Abstract: L2 switch 1 accommodates a plurality of subscriber lines and is connected to an upper side of an internet including service/management device 5 to exchange data packet. L2 switch 1 transmits broadcast packet of DHCP and ARP among the exchanged data packets to not the side of subscriber line but the upper side of the internet. When L2 packet transfer device 2 transfers the broadcast packet of ARP request to IP address managing device 3, L2 packet transfer device 2 determines whether the ARP request is transmitted from a user terminal connected to the subscriber line or from service/management device 5 or packet transfer device 4.

Abstract: A data item interval identifier lookup method and system is proposed, which is designed for integration to an information processing system for finding which predefined interval the value of an input data item, such as an IP (Internet Protocol) address, belongs. The proposed method and system is characterized by the use of a multi-stage lookup-table data structure having a number of cascaded lookup tables constructed by partitioning the data format of the input data item into a number of segments, each being mapped to one stage of lookup table data structure whose key-value relationships are predefined based on a predefined interval-and-identifier definition table. In operation, the values of the partitioned segments are sequentially used as lookup keys to search through the multi-stage lookup-table data structure until the corresponding interval identifier is found. This feature allows the implementation to have low memory requirement and enhanced system performance.

Abstract: A router for interconnecting external devices comprising: 1) a switch fabric; and 2) R routing nodes coupled to the switch fabric. Each of the R routing nodes exchanges data packets with the external devices via network interface ports and with other routing nodes via the switch fabric. A first routing node comprises: i) an inbound network processor for receiving incoming data packets from a network interface port; ii) an outbound network processor for transmitting data packets to the network interface port; and iii) a shared memory accessible by the inbound and outbound network processors for storing a current trie tree search table and a current vector table used to index into the trie tree search table. A control plane processor generates an updated vector table to replace the current vector table and notifies the inbound and outbound network processors that the updated vector table is available.

Abstract: In general, in one aspect, the disclosure describes assigning a flow of network packets to a thread of a multi-threaded processor core in a set of multiple multi-threaded processor cores integrated on a single die. Based on the assigning, a packet in the flow is processed by the assigned processor core thread.

Abstract: Stored in the leaf nodes of a data structure that can be used for identifying the longest prefix matching an address are corresponding values from multiple forwarding information bases. A single common address lookup data structure (e.g., a tree, trie, etc.) can be used, and a leaf node can contain information from multiple forwarding information bases. If lookup operations are performed for a single address in multiple forwarding information bases, the single common address lookup data structure may only need to be traversed once. For example, the forwarding information for another forwarding information base may be stored in the same leaf, further down in the data structure requiring traversal from the current position, or above requiring traversal from the root of the lookup data structure. Information can be stored in the leaf node to indicate which traversal option is appropriate for a particular forwarding information base.

Abstract: Methods and apparatus are provided for classifying data packets in a data processing device. In one aspect, packets are classified according to a plurality of sets of processing rules. Each rule defines a plurality of rule ranges, each rule range indicating a range of possible values of a corresponding data item in the packet for which the rule applies, and rule ranges defined in different rule sets correspond to a common set of data items. Independent item searches are performed for respective data items in the packet corresponding to rule ranges defined in the rule sets. The item search for a data item comprises selecting a range identifier corresponding to the value of the data item from a predetermined set of range identifiers for that data item. This set of range identifiers indicates, for all possible values of the data item, which of the rule ranges corresponding to the data item in the rule sets a value intersects.

Abstract: A method and device for routing fragmented data frames is provided. A data frame may be fragmented into a plurality of fragments, each fragment including a packet identifier and a fragment offset. The first fragment may further include a port number associated with a target partition of a plurality of partitions. If the fragment is a first fragment as determined from the fragment offset, the packet identifier and target partition is stored at a location in a hash table, the location calculated by using the packet identifier of the fragment as a hash key. Other embodiments are described and claimed.

Abstract: Methods and apparatus are provided for classifying data packets in a data processing device according to a set of processing rules, wherein, for each of a predetermined group of data items in each packet, each rule defines a rule range indicating a range of possible values of the corresponding data item for which that rule applies.

Abstract: A system and method are disclosed for routing data packets for network flow analysis by a multi-processor system. A data packet comprising data sufficient to identify a network connection with which the data packet is associated is received. A hash value is calculated based on the data sufficient to identify the network connection with which the data packet is associated. The data packet is assigned, based on the hash value, to one of the plurality of processors for analysis.

Abstract: A high quality network is provided that eliminates the sorting time for sorting through registering look-up conditions, such as source and destination MAC addresses, in a content addressable memory, by generating a routing or flow control look-up key, and then selectively activating some of the physical banks in the content addressable memory with the look-up key during look-up for the look-up conditions. The look-up key is generated by extracting a part or all of the data contained in a packet header.

Abstract: A method for packet routing includes receiving packets over a plurality of virtual private networks (VPNs). Each of the packets includes a respective virtual routing and forwarding (VRF) identifier indicative of a respective VPN over which the packet was transmitted. Each of the packets is assigned to a respective service class having a respective class identifier. For each packet among at least some of the packets, a respective key is computed based on the respective VRF identifier and the respective class identifier of the packet. The respective key is looked up in a configuration table to determine whether the packet is subject to network address translation (NAT). If the packet is subject to NAT, a new address is assigned to the packet, and the packet is forwarded using the new address.

Abstract: Method and apparatus to support a large Internet Protocol Forwarding Information Base. A packet is received at a network device, the packet including a destination address. A table is indexed into using a portion of the destination address to locate an entry in the table associated with the portion of the destination address. A pool index is derived from the portion of the destination address and is used to identify a pool of data blocks from among a plurality of pools of data blocks. The entry and the pool of data blocks are navigated to find a next-hop for the packet.

Abstract: An action group arbitration system can include an action table and a search block having a first type memory portion and a second type memory portion is disclosed. The search block can provide a plurality of search results, each corresponding to a group number, in response to a search key. The action table may receive the search results and provide an action indication in response to each of the plurality of search results that contain a hit indication. The first type memory portion can include static random access memory (SRAM) and the second type memory portion can include ternary content addressable memory (TCAM). Further, the action table may be divided into portions corresponding to the group number.

Abstract: Upon the detection of a failure along a bi-directional label switched path, traffic in both forward and backward directions is re-routed to the same alternate path.

Abstract: Provided is an address validating data structure used for validating addresses. A data structure comprising a plurality of arrays is buffered. Each array includes a plurality of words, wherein one word in each array indicates address words in the array having valid addresses. At least one mask word provides mask information for at least one address word having a valid address, wherein the mask information for one address word indicates bits in the address word. The data structure is used to validate an address received from a transmitting node.

Abstract: One embodiment of the present invention provides a system that performs packets switching in a passive optical network which includes a central node and at least one remote node. After receiving a packet, the system obtains a first set of results by performing a first lookup based on a first set of values derived from the packet. The system also obtains a second set of results by performing a second lookup based on a second set of values derived from the packet. Next, the system merges the first set of results and the second set of results, and produces a merged value. The system then obtains a subsequent result by performing a subsequent lookup with the merged value. If the packet is a downstream packet, the system derives a logical identifier corresponding to one or more remote nodes from the subsequent result. The system then incorporates the logical identifier into the packet and transmits the packet to one or more remote nodes.

Abstract: A system for deriving hash values for packets in a packet processing system is described. In this system, hash derivation logic is configured to derive a hash value for the packet responsive to a key that drives processing of the packet. The hash value is useful for supporting additional processing of the packet, such as link aggregation and equal cost multi-path.

Abstract: A method and a communication device for processing ATM cells. The communication device includes an input interface adapted to receive an ATM cell that is associated with a PHY value and includes a pair of VCI and VPI fields. The communication device is characterized by comprising a search unit, adapted to search, within a group of memory entries that belong to a memory unit, for a pair of VCI and VPI fields that have values that match the values of the VCI and VPI fields of the received ATM cell, if the received VCI field and VPI fields belong to a first predefined group of VCI and VPI fields. The communication device further includes a processor, connected to the search unit, wherein the processor is adapted to determine a channel identifier of the received ATM cell in response to a result of the search and in response to a PHY value associated with the received ATM cell.

Abstract: A method for performing a lookup for a packet in a computer network are disclosed. The packet includes a header. The method includes providing a parser, providing a lookup engine coupled with the parser, and providing a processor coupled with the lookup engine. The parser is for parsing the packet for the header prior to receipt of the packet being completed. The lookup engine performs a lookup for the header and returns a resultant. In one aspect, the lookup includes performing a local lookup of a cache that includes resultants of previous lookups. The processor processes the resultant.

Abstract: A method and apparatus for building a packet grooming and aggregation engine is disclosed. The grooming and aggregation engine can be applied to the network for providing flexible aggregation and service multiplexing functions. A method and apparatus achieves the intended function that is easy to implement and easy for the network operator to manage, yet provides enough flexibility to mix and match various services at the edge node of the network. One specific embodiment of the patent is an Ethernet over SONET mapping system where user traffic is aggregated and groomed into SONET transport virtual concatenation channels.

Abstract: The method, apparatus and system of detecting whether a router is compromised and configured to place malicious packets onto the network are disclosed. In one embodiment, a method for detecting a malicious router includes performing hash on a current ingress packet received via the network packet payload to generate ingress packet hash values. Further, includes performing hash on current egress packet that is associated with the current ingress packet to generate egress packet hash values. The generated ingress packet hash values and the egress packet hash values are then compared. Then the router is checked to determine whether it is potentially compromised and configured to place the malicious packets based on the outcome of the comparison.

Abstract: A packet information extraction circuit derives predetermined key information (for example, destination information or transmission source information) from a received packet. A HASH result computation circuit generates m (a plurality of) pseudo-random numbers (HASH results) of fixed length from the derived information. A cache table holds the key information and cumulative packet lengths within a predetermined time period by using the generated pseudo-random numbers as addresses. When a threshold value holding and comparing circuit senses that the cumulative packet length has exceeded a value held therein, it sends a notification signal to judgment means disposed in a packet exchange system. The key information items and the cumulative values of the packet lengths are stored in the cache table on the basis of the received packets in such a way that larger cumulative packet lengths are left behind, whereas smaller cumulative packet lengths are erased.

Abstract: A packet classification method through hierarchical rulebase partitioning. The packet classification method for searching for a rule having a highest priority and matching among a plurality of rules included in a specified rulebase with respect to a packet input from an external network and processing the packet according to the searched rule. The method includes: a preprocessing step of partitioning the rulebase into a plurality of independent sub-rulebases based on a specified condition and producing a hash table on the basis of the sub-rulebases; and a classification step of classifying the packet by searching the hash table using a hash key extracted from a packet header of the inputted packet and mapping the packet on the sub-rulebase corresponding to the packet.

Abstract: Disclosed are, inter alia, methods, apparatus, data structures, computer-readable media, mechanisms, and means for maintaining and using a data structure identifying for multiple addresses the reverse path forwarding information for a common intermediate node. A data structure includes an address lookup data structure for identifying leaf nodes of multiple leaf nodes corresponding to matching addresses. Each of the multiple leaf nodes includes a reverse path forwarding indirection link to a corresponding sub-data structure indicating reverse path forwarding information. Each of a particular set of leaf nodes having a same intermediate reachability node in a network includes a particular indirection link to a same particular sub-data structure indicating reverse path forwarding information. The intermediate reachability node may or may not be a gateway node to a different intranet.

Abstract: A method for a load distribution control of packet transmission includes calculating bandwidths of individual physical ports at a time when inputted packets are distributed to the plurality of physical ports, using each of a plurality of hash calculation formulas; selecting one of the hash calculation formulas so that the calculated bandwidths of the packets for the respective physical ports may become uniform; and distributing and delivering the packets to the respective physical ports using the updated hash calculation formula.

Abstract: The disclosed embodiments relate to a system and method for selecting a multicast IP address. More specifically, there is provided a method comprising selecting a first IP address from a plurality of IP addresses, hashing the first IP address to create a first hash value corresponding to the first IP address, determining whether the first hash value corresponds to a second IP address that is in use, and allocating the first IP address if the first hash value does not correspond to the second IP address that is in use.

Abstract: A method and apparatus are disclosed for establishing adjacencies on a network, the method comprising, at a first node of the network, sending hello packets on the network and receiving hello packets from other nodes on the network on the basis of the received hello packets. The node then sends a link-state packet without adjacency information and without an overload bit set. The node then interrogates a link-state adjacency table and, when only one adjacency is listed in the link-state table, sends a further link-state packet with the adjacency information and the overload bit set. On convergence of a forward cache, the node sends a further link-state packet with adjacency information and without the overload bit set.

Abstract: A method and system are provided for automatically tracking the rerouting of logical circuit data in a data network. Current reroute statistics are automatically generated upon the rerouting of logical circuit data from one or more failed logical circuits to one or more logical failover circuits in the data network. The current reroute statistics include trap data received for the one or more failed logical circuits in the data network. The current rerouted statistics may be automatically updated upon receiving updated trap data for the failed logical circuits and the logical failover circuits in the data network. A table is generated for presenting the current and updated reroute statistics. The updated reroute statistics may be generated upon the restoration of one or more of the failed logical circuits in the data network. A billing report may then be generated following the generation of the updated reroute statistics.

Abstract: A method for a router having a routing table and a forwarding table. In an embodiment, the method includes creating an entry for use in the forwarding table, the entry corresponding to multiple entries of the routing table. The entry may correspond to a set of entries of the routing table which specify overlapping IP addresses and a same next hop router, in one example. In another example, the entry may be an aggregate entry corresponding to a set of entries of the routing table which specify the same next hop router.

Abstract: A global path identifier is assigned to each explicit route through a data communication network. The global path identifier is inserted into each packet as the packet enters a network and is used in selecting the next hop. When encountering a new selected path, an ingress router sends an explicit object to downstream nodes of the path to set up explicit routes by caching the next hop in an Explicit Forwarding Information Base (“EFIB”) table. Ingress routers maintain an Explicit Route Table (“ERT”) that tracks the global path identifier associated with each flow through the network. Multiple flows using the same path can be implemented by sharing the same global path identifier. In case of sudden network load changes, rerouting can be performed by changing the global path identifier associated with those flows that need to be rerouted and by then transmitting a new path object to downstream nodes.

Abstract: A system for performing a lookup for a packet in a computer network are disclosed. The packet includes a header. The system includes a parser, a lookup engine coupled with the parser, and a processor coupled with the lookup engine. The parser parses the packet for the header prior to receipt of the packet being completed. The lookup engine performs a lookup for the header and returns a resultant. In one aspect, the lookup includes performing a local lookup of a cache that includes resultants of previous lookups. The processor processes the resultant.

Abstract: A computer implemented method, data processing system, and computer program product for enabling network statistics to be collected per software partition. When an incoming data packet is received at the Internet Protocol (IP) layer of an operating system, the IP address in the incoming data packet is identified. The IP address in the incoming data packet is then compared against IP addresses stored in a hash table, wherein the hash table maps each IP address in the hash table to a software partition of the operating system. If an IP address in the hash table matches the IP address in the data packet, the software partition mapped to the located IP address in the hash table is identified. Network statistics collected for the incoming data packet are then associated with the software partition.

Abstract: In some embodiments, a method includes generating a prefix trie for a set of patterns, generating a suffix trie for the set of patterns, and establishing respective links between nodes of the prefix trie and respective corresponding nodes of the suffix trie. In some embodiments, a method includes adding a suffix to a suffix tree, so that the suffix (which is at least a portion of a pattern) is represented in the tree by a path that begins at a first node and ends at a second node, and associating with at least the first node and the second node a pattern identifier that identifies the pattern.

Abstract: A technique configures an intermediate network node to automatically determine whether a route advertised by a routing protocol is important for fast convergence in a computer network. As used herein, an important route needed for fast convergence is a route advertised by the routing protocol, such as an exterior gateway routing protocol, as a next-hop address, since external connectivity relies on such a route. A routing information base process executing on the node stores the advertised route and, notably, interacts with an interior gateway routing protocol (IGP) process executing on the node to identify the route as an important route. Identification of an important route, in turn, allows IGP to process the route in a high priority fashion, thereby facilitating fast convergence.

Abstract: Methods directed to longest prefix matching and systems directed to IP address lookups are presented. The methods and systems relate in particular to IPv6 and comprise finding the longest prefix match (LPM) for an IP address. The method of the invention results in the use of filters to perform LPM. In embodiments of the invention, partial address filtering is used to further reduce filtering requirements. Reducing the number of filtering operations has the advantage of making the LPM algorithm faster and less costly to implement than prior art approaches. Also described is an “ideal offset filter” that extracts a fixed sized sliding window of bits from the IP address being processed.

Abstract: Methods for determining multiplex patterns are provided. More particularly, a multidimensional data structure is used to store multiplex patterns and indexes used to access individual ones of those patterns based on audio channel selection, audio frame size, and what other media channels have frames pending. For example, when using a single audio channel, a two-dimensional look-up table maybe used to store multiplex patterns wherein one index is the audio frame size and the other index is an encoded value formed from bits representing whether any frames are pending for other corresponding media channels.

Abstract: A method of managing rule entries of a Ternary Content Addressable Memory (TCAM) in a routing system includes: creating a hash table having a hash key corresponding to each entry; creating a single linked list for linking nodes, the single linked list using the entry of the hash table as a head node and including rule IDs and sequence IDs assigned according to a rule input order; and a double linked list having an independent head node, the double linked list bidirectionally linking the nodes constituting the single linked list according to an order of the sequence IDs. Thus, the packet classifying/filtering rule can be easily added to the TCAM or deleted from the TCAM only with minimal information.

Abstract: A switch includes multiple ports, a switching fabric, and a routing table module. The routing table module includes a multi-bank memory structure for maintaining routing information. The routing information enables the switching fabric to route packets between the ports based upon addresses within the packets.

Abstract: Disclosed are, inter alia, methods, apparatus, data structures, computer readable media, mechanisms, and means for partitioning and filtering a search space of particular use for determining a longest prefix match thereon, such as for routing packets. One implementation uses one or more filtering mechanisms to filter portions of a lookup word against a first set of lookup values, such as, but not limited to the value of any corresponding portion of any entry in the search space. A set of possible matching prefixes defined by consecutive matching portions of the lookup word from the highest-order position are determined, and lookup operations are typically performed in parallel on each of these possible matching prefixes to generate a set of matching results (if any), which is typically used to identify the longest matching prefix.

Abstract: A node structure of a multiway search tree can accelerates a search speed by making a key, a key pointer and a node pointer coincident with the size of a cache line through the use of only one pointer written on a node regardless of the number of keys used in the node and, thereafter, reduce the main memory capacity, a search method using the node structure and a computer readable recording medium in which a program implementing the search method is recorded. The method for generating nodes of a multiway search tree includes the steps of: a) assigning at least one key to each of the nodes; and b) assigning pointer information so that related information written on the node is accommodated in a cache line regardless a number of keys.

Abstract: A redundant network interface for ethernet devices is disclosed. The redundant network interface provides connections between one or more Ethernet devices and two or more independent networks. The redundant network interface device also tests an active primary Ethernet connection path, and when a failure or inactive path is detected, the redundant network interface device reroutes the messages to alternate communication path.

Abstract: A method and apparatus are provided for implementing predefined actions based upon packet classification and lookup results in a communications network processor. A plurality of sets of rules is defined. Each rule set includes at least one rule and each rule has a set of masked compares for comparing results of hits and misses of table lookups. Each masked compare set has an associated field for selecting an action. The action defines a set of one or more commands and each command defines a processing operation. One rule set is identified based upon the packet classification result for a received packet. When one of the rules is identified having a match of the masked compares, then the action of associated with the identified rule is selected. Otherwise a default action is provided responsive to no rule of the identified rule set having a match of the masked compares.

Abstract: Managing TCAM entries within a TCAM matrix for use in a data packet routing device is disclosed. Additionally, a computer readable medium containing instructions to cause a processor to perform the method is also disclosed. One method comprises the steps of: (1) providing a plurality of information base agents for managing respective information bases, wherein the information bases include route data; (2) maintaining a list of TCAM entries that are available for assignment; (3) allocating blocks of available TCAM entries to each of the plurality of information base agents; (4) the plurality of information base agents storing route data into the TCAM entries of their respective blocks of TCAM entries; (5) determining that one information base agent of the plurality of information base agents needs additional TCAM entries; (6) providing additional TCAM entries to the one information base agent; and (7) updating the list of TCAM entries available for assignment.

Abstract: A method for retrieving content of a distributed directory of a telecommunication system comprising a plurality of nodes arranged in a directed ring topology, the method comprising the steps of identifying a storage location of said content by means of a distributed hashing function, where the hashing function maps an element onto a node, where the node is responsible carrying elements with a hash value between the node and its successor node. The invention further concerns a corresponding computer software product, telecommunication device, and a telecommunication system.

Abstract: Management of congestion level, in a computer-related context, is disclosed. Also disclosed is a system generating a plurality of computer network-related tables during system operation. A number of the tables are each separately indexed by a different index. The system includes at least one tangible computer-readable medium adapted to store, at each indexed location, a swap count providing an indication of the congestion level of the indexed location. The system also includes insert logic stored as instructions on the at least one medium for execution. When executed, the insert logic is operable to: i) insert, when a predetermined condition has been satisfied, a new entry by overwriting the current entry stored in the indexed location having the lowest swap count; and ii) update the swap counts in each of the indexed locations in a manner that maintains the total swap count at least substantially constant over time.

Abstract: Embodiments of the present invention relates to an apparatus and method for routing AAL5 PDU in a mobile communication system, capable of routing AAL5 PDU using a Hash lookup table.

Abstract: A system for processing packets includes a communications interface and a processor. A communications interface receives a packet between a source and a destination. The processor identifies a flow between the source and the destination based on the packet. The processor determines whether some of packet data of the packet matches to storage data in storage using hashes. The processor then stores the packet data in a block of memory in the storage based on the flow and if the packet data does not match the storage data.

Abstract: A method and system for implementing Access Control Lists (ACLs) using a Balanced Hash Table of ACL Binary Comparison Trees (ABCTs), where the Balanced Hash Table of ABCTs encodes the replaced ACL. In one embodiment, the method includes but is not limited to receiving at least one packet, and disposing of the received at least one packet in response to a walk of a Balanced Hash Table of ABCTs, where the Balanced Hash Table of ABCTs encodes an Access Control List. In another embodiment, the method further includes converting the Access Control List to the Balanced Hash Table of ABCTs, the Balanced Hash Table of ABCTs encoding the Access Control List. In one embodiment, the system receives at least one packet, and disposing disposes of the received at least one packet in response to a walk of a Balanced Hash Table of ABCTs, where the Balanced Hash Table of ABCTs encodes an Access Control List.

Abstract: The present invention is directed to a method, a service node and a system for providing IP redundancy between a first service node and a second service node being mutually redundant. The first and the second service nodes are connected via a virtual connection. The first service node has a physical network interface to an IP node and a virtual network interface to the virtual connection. The first service node comprises a routing table having a cost associated with the virtual network interface. The method comprises steps of detecting by the first service node that the second service node is unavailable, updating in the routing table the cost from a higher value to a lower value and informing the IP node connected to the physical network interface of the update of the cost so as to process at the first service node traffic addressed to the second service node.

Abstract: Path determination constraints may be encoded in the form of a program having one or more instructions. Each of instructions may include an operation code, and operands (or pointers to locations where operands are stored). In this way, an extensible, interoperable way for a nodes (e.g., label-switching routers) to communicate constraints within a network is provided. Such constraints may be inserted (e.g., as one or more CONSTRAINT objects) into signaling messages (e.g., a PATH RSVP message). By enabling the signaling of constraints, the determination of constraint-based (label-switched) paths can be distributed among a number of (label-switching) routers or other nodes. Upon receiving a message with constraints (e.g.