as, but not limited to, in the particular header. Such networking operations data includes a performance metric or attribute related to the transport of the particular service chain packet in the network. Such service-layer operations data includes a performance metric or attribute related to the service-level processing of the particular service chain data packet in the network.

Abstract: An electronic apparatus and a USB interface switching method. The electronic apparatus includes: a first control component corresponding to a first operating system, a second control component corresponding to a second operating system, a USB interface, and a USB interface switching circuit. The first control component is used to detect the data transmission state between the USB interface and the first control component. The second control component is used to detect the data transmission state between the USB interface and the second control component.

Abstract: A method of operating a network device is provided. In response to an unplanned reboot, the network device can determine whether an unplanned reboot expedited recovery feature has been enabled on the network device. After determining that the unplanned reboot expedited recovery feature is enabled, the network device can identify a cause of the unplanned reboot. If the cause of the unplanned reboot is from a first set of events, a first bootup sequence can be performed. If the cause of the unplanned reboot is from a second set of events, a second bootup sequence that is expedited relative to the first bootup sequence can be performed.

Abstract: In one aspect, the present disclosure relates to a method for method for efficient allocation of bandwidth in a wireless network. The method can include: identifying a plurality of network interfaces on a first user device; initializing a virtual network resource associated with the plurality of network interfaces; receiving, at the virtual network resource, data packets from an app executing on the first user device, the data packets destined for a remote device; sending a first portion of the data packets to the remote device via a first one of the plurality of network interfaces; and sending a second portion of the data packets to the remote device via a second one of the plurality of network interfaces. An aggregation platform can be configured to receive and reconstitute the first and second portions of the data packets, and to transmit the reconstituted data packets to the remote device.

Abstract: A method in a user device that supports a plurality of message authentication code (MAC) lengths for integrity protection of wireless communications includes receiving, from a base station, a first message including an information element (1002), determining, based on the information element, that a first MAC length of the plurality of MAC lengths is to be used for integrity protection (1004) and, thereafter, generating a second message including a MAC having the first MAC length (1006). The method also includes transmitting the second message to the base station (1008).

Abstract: In some examples, a method includes receiving, by an egress network device for a network, messages from each of a plurality of ingress network devices for the network, wherein each of the messages specifies a multicast source, a multicast group, and an upstream multicast hop weight value for multicast traffic for the multicast source and the multicast group; selecting, by the egress network device and based on the upstream multicast hop weight values specified by the received messages, one of the plurality of ingress network devices to which to send a multicast join message of a plurality of multicast join messages for the multicast source and multicast group; and sending, by the egress network device, the multicast join message to the selected one of the plurality of ingress network devices.

Abstract: An approach for establishing a priority ranking for endpoints in a network. This can be useful when triaging endpoints after an endpoint becomes compromised. Ensuring that the most critical and vulnerable endpoints are triaged first can help maintain network stability and mitigate damage to endpoints in the network after an endpoint is compromised. The present technology involves determining a criticality ranking and a secondary value for a first endpoint in a datacenter. The criticality ranking and secondary value can be combined to form priority ranking for the first endpoint which can then be compared to a priority ranking for a second endpoint to determine if the first endpoint or the second endpoint should be triaged first.

Abstract: A synchronization trigger associated with synchronizing credit is obtained at a message receiver in a System On Chip (SOC). In response to receiving the synchronization trigger, a value for a local credit in the message sender is sent from the message receiver to a message sender in the SOC. At the message sender, the local credit is updated with the value for the credit that is received from the message receiver, wherein a requirement to send a message from the message sender to the message receiver is that the local credit has a non-zero value.

Abstract: Examples disclosed herein relate to a method for defining an ingress access policy at an ingress network device based on instructions from an egress network device. The egress network device receives data packets directed to a first entity from a second entity connected to an ingress network device. Each data packet transmitted includes a source role tag corresponding to the second entity. At the egress network device, the data packets may be dropped based on the enforcement of an egress access policy. When the number of data packets that are being dropped increases beyond a pre-defined threshold, the egress network device transmits a command to the ingress network device instructing the ingress network device to create a restriction on the transmission of subsequent data packets. The command is transmitted in a Border Gateway Protocol (BGP) Flow Specification (FlowSpec) route.

Abstract: A network device includes first, second, and third processors. The first processor detects congestion in a packet flow. The packet flow is i) one packet flow among a plurality of packet flows and ii) is formed of a plurality of packets of a same type received from a first device in a network via a first network connection. The packets in the packet flow are destined for a second device in the network. When congestion notification packet generation is enabled for the packet flow, the second processor generates a congestion notification packet by replicating a packet from the packet flow and sends the congestion notification packet to the first device via the first network connection. The congestion notification packet identifies the packet flow for which congestion is detected. The third processor forwards the plurality of packets in the packet flow to the second device via a second network connection.

Abstract: Devices, system, and method of vehicular multiple-link wireless communication. A vehicular communication bonding unit creates a bonded wireless communication connection that transports data-packets of a source data-stream from a remote server to a vehicular transceiver, by transporting the data-packets over at least two wireless communication links. The vehicular communication bonding unit utilizes a vehicular cellular transceiver to receive a first batch of the data-packets over a first cellular communication link that connects between the vehicular cellular transceiver and the remote server. The vehicular communication bonding unit further utilizes least one end-user device, of an occupant of a vehicle, to receive a second batch of the data-packets of the particular data-stream, over a second cellular communication link that connects between the end-user device and the remote server.

Abstract: A network gateway is provided for routing data flows across a plurality of network connections, the network gateway including a plurality of network interfaces for transmitting data over the plurality of network connections, the plurality of network interfaces including a first network interface; at least one processor configured for: transmitting a sequential burst of packets across the first network interface; based on timestamps recorded when packets in the sequential burst of packets are received at a receiving node, and the size of the packets, generating a bandwidth of the first network interface; and routing a data flow of sequential packets across the plurality of network connections based on the generated bandwidth of the first network interface.

Abstract: Embodiments may be generally directed to techniques to cause communication of a registration request between a first end-point and a second end-point of an end-to-end path, the registration request to establish resource load monitoring for one or more resources of the end-to-end path, receive one or more acknowledgements indicating resource loads for each of the one or more resources of the end-to-end path, at least one of the acknowledgements to indicate a resource of the one or more resources is not meeting a threshold requirement for the end-to-end path, and perform an action for communication traffic utilizing the one or more resources based on the acknowledgement.

Abstract: A unidirectional transfer protocol allows data to be transmitted from a non-secure network into a secure network. A non-secure gateway may receive data and/or information, intended for the secure network, from one or more devices. The gateway may fragment the data and/or information into smaller chunks and transmit the chunks to a secure gateway via a unidirectional communication channel. The secure gateway may verify the chunks using one or more rules and reassemble the chunks when the data is validated. The reassembled data may be sent across a secure network enclave. The unidirectional transfer protocol may provide a hardware-agnostic solution for transmitting data over a unidirectional communication channel.

Abstract: A network interface controller (NIC) capable of facilitating fine-grain flow control (FGFC) is provided. The NIC can be equipped with a network interface, an FGFC logic block, and a traffic management logic block. During operation, the network interface can determine that a control frame from a switch is associated with FGFC. The network interface can then identify a data flow indicated in the control frame for applying the FGFC. The FGFC logic block can insert information from the control frame into an entry of a data structure stored in the NIC. The traffic management logic block can identify the entry in the data structure based on one or more fields of a packet belonging to the flow. Subsequently, the traffic management logic block can determine whether the packet is allowed to be forwarded based on the information in the entry.

Abstract: A method of assigning a space for a ride-share vehicle includes: providing a rideshare parking space management server; providing data corresponding to a parking space available for use by a rideshare vehicle; receiving a request for one of a pick-up or drop-off of a rideshare passenger from one of a passenger device, driver device, autonomous rideshare vehicle, or rideshare server; assigning the parking space to the rideshare vehicle; transmitting with the processor a parking space code corresponding to the assigned parking space to one of a driver device, the autonomous rideshare vehicle, or rideshare server; transmitting the parking space code corresponding to the assigned parking space to a passenger device; displaying the parking space code corresponding to the request for one of a pick-up and drop-off of the rideshare passenger on the passenger device.

Abstract: In order for efficiently managing communications between a UE (10) and multiple SCSs (20_1-20_n), the UE (10) includes, in one message, multiple pieces of data to be transmitted to the SCSs (20_1-20_n), and sends the message to an MTC-IWF (30). The MTC-IWF (30) receives the message from the UE (10), and distributes the date to the SCSs (20_1-20_n). Each of the SCSs sends (20_1-20_n), to the MTC-IWF (30), data to be transmitted to the UE (10) and an indicator that indicates for the SCSs (20_1-20 n) the time tolerance until the data is transmitted to the UE (10). The MTC-IWF (30) receives the data and the indicators from the SCSs (20_1-20_n), and determines when to forward the data to the UE (10) based on the indicators.

Abstract: A system and method for performing rate adaptation of constant bit rate (CBR) client data for transmission over a Metro Transport Network (MTN) by defining a plurality of pseudo-Ethernet packets at a source node, assembling a plurality of Generic Mapping Procedure (GMP) frames by mapping a plurality of blocks from a stream of encoded blocks of CBR client data, a plurality of pad blocks, and GMP overhead into consecutive pseudo-Ethernet packets of the plurality of pseudo-Ethernet packets, inserting a variable number of idle blocks between one or more of the consecutive pseudo-Ethernet packets and inserting an MTN path overhead (POH) frame that is aligned to the plurality of GMP frames to generate a plurality of rate adapted GMP frames for transmission over the MTN to an intermediate node or a sink node.

Abstract: Implementations of the present disclosure are directed to systems and methods for flow control using a multiple flit interface. A credit return field is used in a credit-based flow control system to indicate that one or more credits are being returned to a sending device from a receiving device. Based on the number of credits available, the sending device determines whether to send device or wait until more credits are returned. The amount of buffer space used by the receiver to store the packet is determined by the number of transfer cycles used to receive the packet, not the number of flits comprising the packet. This is enabled by having the buffer be as wide as the bus. The receiver returns credits to the sender based on the number of buffer rows used to store the received packet, not the number of flits comprising the packet.

Abstract: Systems and methods for routing packet data for transmission via a plurality of communication links are described. A method may include dividing a usage cycle for the plurality of communication links into a plurality of timeslots. Packet data traffic demands for the packet data for transmission via the plurality of communication links may be received. Based on a mixed integer linear programming model, an allocation of the packet data traffic demands to the plurality of communication links during the usage cycle may be determined using binary constraints of the mixed integer linear programming model. The binary constraints may prioritize respective subsets of the plurality of timeslots for at least some of the plurality of communication links. For each of the plurality of timeslots, an allocation of the packet data traffic demands to each of the plurality of communication links may be determined using the mixed integer linear programming model.

Abstract: A device implementing a system for packet loss management may include a memory and at least one processor configured to identify a plurality of categories of packets provided for transmission to an electronic device. The at least one processor may be further configured to determine a respective packet loss value for a respective category of the plurality of categories of packets. The at least one processor may be further configured to identify a particular category of the plurality of categories of packets for which the determined respective packet loss value satisfies a packet loss condition. The at least one processor may be further configured to adjust subsequent transmission of packets in the particular category of packets based at least in part on the packet loss condition being satisfied by the determined respective packet loss value for the particular category of packets.

Abstract: In a secure network where the network characteristics are not known, a call admission control algorithm and a preemption control algorithm based on a destination node informing the source node of the observed carried traffic are used to regulate the amount of traffic that needs to be preempted by the source. The amount of traffic that needs to be preempted is based on the carried traffic measured at the destination node. The traffic to be preempted is based on the priority of the traffic, where the lowest priority traffic is the first to be preempted until the amount of traffic preempted is sufficient to allow the remaining traffic to pass through the network without congestion.

Abstract: An apparatus for implementing power control for a radio device that has multiple radio transceivers operating in different bands, including sub-bands of a single frequency band. The device implements a power control protocol for communications between the device and a similar peer device. The device sets-up the power control protocol by generating a request to use one of the multiple bands to signal power control operations, and to use another one of the multiple bands to transfer data between the device and the peer device. The device sends the request to the peer device and receives a response. Based on the response, the device identifies a control channel band and a data channel band from among the multiple bands.

Abstract: A network monitoring device may receive, from a mediation device, flow-tap content data (generated by the mediation device based on current and/or previous investigation reports associated with flow tapping) that needs to be monitored. The network monitoring device may map the content data to a flow-tap content destination address of a content destination device in an entry of a flow-tap content filter. The network monitoring device may analyze, using the flow-tap content filter, network traffic of the network to detect a traffic flow that includes the content data. The network monitoring device may generate, based on successfully detecting a traffic flow that includes the content data, a traffic flow copy and may provide the traffic flow copy to the flow-tap content destination address, wherein the traffic flow copy is to be accessible to the content destination device to enable a context analysis of the content data.