Abstract: A medical device communication method that may be implemented within a variety of medical devices including but not limited to infusion pumps. The method may be implemented with a protocol stack for at least intra-device communication. Embodiments provide connection-oriented, connectionless-oriented, broadcast and multicast data exchange with priority handling of data, fragmentation, and reassembly of data, unique static and dynamic address assignment and hot swap capability for connected peripherals or subsystems.

Abstract: Methods and systems for range matching. The system holds a definition of one or more ranges of Internet Protocol (IP) addresses. The definition may specify any desired number of ranges of any suitable size, and some ranges may overlap one another or be contained in one another. The definition may also specify certain returned values and/or relative priorities for the various ranges. In a pre-processing phase, a hash table that is subsequently queried with addresses to be range-matched. The hash table may be updated at run-time. During operation, the system receives addresses (e.g., extracts addresses from monitored communication traffic) and identifies by querying the hash table, for each address, whether the address falls within any of the ranges.

Abstract: Some embodiments of the invention provide a forwarding element (e.g., a switch, a router, etc.) that has one or more data plane, message-processing pipelines with key-value processing circuits. The forwarding element's data plane key-value circuits allow the forwarding element to perform key-value services that would otherwise have to be performed by data compute nodes connected by the network fabric that includes the forwarding element. In some embodiments, the key-value (KV) services of the forwarding element and other similar forwarding elements supplement the key-value services of a distributed set of key-value servers by caching a subset of the most commonly used key-value pairs in the forwarding elements that connect the set of key-value servers with their client applications.

Abstract: A system and method for software defined network (SDN) management. Route information is received from a customer edge (CE) device. The route information is parsed to identify at least one virtual routing and forwarding (VRF) instance for which the route information is intended. The route information is imported into the VRF instance.

Abstract: The embodiments herein relate to a method and a router device for routing data packets using virtual routing and forwarding (VRF). The method includes; configuring a first loopback interface and assigning a first VRF (VRF1); configuring a second loopback interface and assigning a second VRF (VRF2); configuring first and second GRE tunnels and assigning the tunnels to respective VRF; assigning for each GRE tunnel a source and a destination point, configuring source and destination IP addresses of both GRE tunnels to use the same routing table from a routing table of VRF1 or from a routing table of VRF2; configuring a first static to route data packets destined to a network behind VRF2; and configuring a second static route to route data packets destined to a network behind VRF1.

Abstract: A system for question answering (QA) documents data ingestion decides to ingest the documents data through a first plurality of sub-pipelines including a first sub-pipeline having a first set of engines and a second sub-pipeline having a second set of engines being independent from the first set of engines. The system determines a subset of the documents data and decides to ingest the subset through a second plurality of sub-pipelines including a third sub-pipeline having a third set of engines and a fourth sub-pipeline having a fourth set of engines being independent from the third set of engines. A set of engines of the second plurality of sub-pipelines and a set of engines of the first plurality of sub-pipelines are in a common class. The system selects output data from the second plurality of sub-pipelines over corresponding output data from the first plurality of sub-pipelines and generates a knowledge base.

Abstract: A management device for a low power wide area network can: generate and send, to each constrained wireless network device via a wired gateway, a link layer multicast listener command specifying a listening interval and causing each constrained wireless network device to change from a low-power optimized mode to a listening mode until reception of a multicast data packet within the listening interval; generate collision avoidance parameters including a minimum waiting interval, a maximum waiting interval relative to the listening interval, and a redundancy constant; and instruct the wired gateways to selectively transmit the multicast data packet based on the collision avoidance parameters, wherein each wired gateway responds by waiting a randomly-selected wait interval between the minimum and maximum waiting intervals, and selectively transmitting the multicast data packet only if a received number of the multicast data packet by the corresponding wired gateway is less than the redundancy constant.

Abstract: Systems and methods for a VLAN switching and routing service (VSRS) are disclosed herein. A method can include generating a table for an instance of a VSRS, which VSRS couples a first virtual layer 2 network (VLAN) with a second network. The table can contain information identifying IP addresses, MAC addresses, and virtual interface identifiers for instances within the virtual layer 2 network. The method can include receiving with the VSRS a packet from a first instance designated for delivery to a second instance within the virtual layer 2 network, identifying with the VSRS the second instance within the virtual layer 2 network for delivery of the packet based on information received with the packet and information contained within the table, and delivering the packet to the identified second instance.

Abstract: A sampling node in a SDN and a method performed thereby for handling flows through the SDN between client(s) and origin server(s) of a communication network connected to the SDN are provided. The method comprising receiving (110) a fraction of a total amount of traffic flows originating at client(s) served by the SDN, and destined for the origin server(s); identifying (120) which of the received traffic flows that benefit from being routed via a service optimising node, capable of providing value added services, VAS, to the traffic flows, by fulfilling predetermined conditions; and determining (130), for each individual traffic flow, a capacity demand of the flow.

Abstract: A method for connecting a user terminal to a subset of a network dedicated to a service, termed network slice, implemented by the terminal. This method includes at least one step of receiving at least one network slice identifier, originating from an access device associated with the at least one identified slice, a step of selecting a network slice as a function of parameters included in the terminal, and of the at least one slice identifier received. The method furthermore includes a step of attaching to the access device associated with the selected network slice.

Abstract: An MC-LAG system may operate to monitor load conditions existing in two network switches, and to compute a load index value based on detected load conditions. If a computed load index value for a first switch is determined to exceed a predetermined threshold, an overloaded switch may predictively cause traffic to be routed to a second switch prior to rebooting of the first switch. Load index values may be computed based upon factors including excessive inter-switch link (“ISL”) flapping, excessive MAC flush or MAC move operations in a switch, excessive processing resource utilization in a switch.

Abstract: A method for managing nodes of a network includes receiving location information from each of a plurality of nodes in a network, where at least one node is moving relative to another node of the network. The method then includes converting the received location information for each node into a corresponding network address. The corresponding network address is based on a hierarchical cell-based partitioning scheme. The method further includes identifying a target region for a given node of the network based on a plurality of routing paths. The target region encompasses two or more nodes in the network that are next hops for the given node and that have a common segment in the corresponding network addresses. The method then includes sending forwarding rules to one or more nodes in the network. The forwarding rules includes the common segment to identify the next hops for the given node.

Abstract: A network device is configured to associate a tenant of a plurality of tenants with a virtual routing and forwarding (VRF) instance of a plurality of VRF instances. The network device receives a packet comprising metadata specifying a tenant identifier for the tenant. The network device identifies, based on the tenant identifier specified by the metadata, the VRF instance associated with the tenant. The network device retrieves one or more routes from a routing information base (RIB) of the VRF instance associated with the tenant and forwards the packet toward a destination via the one or more routes.

Abstract: Detecting an outage by a first node in layer N of a multi-layer mesh network that is in communication with a root node via the mesh network. After waiting for a sustained outage period that expires, the first node waits for a layer-specific time interval that is based on a topology of the second layer. The first node receives a last gasp from a second node in layer N+1 of the multi-layer mesh network. The last gasp includes an identifier for the second node and an indication of layer N+1. After the layer-specific time interval expires, the first node transmits a consolidated last gasp that includes an identifier for the first node, an indication of layer N, the identifier for the second node, and the indication of layer N+1.

Abstract: Techniques disclosed herein provide a method for configuring a network in DCI environment. An EVPN session is established between a first gateway device of a first network, and a second gateway device of a second network that are linked by L2 DCI link. An ESI is allocated for that EVPN session. A label is created for every combination of the ESI and media access control virtual routing and forwarding table (MAC VRF) that is locally configured at the first gateway device. An EVPN path is received for a host in the first network that is associated with MAC VRF. The path in imported the first MAC VRF by the first gateway device and exported via the inter-DCI EVPN session. The second gateway device identifies a label for MAC and re-exports it in local EVPN session with the identified label.

Abstract: Some embodiments of the invention provide a novel network architecture for advertising routes in an availability zone (AZ). The novel network architecture includes a set of route servers for receiving advertisements of network addresses as being available in the AZ from different routers in the AZ. The novel network architecture also includes multiple host computers that each execute a router that (i) identifies network addresses available on the host computer, (ii) sends advertisements of the identified network addresses to the set of route servers, and (iii) receives advertisements from the set of route servers regarding network addresses available on other host computers. The identified network addresses, in some embodiments, include at least one of network addresses associated with data compute nodes (DCNs) and network addresses associated with services available at the host computer. The route servers advertise the received network addresses to other routers in the AZ.

Abstract: This application provides an instruction processing method and a chip. The method includes sending, by the thread unit, a search instruction to the search engine unit. The search instruction includes a data address and a first search field, and the thread unit switches from a RUN state to a WAIT state. The method also includes receiving, by the thread unit, data and a program counter that are sent by the search engine unit. The thread unit switches from the WAIT state to the RUN state.

Abstract: A system (30) for protecting a server (20) from network attacks is provided. The system (30) comprises a data splitter (31) and a parameter extractor (33). The data splitter (31) is configured to receive network communications from a client (10); send network data comprising at least payload information included in the received network communications to the parameter extractor (33); and send network data comprising at least communication state information included in the received network communications to the server (20). The parameter extractor (33) is configured to apply predefined parameter extraction rules to network data received from the data splitter (31) in order to extract parameters, and to forward extracted parameters to the server (20).

Abstract: In one example, a processing system including at least one processor may obtain a first packet, determine a first tunnel identifier from a tunnel identifier field and a first source port identifier from a source port identifier field of the header of the first packet, and assign the first packet to a first flow. The processing system may further obtain a second packet, extract a first value from a tunnel identifier field and a second value from a source port identifier field of a header of the second packet, determine that the first value matches the first tunnel identifier and that the second value matches the first source port identifier, and assign the second packet to the first flow in response to the determining that the first value matches the first tunnel identifier and that the second value matches the first source port identifier.

Abstract: According to one embodiment, a computerized method conducted by logic deployed within a network device implemented within a virtual private cloud network for supporting network address translations within a public cloud network is described. Herein, after receipt of a message, based on content within the message, a network address translation (NAT) control logic unit from a plurality of NAT control logic units is selected. The selected NAT control logic unit is configured to perform address translations on information within the message to produce a translated message. Thereafter, the translated message is routed to a destination network device located on the public network.

Abstract: The present technology relates to a transmission device, a transmission method, a reception device, and a reception method with each of which it becomes possible to perform transmission of control information according to an operation form. The reception device receives first data that includes control information, which includes information necessary for channel selection of a service, and transmission sequence information indicating a sequence in which the control information is transmitted and that is transmitted in a transmission sequence corresponding to the transmission sequence information, and controls processing on second data, which includes data of a component included in the service, on the basis of the control information acquired according to the transmission sequence information. The present technology can be applied, for example, to a television receiver.

Abstract: Systems and methods are disclosed for broadcasting transactions, inside a network-on-chip (NoC), from a master to multiple slaves and for receiving responses. The transactions originate from a master and are send, using the NoC, to broadcast adapters using a special range of addresses. The broadcast adapters receive the transactions from the master. The broadcast adapters duplicate the transactions and send the duplicated transaction to multiple slaves. The slaves send a response, which is transported back by the NoC to the corresponding master.

Abstract: Methods, systems and non-transitory computer readable media for handling IP network addresses in a virtualization system. Embodiments are configured to receive, from a cloud provider, a cloud provider media access control address to assign to a network interface of a computing node. Also received from the cloud provider is a cloud provider's IP address associated with the cloud provider's media access control address. A virtual machine on the computing node is configured such that the cloud provider's IP address serves as an IP address of the virtual machine and such that a virtualization system media access control address serves as a MAC address of the virtual machine. The virtualization system correlates the cloud provider's media access control address to the IP address of the virtual machine. In some cases, the cloud provider's media access control address stored in a virtual switch of a hypervisor.

Abstract: A communication apparatus includes a host interface, connected to a peripheral component bus so as to communicate with a CPU and a memory of a host computer. A network interface is connected to a network. Packet processing circuitry is configured to receive from a first interface a data packet including a set of one or more headers that include header fields having respective values, to identify, responsively to at least one of the header fields, a corresponding entry in a header modification table that specifies a header modification operation, to modify the set of headers in accordance with the header modification operation, to check whether the entry specifies an additional header modification operation, to output the modified set of headers if the entry does not specify an additional header modification operation, and, if the entry specifies an additional header modification operation, to feed-back the modified set of headers.

Abstract: Embodiments of this application disclose a method and system for identifying an application identifier (APP ID), and a device. The method includes: receiving, by a packet flow description function network element, a query request that carries a signature parameter of a service data flow; determining an APP ID corresponding to a PFD that matches the signature parameter of the service data flow, as an APP ID corresponding to the service data flow; and sending a query response that carries the APP ID corresponding to the service data flow. The method provided in the embodiments of this application is applicable to APP ID identification.

Abstract: Some embodiments provide a method for processing a packet received by a managed forwarding element. The method performs a series of packet classification operations based on header values of the received packet. The packet classifications operations determine a next destination of the received packet. When the series of packet classification operations specifies to send the packet to a network service that performs payload transformations on the packet, the method (1) assigns a service operation identifier to the packet that identifies the service operations for the network service to perform on the packet, (2) sends the packet to the network service with the service operation identifier, and (3) stores a cache entry for processing subsequent packets without the series of packet classification operations. The cache entry includes the assigned service operation identifier. The network service uses the assigned service operation identifier to process packets without performing its own classification operations.

Abstract: This application provides an example label forwarding entry generation method, applied to a first network device. The method includes obtaining a first packet sent by a second network device, where the first packet carries an address of a third network device and a prefix segment identifier of the third network device, the first network device and the second network device belong to a first area, and the third network device belongs to a second area. The method also includes determining a routing entry that matches the address of the third network device, where the routing entry includes an address of a next-hop network device of the first network device. The method further includes generating a label forwarding entry based on the prefix segment identifier and the address of the next-hop network device.

Abstract: Some aspects of the methods and systems presented relate to performing stateless address translation between IPv4 capable devices to IPv6 capable networks and devices. Stateless address translation may form a new IPv6 addresses by combining the IPv4 address of a device with an IPv6 prefix address assigned to the translator. The translation may also combine the IPv4 destination address and UDP port information with the new IPv6 address. Existing Domain Name Systems (DNSs) may be leveraged for resolving the IPv4 and IPv6 addresses across different networks.

Abstract: A method for managing data packets transmitted by a first user equipment to be received by a second user equipment through a radio network includes having the radio network comprising a radio transceiver station receive data packets transmitted by the first user equipment. For each data packet received, checking whether the data packet comprises a request for a data packet tunneling. For each data packet comprising a request for data packet tunneling, providing the data packet to a relay protocol entity at a Radio Link Control protocol layer. The relay protocol entity is configured for generating at least one tunneling data packet, said generating at least one tunneling data packet comprises inserting at least a portion of the transmitted data packet into the at least one tunneling data packet and transmitting the tunneling data packet to the second user equipment.

Abstract: Protocol independent signal slotting and scheduling is provided by receiving a frame including a header and a payload for transmission; in response to determining that the frame matches a rule identifying the frame as part of a control loop, compressing the header according to the rule to produce a compressed packet of a predefined size that includes the compressed header and the payload; scheduling transmission of the compressed packet; and transmitting the compressed packet to a receiving device. In some embodiments, before compressing the frame, in response to determining that a size of the payload does not match a predefined size threshold: the payload is fragmented into a plurality of portions, wherein each portion satisfies the predefined size threshold, or the compressed packet is padded to the predefined size threshold via forward error correction padding information.

Abstract: Examples disclosed herein relate to establishing a layer 3 (L3) Multi-Chassis Link Aggregation Group (MC-LAG). In an example, a common IP address and a common MAC address may be associated with a primary network device and a secondary network device. A layer 3 MC-LAG may be established in a multi-homing configuration between the primary network device and the secondary network device to provide a redundant L3 connectivity to a core network device in a network. A dedicated communication link may be established between the primary network device and the secondary network device, for the primary network device and the secondary network device to share network packets.

Abstract: An apparatus for a network includes: a processing unit having a filter generation module configured for: receiving an indication that a packet matches a user-defined filter; and creating one or more derivative filters based at least in part on the received indication, wherein a first derivative filter of the one or more derivative filters provides a finer grade of filtration compared to the user-defined filter; and a non-transitory medium configured for storing the one or more derivative filters.

Abstract: Disclosed are various examples for securing enterprise resources using a virtual private network. A client device can send a first unique device identifier for the client device to a remote management service upon enrollment. When a virtual private network application is first executed, the client device can send a second unique device identifier to the remote management service, where the remote management service is configured to store the second unique device identifier in association with the first unique universal identifier. During subsequent executions of the virtual private network application, the virtual private network service can authenticate the client device by comparing the first unique device identifier and the second unique device identifier to a device identifier received from the remote management service. A machine learning routine can be employed to identify anomalies as the virtual private network application is executed.

Abstract: A method, computer readable medium, and system are disclosed for monitoring a pipeline to detect anomalies such as unusual latency associated with a particular stage. Each stage of the pipeline is configured to update metadata associated with content being processed by inserting a time stamp into the metadata when processing of the content is completed by the stage. The server device can collect the metadata from the last stage of the pipeline and analyze the metadata in order to generate metrics for the pipeline, including a residual latency and/or a gain for each stage of the pipeline. In an embodiment, the content is a frame of video to be displayed on a client device after being rendered by a server device, such as through a streaming service (e.g., a video game streaming service). The server device can adjust the pipeline based on the metrics to improve performance.

Abstract: An expander I/O module discovery/management system includes a secondary system chassis housing an expander I/O module coupled to a server device. The server device identifies the secondary system chassis and an expander I/O module port utilized by that server device, and then generates and transmits an expander I/O module reporting communication identifying the secondary system chassis and the expander I/O module port. A primary system chassis houses a switching I/O module coupled to the expander I/O module. The switching I/O module receives the expander I/O module reporting communication and determines that the secondary system chassis identified in the expander I/O module reporting communication is different than the primary system chassis. In response, the switching I/O module assigns a virtual slot to the expander I/O module, and assigns a virtual port associated with the virtual slot to the expander I/O module port identified in the expander I/O module reporting communication.

Abstract: A system, and corresponding method, is described for finding the optimal or the best set of routes from a master to each of its connected slaves, for all the masters and slaves using a Network-on-Chip (NoC). More precisely, some embodiments of the invention apply to a class of NoCs that utilize a two-dimensional mesh topology, wherein a set of switches are arranged on a two-dimensional grid. Masters (initiators or sources) inject data packets or traffic into the NoC. Slaves (targets or destinations) service the data packets or traffic traveling through the NoC. The NoC includes switches and links. Additionally, the optimal routes defined by the system includes moving the traffic in a way that avoids deadlock scenarios.

Abstract: A peer container filesystem is provided. The peer container filesystem allows peer nodes to share containers. The peer container filesystem allows the images or portions thereof to be shared without a container registry. A node send requests to the network that are configured to push or distribute an image in the network, search for an image in the network, download an image in the network, and perform updates amongst the peer nodes such that the locations of images and/or their files are known to at least some of the peers in the network.

Abstract: Methods, computer readable mediums, and systems for securing network traffic data. The method of securing network traffic data may include obtaining a network traffic data unit, that includes: a payload; forwarding information, that includes: a first forwarding portion; and a second forwarding portion that indicates a network tunnel; encryption type information; and encryption location information; analyzing a first segment of the first forwarding portion to obtain a first forwarding location; modifying the network traffic data unit, based on the encryption type information and the encryption location information, to obtain a modified network traffic data unit; and transmitting the modified network traffic data unit to the first forwarding location.

Abstract: A router includes routing circuitry and a plurality of ports. The routing circuitry is configured to receive from a first subnetwork, via one of the ports, a packet destined to be delivered to a target node located in a second subnetwork, to select a mapping, from among two or more mappings, depending on a topological relation between the first subnetwork and the second subnetwork, to map a Layer-3 address of the packet into a Layer-2 address using the selected mapping, and to forward the packet via another one of the ports to the Layer-2 address.

Abstract: A node may receive a network topology message that identifies a first association of a first segment identifier (SID), relating to a loosely routed segment of a network, and an address of a first terminal interface associated with the loosely routed segment, or a second association of a second SID, relating to a strictly routed segment of the network, and an address of a second terminal interface associated with the strictly routed segment. The node may generate an entry in a segment translation table based on the first association or the second association. The node may route, according to the segment translation table, an internet protocol (IP) payload packet that has been encapsulated using an IPv6 transport header that has been extended with a compressed routing header of variable length.

Abstract: A data packet sending method, a network device, a control device, and a network system includes receiving a first data packet sent by a first device, where a packet header of the first data packet includes a first sequence number marker sequence, a first position marker sequence, a first accumulated value, and a verification value; obtaining a second data packet, where a packet header of the second data packet includes a second sequence number marker sequence, a second position marker sequence, a second accumulated value, and the verification value; and sending the second data packet to a second device.

Abstract: A technique for packet processing may include maintaining a data structure representing transport status information associated with a sliding window of sequential packets for a host system. When a packet targeted for the host system is received, a packet validation process can be performed on the packet. The packet validation process may include validating that the packet belongs to the sliding window of the sequential packets by comparing the packet serial number of the packet against the packets being expected in the sliding window. The packet validation process may also include validating that the packet is being received for the first time and is not a duplicate packet. Upon validating the packet, the packet can be placed into the host system, and the status information can be updated to indicate that the packet has been received.

Abstract: An auto-discovery route reflector (auto-discovery-RR) may obtain a route from an originating network device and may update a data structure to include at least some information contained in the route. The auto-discovery-RR may identify, based on the data structure, a plurality of target network devices, wherein the plurality of target network devices includes at least one route reflector (RR) and at least one route reflector client (RR-client). The auto-discovery-RR may send the route to the plurality of target network devices to facilitate establishment of a connection between the originating network device and at least one target network device of the plurality of target network devices.

Abstract: Various example embodiments for supporting generation of addresses for network entities in communication systems are presented. Various example embodiments for supporting generation of addresses for network entities may be configured to support generation of a new address for a network entity based on an existing address of the network entity. Various example embodiments for supporting generation of addresses for network entities may be configured to support generation of a new address for a network entity based on manipulation of at least a portion of an existing address of the network entity. Various example embodiments for supporting generation of addresses for network entities may be configured to support generation of a transport layer address (e.g., an Internet Protocol (IP) address or the like) for a network entity based on a data link layer address (e.g., a Media Access Control (MAC) address or the like) of the network entity.

Abstract: Novel tools and techniques are provided for implementing tracking or storing of equipment configuration data using immutable ledger functionality of blockchains. In various embodiments, in response to receiving a first request for first configuration data that is output by first equipment, a computing system might determine whether a communicatively coupled data repository contains the first configuration data. If so, the computing system might retrieve and send (to the requesting device) the first configuration data. If not, the computing system might send, to a blockchain system, a second request for identifying a blockchain containing a block containing the first configuration data.

Abstract: Conventional efforts for estimating the geographic location (geolocation) of devices associated with particular Internet Protocol (IP) addresses typically yield woefully inaccurate results. In many cases, the estimated IP geolocations are on the wrong continent. Embodiments of the present technology include techniques for identifying and improving incorrect estimates based on latency measurements, Domain Name Server (DNS) information, and routing information. For example, latency measurements from multiple collectors can be used to rate the plausibility of an IP geolocation estimate and, in certain cases, to increase the accuracy of the LP geolocation estimate. DNS and routing information can be used to corroborate the estimated IP geolocation. The resulting more accurate IP geolocation estimate can be used to route Internet traffic more efficiently, to enforce rules for routing sensitive information, and to simplify troubleshooting.

Abstract: A dedicated network gateway device that is capable of bridging, switching or routing network traffic between traditional network and direct interconnect networks, comprising: a first set of one or more traditional network ports with a single link per port generally comprising one or more of SFP+, QSFP, and QSFP+ connectors, such ports being connected to switches or devices that form a traditional network; and a second set of one or more direct interconnect ports with a high number of links per port (two or more) generally comprising one or more of MXC, MTP, and MTO connectors, such ports being connected to a direct interconnect network.

Abstract: A method, system, and computer-usable medium are disclosed for: (i) communicating, from a client device to a security device via a metadata connection, metadata regarding a data connection to be established by the client device, the metadata comprising a connection identifier uniquely identifying the data connection; and (ii) communicating, from the client device to the security device via the data connection, network traffic comprising a packet that includes the connection identifier, such that the security device may use the connection identifier to index an entry associated with the metadata that the security device has stored in a metadata cache.

Abstract: A system and method for creating and updating a distributed indexing table for peer nodes in a peer-to-peer network. In one embodiment, a method includes providing, from a first node to a second node of the peer-to-peer network, a first level of a first plurality of levels for a first designator identifying the first node and entered in a first distributed indexing table stored in the first node. The method also includes receiving, at the first node from the second node, a corresponding first level of a second plurality of levels for a second designator identifying the second node and entered in a second distributed indexing table stored in the second node, and updating the corresponding first level of the second plurality of levels for the second designator within the first distributed indexing table of the first node.

Abstract: A computer-implemented method of processing computer data packets may include applying a mapping-function to a set of attributes of a packet to produce a location of a flow state entry (FSE) in a state-table, wherein each row in the state-table includes at least two FSEs. A system and method may determine the state of a flow based on the content of the FSE and may select an action based on the state.