Abstract: A dedicated network gateway device that is capable of bridging, switching or routing network traffic between traditional network and direct interconnect networks, comprising: a first set of one or more traditional network ports with a single link per port generally comprising one or more of SFP+, QSFP, and QSFP+ connectors, such ports being connected to switches or devices that form a traditional network; and a second set of one or more direct interconnect ports with a high number of links per port (two or more) generally comprising one or more of MXC, MTP, and MTO connectors, such ports being connected to a direct interconnect network.

Abstract: A method, system, and computer-usable medium are disclosed for: (i) communicating, from a client device to a security device via a metadata connection, metadata regarding a data connection to be established by the client device, the metadata comprising a connection identifier uniquely identifying the data connection; and (ii) communicating, from the client device to the security device via the data connection, network traffic comprising a packet that includes the connection identifier, such that the security device may use the connection identifier to index an entry associated with the metadata that the security device has stored in a metadata cache.

Abstract: A system and method for creating and updating a distributed indexing table for peer nodes in a peer-to-peer network. In one embodiment, a method includes providing, from a first node to a second node of the peer-to-peer network, a first level of a first plurality of levels for a first designator identifying the first node and entered in a first distributed indexing table stored in the first node. The method also includes receiving, at the first node from the second node, a corresponding first level of a second plurality of levels for a second designator identifying the second node and entered in a second distributed indexing table stored in the second node, and updating the corresponding first level of the second plurality of levels for the second designator within the first distributed indexing table of the first node.

Abstract: A computer-implemented method of processing computer data packets may include applying a mapping-function to a set of attributes of a packet to produce a location of a flow state entry (FSE) in a state-table, wherein each row in the state-table includes at least two FSEs. A system and method may determine the state of a flow based on the content of the FSE and may select an action based on the state.

Abstract: Various examples herein described are directed to methods, apparatuses and computer program products configured for tracking, tracing, and/or diagnosing data object transmissions in a network service cloud. In some embodiments, a path finder server entity may transmit one or more Application Programming Interface (API) calls to one or more APIs associated with the network service cloud to obtain one or more data routing table objects, and may determine transmission paths of data objects based at least in part on the data routing table objects.

Abstract: Snapshots of storage volumes and containers of a bundled application may be created and used to rollback or clone the bundled application. Clone snapshots of storage volumes may be gradually populated with data from prior snapshots to reduce loading on a primary snapshot. Components of cloned applications may communicate with one another using addresses of these components in the parent application. Containers of the bundled application may communicate with an open virtual switch (OVS) that implements flows to implement translation between clone and parent addresses. Containers may be modified to execute operation-specific entrypoint functions prior to invoking an entrypoint of an application instance loaded in the containers.

Abstract: Systems and methods for supporting inter subnet partitions in a high performance computing environment. In accordance with an embodiment, a fabric manager can define a range of P_Key values, among a plurality of P_Key values, as a inter subnet partition (ISP) P_Key range. The fabric manager can communicate this defined range of P_Key values to a number of subnets, via their subnet managers. The subnet managers in each subnet retain management over their subnets. As there is no central management that configures each side of inter subnet communication, subnet managers on within participating subnets can set up ISP membership, and then exchange information with the other subnet.

Abstract: A system may include multiple electronic devices and multiple hardware transceivers. The multiple electronic devices may be coupled to each other via an interface network, and may include multiple chiplets. The multiple hardware transceivers, with at least one transceiver included in or coupled to a respective electronic device of the multiple electronic devices, may each be configured to receive data packets from a source device. The data packets may each include a path field including path information indicating a path to a destination device and a bridge-type field including bridge-type information indicating a type of the path information in the path field. The source device and the destination device may each include a chiplet. The multiple hardware transceivers may each be further configured to transmit the received data packets to the destination device using the path information and the bridge-type information of each received data packet.

Abstract: The present disclosure provides a method comprising receiving an instruction to partition a trie in a database, wherein the trie comprises a first sequence of values comprising information that indicates labels of keys in the trie, a second sequence of values comprising information that indicates whether the labels in the first sequence have one or more child nodes, a third sequence of values comprising information that indicates whether the labels in the first sequence are first child nodes under a parent node, and a fourth sequence of values comprising information that indicates values that corresponds to the labels in the first sequence; separating a sub-trie from the trie by removing entries corresponding to the sub-trie from the first, the second, the third, and the fourth sequences; and updating an entry in the fourth sequence corresponding to a parent node of the sub-trie using a memory address of the sub-trie.

Abstract: This disclosure relates to providing in order packet delivery for compressed radio bearers. A wireless device may receive packet data at a packet data convergence protocol layer. A packet reordering timer length to use for the packet data at the packet data convergence protocol layer may be adaptively selected from multiple possible packet reordering timer lengths. The packet data may be processed at the packet data convergence protocol layer using the selected packet reordering timer length. The packet reordering timer length may be selected based at least in part on a robust header compression decompressor state of the packet data convergence protocol layer.

Abstract: Technology for providing peer-to-peer (P2P) content distribution via a P2P applications server is disclosed. In an example, service control function (SCF) module can be operable for P2P content distribution and include computer circuitry configured to host P2P applications server operable to manage Internet protocol (IP) multimedia subsystem (IMS) content distribution between two user equipments (UEs).

Abstract: A communication method includes receiving, by a first node of a satellite communications network, a stream of terrestrial data packets that are encapsulated in accordance with a predetermined protocol, de-encapsulating, by the first node, the terrestrial data packets to extract user plane context and QoS parameters for a user session in accordance with the predetermined protocol, encapsulating, by the first node, the user plane context within satellite data packets, and transmitting, by the first node, the satellite data packets to a second node of the satellite communications network via a satellite communications link between the first node and the second node by scheduling the satellite data packets using the QoS parameters in accordance with the predetermined protocol.

Abstract: A network switch includes: a table record portion that records an address solution table that records multiple address information; an information addition portion that adds new address information for a new communication device based on the address solution data to the address information table; a relay portion that relays data other than the address solution data; and a rewrite portion that rewrites at least one of the address solution table or propriety information in accordance with an external instruction output from an external device. The address solution table includes the propriety information indicating availability propriety of the address information for each of the multiple address information. The relay portion relays the data by utilizing the address information set to be utilizable in the propriety information.

Abstract: An integrated circuit (IC) device includes a network device including a first network port, a second network port, and an internal endpoint port. The IC device further includes a first processing unit including an internal end station. The first processing unit is configured to communicate with the network device using the internal endpoint port. The IC device further includes a second processing unit including a bridge management layer. The second processing unit is configured to communicate with the network device using the internal endpoint port. In various embodiments, the first processing unit and the second processing unit are configured to communicate with each other using a first internal channel.

Abstract: A method of routing a data packet through a network comprises updating at least one router local forwarding table to include path IDs of network segments defining paths between network nodes and network function bit encoding/decoding information. In response to a data packet arriving at an ingress network node, an encapsulation header including a path ID identifying at least one network segment of an explicit routing path and a bit encoding specifying network functions to be performed on the data packet are encapsulated in unused portions of the source address and/or the destination address in the encapsulation header. A network node in the explicit routing path performs a network function encoded in the source address and/or the destination address of the encapsulation header of the data packet and forwards the data packet based on network function bit encoding/decoding and path ID information in the network node's local updated local forwarding table.

Abstract: Disclosed in the present disclosure is a method for realizing continued transmission of user data when a user station crosses multiple wireless network cells. The method includes: constructing a continuation guide table in an access point (AP) of a wireless network cell; when a user station crosses a first cell to a second cell, configuring the continuation guide tables in the AP of the first cell and the AP of the second cell; based on the continuation guide tables, building a data link of a network layer between an correspondent station of the user station and the user station located in a terminal cell; continuously transmitting data between the correspondent station of the user station and the user station in a source cell along the data link after the user station accesses the terminal cell. Further disclosed in the present disclosure is an access point device of a wireless network cell.

Abstract: An example network orchestrator includes processing circuitry and a memory including instructions that, when executed by the processing circuitry, cause the network orchestrator to determine that a branch site of a WAN includes multiple branch gateways. The network orchestrator further determines that devices of a core site of the WAN and devices of the branch site are members of an extended VLAN. The network orchestrator further transmits a first command to a first branch gateway and a first headend gateway to establish a WAN uplink tunnel to forward data traffic of the extended VLAN. The network orchestrator further transmits a second command to a set of branch gateways of the branch gateway cluster to establish intracluster tunnels with the first branch gateway.

Abstract: The present disclosure relates to a method and an apparatus for detecting a maximum transmission unit (MTU) value. The data sender forms a first detection packet according to a first preset rule based on its MTU value. The data sender sends the first detection packet to a data receiver. The data sender receives a second detection packet from the data receiver. The data sender determines an MTU value included in the second detection packet as an MTU value of data transmission between the data sender and the data receiver.

Abstract: A method of compensating for potential interruptions in a wireless spatially selective connection over which data at a first compression level is transmitted from a host device to a client device involves determining (S32) that an interruption to the wireless spatially selective connection over which data is being transmitted at a first compression level to a client device is starting or is due to start, compressing (S3Y3) the data at a second compression level that is higher than the first compression level, and forwarding (S34) the data compressed at the second compression level to a transmitting component for wireless spatially non-selective broadcast while the interruption to the spatially selective connection occurs. Determining that the interruption is due to start may involve analysing a historical record of previous interruptions to determine a periodicity of the previous interruptions or receiving information from the transmitting component that an interruption is expected to occur.

Abstract: A disclosed method may include (1) identifying a packet that enters a start point of an encapsulation tunnel that spans at least a portion of a network, (2) discovering a maximum transmission unit of the encapsulation tunnel, (3) determining whether a size of the packet satisfies a size threshold that is based at least in part on the maximum transmission unit of the encapsulation tunnel, (4) detecting an encapsulation-triggering event in connection with the packet, and then in response to detecting the encapsulation-triggering event, (5) forwarding the packet via the start point of the encapsulation tunnel toward an end point of the encapsulation tunnel. Various other systems, methods, and computer-readable media are also disclosed.

Abstract: A recovery route reflector with a monitoring module and a BGP state establishment module is peered with a plurality of primary route reflectors. Each of the plurality of primary route reflectors is peered with a set of provider edge devices. The BGP state between the recovery route reflector and the plurality of primary route reflectors is periodically monitored. When a primary route reflector fails the BGP state between the recovery route reflector and the failed primary route reflectors is idle, and the recovery route reflector establishes a peer session with the provider edge devices that had been peered with the failed route reflector.

Abstract: The present subject matter relates to a method comprising receiving at a first gateway a data packet from a first host in destination to a second host. A first portion of a header information of the data packet may be replaced by the first gateway by information comprising an identity information of at least one of the first host and the second host. The data packet may be transmitted by the first gateway in accordance with a second portion of the header information to a second gateway serving the second host.

Abstract: An information processing apparatus characterized by comprising: at least one wireless communication means capable of executing a plurality of communication modes that include a first communication mode in which the wireless communication means communicates information concerning a predetermined service to be provided to an external apparatus with the external apparatus; basic configuration means for deciding whether to assign an IP address used for a second communication mode different from the first communication mode to the wireless communication means; and communication mode setting means for setting the IP address for the wireless communication means regardless of a decision by the basic configuration means if the first communication mode is enabled.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a first label manager of a first network device, a first request to allocate a first label for a first route prefix for a first protocol, wherein the first network device and a second network device are part of a virtualized network device. The method includes receiving, at a second label manager of the second network device, a second request to determine the first label for the first route prefix for the first protocol, wherein the second request originates from the first label manager and determining, at the second label manager, the first label for the first route prefix for the first protocol. The method includes transmitting, the first label to the first label manager and transmitting, by the first label manager, the first label to a label management protocol corresponding to the first protocol, in response to the first request.

Abstract: The numbers of packets transmitted and packets lost for network devices in a computer network are used to estimate a probability of end-to-end packet loss for traffic between a source-destination pair in the network. Metrics of packet transmission and loss at each network device interface are passively collected and transmitted to a network monitoring unit, which uses the metrics to calculate probability of successful packet transmission at each hop. For a particular end-to-end path between the source-destination pair, the network monitoring unit combines the probabilities of successful packet transmission for the hops along the path to yield a probability of successful end-to-end packet transmission. Probability of packet loss along the end-to-end path is determined based on the probability of successful end-to-end packet transmission.

Abstract: The present application generally relates to a system and method for interfacing a source-selected path routing network with existing legacy IP networks. This interfacing may be achieved by installing specific router devices at the borders of the source-selected path routing network. Said router devices are able to exchange routing information in the form of IP prefix announcements and withdrawals between legacy IP networks and the source-selected path routing network according to an appropriate exterior gateway protocol. Hereby, the source-selected path routing network that in reality comprises a plurality of autonomous systems is conceptually regarded as a single autonomous system. Hence, a legacy IP network that is a direct neighbor of a source-selected path routing network may ensure that traffic destined to it traverses the source-selected path routing network by announcing its routing information only to the source-selected path routing network via an appropriate exterior gateway protocol.

Abstract: A network device, including ports that receive/send data packets from/to a network, receives data packets of multiple traffic flows, and populates a queue in memory with the data packets. The network device periodically updates a fair rate for the multiple traffic flows to converge a length of the queue to a reference length. Specifically, the network device determines a length of the queue, a change in the length from a previous length, and a deviation of the length from the reference length. The network device detects an increase in the change in length above a threshold that is based on the reference length. If the increase is not above the threshold, the network device derives the fair rate from a previous fair rate using proportional integral control. The network device identifies elephant flows among the multiple traffic flows, and sends the fair rate to a source of each elephant flow.

Abstract: A network element is provided. The network element includes a tunneling endpoint having a virtual address. The tunneling endpoint is configured to receive an address resolution reply that has a destination MAC (media access control) address matching the virtual address of the tunneling endpoint and is from a network device in a first network that includes the tunneling endpoint. The tunneling endpoint is further configured to send the address resolution reply via an interconnect to a further tunneling endpoint in a further network. A method for address resolution in virtual extensible networks is also provided.

Abstract: A system and method for automated data propagation and automated data processing within an integrated circuit includes an intelligence processing integrated circuit comprising at least one intelligence processing pipeline, wherein the at least one intelligence processing pipeline includes: a main data buffer that stores input data; a plurality of distinct intelligence processing tiles, wherein each distinct intelligence processing tile includes a computing circuit and a local data buffer; a token-based governance module, the token-based governance module implementing: a first token-based control data structure; a second token-based control data structure, wherein the first token-based control data structure and the second-token based control data operate in cooperation to control an automated flow of the input data and/or an automated processing of the input data through the at least one intelligence processing pipeline.

Abstract: Disclosed are various embodiments for managing network address allocations using prefix allocation trees. In one embodiment, a request is received to allocate a network address block. The request specifying a prefix size for the network address block. A particular network address block having the prefix size that is allocatable is determined based at least in part on a prefix allocation tree representing the available and allocated network address space. The prefix allocation tree is updated to indicate that the particular network address block is allocated. An identification of the particular network address block is returned in response to the request to allocate the network address block.

Abstract: Embodiments herein relate to a method performed by a network controller node (130) in a data processing network (100) for enabling routing of data flows to or from a service (150) in the data processing network (100). The network controller node (130) receives information indicating network requirements on the data processing network (100) by a service (150) to be initiated in the data processing network (100). Also, the network controller node (130) determines a network identifier for the service (150) in the data processing network (100) based on the obtained network requirements. Embodiments herein also relate to a method performed by a resource controller node (140) in a data processing network (100) for enabling routing of data flows to or from a service (150) in the data processing network (100). The resource controller node (140) obtains information indicating network requirements on the data processing network (100) by a service (150) to be initiated in the data processing network (100).

Abstract: Data Center Bridge (DCB)-based path selection methods and systems reduce packet loss in a network system comprising a Link Aggregation Group (LAG) topology. In embodiments, once traffic received at a LAG node and identified as DCB traffic, links whose DCB status are identified as “up” are assigned to a LAG sub-trunk that may be used to forward the DCB traffic on the LAG trunk, while non-DCB traffic is forwarded to any member of the LAG, irrespective of DCB status. In addition, DCB traffic received from a LAG peer node, which sends traffic on an inter-node link (INL) when no DCB-enabled links to a downstream device are present, is identified as DCB traffic and forwarded on a LAG sub-trunk that comprises DCB-enabled links. An egress mask that indicates to not forward the traffic received at the LAG node on the INL may be overridden, such that DCB traffic may be forwarded.

Abstract: A communication control device specifies the top N flows in descending order of communication amounts input to a communication line as flows that are communication band limit targets, and limits a communication band of a group of flows that are the communication band limit targets to a predetermined limited band so that a sum of communication amounts of the flows input to the communication line is equal to or smaller than a predetermined line capacity. Here, the communication control device determines a value of N so that a limited band is equal to or larger than a communication amount of a flow having the largest communication amount in a group of flows that are not the communication band limit targets and is equal to or smaller than a communication amount of a flow having the smallest communication amount in the group of flows that are the communication band limit target.

Abstract: Aspects of the technology described herein are directed towards systems, methods, and computer storage media for, among other things, converting a video stream being transmitted in a first streaming protocol to a second streaming protocol without transcoding the content communicated in the video stream. For example, the technology described herein may convert an RTP video stream to a non-RTP video stream without transcoding. The technology described herein extracts a plurality of media content from an RTP package and repackages the extracted content into a non-RTP streaming protocol, such as WebRTC or HLS. Moreover, the technology described herein can provide for the synchronization of video and audio data during conversion.

Abstract: The invention provides a time-efficient way of performing a query in a database or information retrieval system comprising operations such as intersection, union, difference and exclusive disjunction on two or more sets of keys stored in a database or information retrieval system. In a novel execution model, all data sources are tries. Two or more input tries are combined in accordance with the respective set operation, to obtain the set of keys associated with the nodes of a respective resulting trie. An intersection operation performed in this way can be used for efficient range queries, in particular when two or more data items are involved in the query. The physical algebra of the implementation of tries based on bitmaps corresponds directly to the logical algebra for the set operations and allows for efficient implementation by means of bitwise Boolean operations.

Abstract: In embodiments of efficient network stack for wireless application protocols, a network stack receives an application-layer message in a first wireless application protocol that includes a source address and a destination address, maps the source address to an Internet Protocol version 6 (IPv6) source address, and maps the destination address to an IPv6 source address. The source node transmits the application-layer message to a destination node in a mesh network using a network stack that implements a second wireless application protocol using the IPv6 source address, and maps the destination address to an IPv6 source address.

Abstract: Disclosed in the present invention are a data transmission method and device, and a computer storage medium, the method comprising: a terminal transmits data and attribute information corresponding to the data to a network; and the network transmits data and attribute information corresponding to the data to the terminal, the attribute information corresponding to the data comprising at least one of the following: quality of service (QoS) stream information, protocol data unit (PDU) session information, network slice information, external network information for data transmission and identification information of the terminal.

Abstract: Systems and methods are provided for programming a network device. A method includes receiving a wild card entry at the network device, the network device including a ternary content addressable memory (TCAM) table and an exact match (EM) table. The method determines whether the wild card entry is compatible with the EM table. In response to determining that the wild card entry is compatible with the EM table, the method determines the available space in the EM table, the usage of the TCAM table, and at least one flow characteristic of the wild card entry. The method evaluates the determined available space in the EM table, usage of the TCAM table, and the at least one flow characteristic against a set of stored rules that select the EM table or the TCAM table. The method programs the wild card entry in the EM table or TCAM table based upon the selection.

Abstract: Presented herein are methods and systems that facilitate data plane signaling of a packet as a candidate for capture at various network nodes within an IPv6 network. The signaling occurs in-band, via the data plane—that is, a capture or interrogation signal is embedded within the respective packet (e.g., in the packet header) that carries a user traffic. The signaling is inserted, preferably when the packet is classified, e.g., at the ingress node of the network, to which subsequent network nodes with the IPv6 network are signaled to capture or further inspect the packet for capture.

Abstract: Systems and methods are described, and one method includes storing, in association with a backup gateway resource, a first and second primary to backup (P2B) pairing coefficient, and a first and second backup to primary (B2P) pairing coefficient. The first and second P2B pairing coefficients correspond to a first and second P2B pairing, respectively. The first and second B2P pairing coefficients are indicative of a metric of switching from the backup GWR to the first and second primary GWRs. A respective unavailability metric is received from the first primary GWR, second primary GWR, respectively, and backup GWR. A P2B pairing is selected selecting, based at least partially on the first and second P2B pairing coefficients, and first and the second B2P pairing coefficients. Traffic is switched to the backup GWR from the one of the first primary and second primary GWR corresponding to the selected P2B pairing.

Abstract: Disclosed is a system and method for the dynamic monitoring of network health characteristics via a visualization platform. The platform receives collected information regarding network health characteristics and applies a rule set defining at least one threshold to classify each of the network health characteristics for each network component over a time period. The classifications can be represented visually on a graphical user interface to a network administrator, allowing the administrator to quickly discern which aspects of the network are operating properly and which aspects are not.

Abstract: Described herein are systems, methods, and software to enhance packet . In one implementation, a host computing element identifies a packet from a process executing on the host computing element. In response to identifying the packet, the host computing element determines whether the packet originates from a container namespace corresponding to a container on the host computing element or a host namespace corresponding to the host computing element. If the packet originates from a container namespace, the host computing element may determine supplemental information for the container associated with the container namespace, and process the packet based on the supplemental information.

Abstract: A non-transitory recording medium on which an evaluating program related to a cyberattack is recorded, the evaluating program making a computer perform: collecting a plurality of pieces of cyberattack information; analyzing the collected plurality of pieces of cyberattack information; identifying an address of a cyberattack source included in the plurality of pieces of cyberattack information; determining an address group as a monitoring target of the cyberattack based on the identified address; calculating an evaluation value related to reliability of setting the address group as the monitoring target according to a state of detection of a cyberattack from an address included in the determined address group; and performing an output corresponding to the calculated evaluation value.

Abstract: An apparatus includes a message receiver circuit that receives, at a port of a network node, a message from a neighboring network node. The message includes a maximum transmission unit (“MTU”) of the neighboring network node. The network nodes communicate using a layer-2 protocol. The apparatus includes a comparison circuit that determines if the received MTU is larger than an MTU for the port, and an approval circuit that, after determining that the received MTU is larger than the port's MTU, determines if the received MTU is supported by the network node. The method includes an increase circuit that, after determining that the received MTU is supported, changes the MTU of the network node's ports to match the received MTU, and a message circuit that, after determining that the received MTU is supported, sends a message with the MTU to network nodes connected to ports of the network node.

Abstract: Provided is a wireless communication terminal that wirelessly communicates. The wireless communication terminal includes: a transceiver for transmitting and receiving a wireless signal; and a processor for processing the wireless signal. The processor is configured to perform a transmission based on a transmission opportunity (TXOP) limit which is a maximum value of a TXOP, which is a time interval in which a wireless communication terminal has a right to initiate a frame exchange sequence in a wireless medium.

Abstract: A technique for content proxying is described. The technique includes receiving from a first device a stream of data. The stream of data is formatted in a format that does not indicate content length in a header. A received payload of the stream of data is encoded into a data chunk including a chunk length header and the received payload. The data chunk is forwarded to a second device that does not support the format.

Abstract: A network device has an input configured to receive a message relating to a given device attempting to forward one or more packets across a computer network. The message has given device information relating to the given device. In addition, the routing device also has a selector, operatively coupled with the input, configured to select (after receiving the given data) a given group routing policy from a plurality of group routing policies. Preferably, the selector is configured to select the given group routing policy as a function of the given device information. The routing device also has an output operatively coupled with the selector. The output is configured to cause routing of device communication across the network using link-layer routes specified by the given group routing policy.

Abstract: The present disclosure includes a memory system, a memory controller, and an operation method thereof. The memory system may cache a subset of all map segments in a mapping table indicating mapping information between logical addresses and physical addresses in a map cache, may select map segments on which locking is to be set from the map segments cached in the map cache so as not to be evicted from the map cache based on information on all commands received from a host during a set period of time, and may set lock flags for the map segments on which locking is to be set. Accordingly, the memory system may reduce the overhead occurring in reloading previously evicted map segments in the process of updating a mapping table, and may optimize update performance for a mapping table within a limit that guarantees caching performance to a predetermined level or higher.

Abstract: An autonomous system (AS) comprising a topology transparent zone (TTZ) comprising a plurality of TTZ nodes, wherein the plurality of TTZ nodes includes an edge node and an internal node, wherein each of the plurality of TTZ nodes is configured to connect to another TTZ node via an internal link, and a plurality of neighboring external nodes connected to the TTZ edge nodes via a plurality of external links, wherein no link state advertisements (LSAs) describing the internal links are distributed to the neighboring external nodes.

Abstract: A network monitoring system that summarizes a plurality of data packets of a session into a compact session record for storage and processing. Each session record may be produced in real-time and made available during the session and/or after the termination of the session. Depending on protocols, a network monitoring system extracts different sets of information, removes redundant information from the plurality of data packets, and adds performance information to produce the session record. The network monitoring system may retrieve and process a single session record or multiple session records for the same or different protocols to determine cause of events, resolve issues in a network or evaluate network performance or conditions. The session record enables analysis in the units of session instead of individual packets. Hence, the network monitoring system can analyze events, issues or performance of the network more efficiently and effectively.