Abstract: Packets received at a network appliance are classified according to a packet classification rules based on flow state information maintained by the network appliance and evaluated for each packet as it is received at the appliance on the basis of OSI Level 2-Level 4 (L2-L4) information retrieved from the packet. The received packets are acted upon according to outcomes of the classification; and the flow state information is updated according to actions taken on the received packets. The updated flow state information is then made available to modules performing additional processing of one or more of the packets at OSI Layer 7 (L7).

Abstract: To reduce repetitive data transfers, data content of an outgoing message is stored within cache storage of an intermediate node of a data communications network. A token for identifying the cached data content is stored at the intermediate node and the sender. When a subsequent outgoing message is to be routed from a first network node to a target destination via the intermediate node, a process running at the first node checks whether the content of the message matches data cached at the intermediate node. If there is a match, a copy of the token is sent from the first node to the intermediate node instead date data content. The token is used at the intermediate node to identify the cached data, and the cached data is retrieved from the cache and forwarded to the target destination as an outgoing message.

Abstract: A method for maximizing server throughput while avoiding overload of a server is presented. The method involves intercepting, via an interface unit, a client request for information from the server. Next, the interface unit determines the current server performance, where the server performance is based on the number of connections opened to the server, the response time of the server and the rate at which the response time is changing. Finally, the interface unit forwards the client request to the server if the current server performance is close to an optimal performance, whereby avoiding overload of the server.

Abstract: To reduce repetitive data transfers, data content of an outgoing message is stored within cache storage of an intermediate node of a data communications network. A token for identifying the cached data content is stored at the intermediate node and the sender. When a subsequent outgoing message is to be routed from a first network node to a target destination via the intermediate node, a process running at the first node checks whether the content of the message matches data cached at the intermediate node. If there is a match, a copy of the token is sent from the first node to the intermediate node instead of the data content. The token is used at the intermediate node to identify the cached data, and the cached data is retrieved from the cache and forwarded to the target destination as an outgoing message.

Abstract: A Distributed Denial of Service (DDoS) attack detection and defense apparatus and method are provided. The Distributed Denial of Service (DDoS) attack detection and defense apparatus includes: a flow information collection unit to collect, from one or more input packets with an IP address of an attack target system as a destination IP address, flow information including source IP addresses of the input packets and packet counts of one or more flows that are classified for each of the source IP addresses and each of different protocol types; an inspection unit to calculate packets per second (PPS) values of the flows based on the packet counts; and a response unit to determine a DDoS attack response method for each of the flows based on the PPS value and the protocol type of a corresponding flow and to process the corresponding flow using the determined DDoS attack response method.

Abstract: A method, apparatus, and machine readable storage medium is disclosed for establishing a test protocol processor which autonomously intercepts success path protocol messages at a network element port buffer and substitutes a corresponding failure path messages to simulate the introduction of unexpected protocol messages into the protocol message flow from an external source to the network element under test. Subsequent to intercepting messages, the test protocol processor may perform one or more of several actions according to the results of statistical calculations. These actions include allowing the message to drop, replacing the message after a delay, replacing the message after altering the payload of the message, and replacing the message after altering the message type. The disclosed autonomous self disrupting network element is particularly useful for providing a means to perform in situ field testing of network performance indicators under desired statistical conditions.

Abstract: Technologies and implementations for reducing congestion in a network are generally disclosed.

Abstract: A method for defining delays to support consistent tiered messaging performance is provided. The method comprises a query server receiving a message and the query server analyzing a class of service associated with the message. The method also comprises the query server injecting a defined delay prior to initiating processing of the message and the query server processing the message and storing the processed message in an outgoing queue. The method also comprises the query server sending a notification to a destination component that the message is available for retrieval and the query server releasing the message to the destination component upon request of the destination component.

Abstract: A system improves bandwidth used by a data stream. The system receives data from the data stream and partitions the data into bursts. At least one of the bursts includes one or more idles. The system selectively removes the idles from the at least one burst and transmits the bursts, including the at least one burst.

Abstract: One preferred embodiment of the present invention provides systems and methods for analyzing the delivery performance of newsgroup services. Briefly described, in architecture, one embodiment, among others, includes a newsgroup evaluation system configured to determine a delivery rate for a newsgroup server. In other embodiments, methods and systems are provided for analyzing completion and retention for newsgroup services.

Abstract: An interface device is connected to a host by an I/O bus and provides hardware and processing mechanisms for accelerating data transfers between a network and a storage unit, while controlling the data transfers by the host. The interface device includes hardware circuitry for processing network packet headers, and can use a dedicated fast-path for data transfer between the network and the storage unit, the fast-path set up by the host. The host CPU and protocol stack avoids protocol processing for data transfer over the fast-path, freeing host bus bandwidth, and the data need not cross the I/O bus, freeing I/O bus bandwidth. The storage unit may include RAID or other multiple drive configurations and may be connected to the INIC by a parallel channel such as SCSI or by a serial channel such as Ethernet or Fiber Channel.

Abstract: Congestion is detected in a radio access transport network that includes radio network controllers and base stations. Data packet flows associated with mobile radio communications are controlled in the radio access transport network by a corresponding flow control entity. Each flow is monitored for congestion in the transport network. A flow control action is determined in response to the detected congestion. Performance of the flow control action is delayed for a predetermined delay period before the flow control action may be performed. Delaying flow control action after congestion is detected allows other affected flows to detect or be notified of the congestion, thereby making congestion detection more fair.

Abstract: There is provided a communication processing device including a sender report transmitting unit which transmits to a client a sender report including transmission information of transmission data on a regular basis separately from a rate change report, an extended receiver report receiving unit which receives from the client an extended receiver report which includes the transmission information and which is transmitted from the client when the client receives the sender report, and a rate controlling unit which controls a transmission rate of transmission data for the client, based on the transmission information stored in a transmission information storing unit and the transmission information included in the extended receiver report received from the client.

Abstract: In one aspect the invention provides a method for allocating bandwidth in a network appliance where the network appliance includes a plurality of guaranteed bandwidth buckets used to evaluate when to pass traffic through the network appliance. The method includes providing a shared bandwidth bucket associated with a plurality of the guaranteed bandwidth buckets, allocating bandwidth to the shared bandwidth bucket based on the underutilization of bandwidth in the plurality of guaranteed bandwidth buckets and sharing excess bandwidth developed from the underutilization of the guaranteed bandwidth allocated to the individual guaranteed bandwidth buckets. The step of sharing includes borrowing bandwidth from the shared bandwidth bucket by a respective guaranteed bandwidth bucket to allow traffic to pass immediately through the network appliance.

Abstract: Methods and apparatus to process multimedia data enabling faster channel acquisitions, improved error recovery and improved efficiency. An encoder device encodes a first portion of multimedia data using inter-coding to generate a first version, and encodes the first portion of multimedia data using intra-coding to generate a second version. A decoder device receives a first version of a first portion of multimedia data, wherein the first version is inter-coded, receives a second version of the first portion of multimedia data, wherein the second version is intra-coded, and selectively decodes the first and second received versions.

Abstract: The deployment of a driver or an application on a client device having a write-filter is described. A deployment configuration file is obtained, wherein the deployment configuration file includes a plurality of deployment entries each having information for deployment of one of a driver and an application. A first deployment entry is retrieved from the deployment configuration file, and the deployment configuration file is modified to remove the first deployment entry from the deployment configuration file. The modified deployment configuration file is stored in a location of a memory of the client device that is exempt from a write-filter restriction, wherein the write-filter restriction prohibits a file stored on the client device with the write-filter enabled from persisting across a reboot of the client device. The one of the driver and the application of the first deployment entry is then deployed on the client device while the write-filter is disabled.

Abstract: A method for characterising a data flow to be transferred over a network path of a network, whereby the network path has at least one network device susceptible of network congestion. The method includes the step of determining a footprint measure of the data flow. The footprint measure is indicative of a possible difference between the total amount of incoming data and the total amount of outgoing data in the network device over a time interval having a duration of one or more time units, whereby that time unit is so chosen that individual data units of the data flow are distinguishable at byte level by the network device. The invention also relates to a device for performing the method.

Abstract: Systems and methods to bind a client with a server are provided. A particular method includes establishing a connection between a server and a client. A list of best-fit server IP addresses is received at the client via the connection. A determination is made whether the server is identified in the list of best-fit server IP addresses. When the server is not identified in the list of best-fit server IP addresses, the connection to the server is terminated.

Abstract: Real routable external addresses may be pooled rather than assigned to nodes and may be dynamically bound to connections by a proxy or gateway device in ways that spread apparent identity of individual nodes across multiple of the external addresses. In general, these spread identity techniques may be employed at one end or the other of a connection, as well as at both ends. In a typical double-ended configuration, the architecture and associated techniques provide “double-blindfolding,” wherein true identities (addresses) of communicating peers are always hidden from each other. In some double-ended configurations, dynamic binding may be employed at a fine level of granularity, for instance allowing individual packets associated with given connection to bear different apparent source addresses and/or different apparent destination addresses. In some single-ended configurations, a spread identity proxy is interposed between an information server and a plurality of requestors.

Abstract: An optical ring network has one or more working wavelengths and multiple protection wavelengths adapted to support the working wavelength(s). Routing tables may be used in network nodes to assign traffic of a failed working wavelength to a protection wavelength. The protection technique may be applied to networks employing, for example, Dense Wave Division Multiplexing (DWDM).

Abstract: A method of conducting a lawful intercept of real time media packet traffic involves redirecting real time media packet streams between a caller and callee through a media server; replicating the media packet streams within the media server; modifying packet headers of the replicated packet streams; and directing the modified packet streams to at least one monitoring port.

Abstract: Disclosed are a method and a computer program storage product for dynamically stabilizing a stream processing system. The method includes receiving at least one computing resource allocation target. A plurality of downstream processing elements and an upstream processing element are associated with at least one input buffer. Each of the downstream processing elements consumes data packets produced by the upstream processing element received on an output stream associated with the upstream processing element. A fastest input rate among each downstream processing element in the plurality of downstream processing elements is identified. An output rate of the upstream processing element is set to the fastest input rate that has been determined for the plurality of downstream processing elements.

Abstract: An apparatus and method for receiving data over a network are provided. The data reception apparatus may include a receiver, a congestion decision unit and a suspension session selector. The receiver is configured to receive segments of data, using sessions corresponding to data transmissions apparatuses. The congestion detection unit is configured to determine whether a network to be utilized by a corresponding segment is congested, based on a status of each of the sessions. The suspension selector is configured to select a suspension session from the sessions where the network is determined to be congested.

Abstract: A communication device, method and network are provided. The communication method comprises generating a first registration packet including first bio data, sending the first registration packet to a network, generating a content packet having second bio data and content data and sending the content packet to the network. The other communication method comprises receiving a first registration packet including first bio data, storing the first bio data together with a device identification, receiving a content packet including second bio data, extracting the second bio data from the content packet, comparing the first bio data with the second bio data and authorizing communication when the first bio data matches the second bio data.

Abstract: Broadcast signal c is transmitted from a broadcast transmitter 5 to an artificial satellite 1 for predetermined signal conversion, whereby broadcast signals al to an are transmitted to all of Japan. On-earth stations 6-1 to 6-n are installed for weather forecast data. These on-earth stations receive the broadcast signals al to an, respectively, transmitted from the artificial satellite 1, and transmit receiving state data b1 to bn, respectively, based on receiving level data to the artificial satellite 1. The receiving state signals are changed with variations of their radio wave attenuation according to whether it is cloudy, rainy, snowy, the cloud density, etc. The receiving state data are collectively sent back to a weather forecast center 9. Weather forecast data e obtained by analysis in the weather forecast center 9 is transmitted to the artificial satellite 1, which in turn sends weather forecast data f back to all of Japan.

Abstract: Systems and methods for providing overload protection in a communications system are provided. More particularly, an importance or priority rating of a message received at a communication server is determined. If the communications system is in an overload state, and if the importance rating of the received message is not sufficiently high, overload protection is applied. Overload protection can include denying service to a requested or in process communications system associated with the message.

Abstract: An adaptive file delivery system and method transmits a data file, such as an audio-video file, over a network or collection of networks in segments, each segment transmitted during a different time period. Each time period has a transmission portion to transmit its associated file segment and a wait portion in which no further interaction with the network occurs regarding the transmitted segment. In some implementations, the duration of the transmission portion of each time period is sufficient to reach a steady-state throughput condition, which allows the traffic load status of the network or networks to be determined from rate measurements of file segment transmissions. The duration of the wait portion of each time period is at least long enough to limit the average rate of file segment transmission to adapt to network traffic load variations while causing the entire file to be delivered in a predetermined delivery deadline.

Abstract: An adaptive file delivery system and method transmits a data file, such as an audio-video file, over a network or collection of networks in segments, each segment transmitted during a different time period. Each time period has a transmission portion to transmit its associated file segment and a wait portion in which no further interaction with the network occurs regarding the transmitted segment. In some implementations, the duration of the transmission portion of each time period is sufficient to reach a steady-state throughput condition, which allows the traffic load status of the network or networks to be determined from rate measurements of file segment transmissions. The duration of the wait portion of each time period is at least long enough to limit the average rate of file segment transmission to adapt to network traffic load variations and avoid network congestion. Various techniques for measuring congestion are described.

Abstract: A method for preventing a control packet loop in a network realizing node redundancy or circuit redundancy based on a rapid spanning tree protocol or a multiple spanning tree protocol is disclosed. The method includes the steps of: detecting a loop of a control packet of the rapid spanning tree protocol or the multiple spanning tree protocol; and discarding the control packet by which the loop is detected so as to prevent occurrence of the loop of the control packet.

Abstract: A method includes determining conference data associated with a conference and determining an optimum congestion control technique for a call leg of the conference based on the conference data. The determining the conference data includes obtaining or receiving the conference data from at least one of: a Home Subscriber Service (HSS), a presence server, and a conference object. The conference is a Session Initiated Protocol (SIP) conference.

Abstract: In a method of classifying streaming media data, a media server may be identified by monitoring packets transmitted on a wireless network between a server and a client. A rule to identify the data associated with the media server may be generated in response to identifying the media server. A streaming media data request may be detected from the data associated with the media server. In response to detecting the streaming media data request, data packets sent by the media server may be classified based on the generated rule.

Abstract: Provided is a system and method for controlling server usage in a peer-to-peer (P2P) based streaming service. The system to control server usage in a peer-to-peer based streaming service includes a concurrent connections number providing unit to calculate a number of peer clients concurrently connected to the peer-to-peer based streaming service; a non-transitory memory to store the number of peer clients concurrently connected to the peer-to-peer based streaming service; and a server usage controlling unit to control server usage for the peer-to-peer based streaming service based on a ratio of a variable associated with an influx rate of peer clients to the number of peer clients concurrently connected to the peer-to-peer based streaming service.

Abstract: Systems and methods for network congestion management are provided. More particularly, network congestion management is performed by client devices, on the edge of the network. A client device can execute a client agent that is responsible for determining whether an item of content can be delivered to a network for delivery to a recipient system or device. The client can apply a category assigned to an item of content according to a taxonomy, against a profile, to determine whether the item of content can be sent immediately, or whether the content needs to be queued for sending at a later time.

Abstract: A server is configured to transfer information to a plurality of client devices in accordance with bandwidth-limiting and bandwidth-adjustment techniques. Bandwidth may be reduced based on an amount of data previously transferred to a client device (e.g., within a prior time period). Bandwidth may also be reduced based on variable input parameters such as file size, data type, server load, network response time, and number of transfer requests from a client device within a prior period of time. In some embodiments, bandwidth may be reduced by inserting delays between portions of data being transmitted. A length of a delay period may be determined based on the various factors above (amount of previous data transfer(s), file size, etc.). Bandwidth to a client device may also be adjusted dynamically. In some embodiments, bandwidth may be increased (rather than decreased).

Abstract: A request to send a JIT component to a streaming client is received. A network capability rating of the network over which the JIT component is to be sent to the streaming client is determined, and a client capability rating of the streaming client is determined. A transmission language format in which to send the JIT component to the streaming client is determined based on at least the network capability rating and the client capability rating. The JIT component is obtained in the transmission language format and sent to the streaming client over the network. In some embodiments, a transmission language format is determined for each sub-component of the component based on the network capability rating, the streaming client rating, and a sub-component characteristic rating.

Abstract: Systems and methods are provided whereby latency between a sending device and a receiving device during network communications is reduced by adaptively and dynamically acknowledging the reception of each of a determined number of packets that are transmitted by the sending device to the receiving device over the network. In one aspect, the receiving device adaptively and dynamically acknowledges the reception of each data packet as it is received from the sending device. In another aspect, the receiving device adaptively and dynamically acknowledges the reception of a group of at least two packets as the remaining data packets are received from the sending device.

Abstract: Techniques are described for reducing the amount of data traffic carried on inter-chassis links within a multi-chassis router. A multi-chassis router is described in which the packet forwarding engines (PFEs) of each chassis receive and modify forwarding structures, generated in accordance with various load-balancing protocols, to exhibit a chassis-local link preference. Each of the PFEs may implement a selection bias for forwarding paths that egress from the multi-chassis router at the member chassis that includes the ingress PFE.

Abstract: Each service in a computer network may have a connection rate limit. The number of new connections per time period may be limited by using a series of rules. In a specific embodiment of the present invention, a counter is increased each time a server is selected to handle a connection request. For each service, connections coming in are tracked. Therefore, the source of connection-request packets need not be examined. Only the destination service is important. This saves significant time in the examination of the incoming requests. Each service may have its own set of rules to best handle the new traffic for its particular situation. For server load balancing, a reset may be sent to the source address of the new connection request. For transparent cache switching, the connection request may be forwarded to the Internet.

Abstract: A method and means for self-policing and automatically rate-limiting multiple-user online forums. The preferred embodiment of the invention includes a set of rules that permit users to censure other users. A censured user has one or more “privileges” (which may include access to the online computer system or the effective message rate of a communications connection) taken away or diminished; the privilege is gradually restored if the censured user behaves. The censuring participant and other pertinent participants are notified of the effect of the censuring on the censured user. In another aspect of the invention, the online computer system automatically tracks the rate at which a user sends certain types of messages, and can message rate limit a user who uses too many system resources by sending a large number of messages in rapid succession.

Abstract: A system and method for authorizing test traffic over a network. A request is received to perform a throughput test. A state of the network is determined. The throughput test is authorized in response to the determined state of the network being acceptable for performing the throughput test. The throughput test is terminated or paused in response to the determined state of the network being unacceptable for performing the throughput test.

Abstract: A controller, method and computer medium are provided for controlling communications between a control area network and a data network. The method includes receiving user input at a controller coupled to the control area network from a node coupled to the data network, receiving user input at the controller from a node coupled to the control area network, and instructing an internet appliance coupled to the control area network to perform a command based on at least one of the received user inputs.

Abstract: Each service in a computer network may have a connection rate limit. The number of new connections per time period may be limited by using a series of rules. In a specific embodiment of the present invention, a counter is increased each time a server is selected to handle a connection request. For each service, connections coming in are tracked. Therefore, the source of connection-request packets need not be examined. Only the destination service is important. This saves significant time in the examination of the incoming requests. Each service may have its own set of rules to best handle the new traffic for its particular situation. For server load balancing, a reset may be sent to the source address of the new connection request. For transparent cache switching, the connection request may be forwarded to the Internet.

Abstract: A network comprising a plurality of network devices is configured to implement scheduling for energy efficiency. In one aspect, a set of network devices interconnected in a line within a network is identified, and a common frame size is established. For each of the network devices of the line, active and inactive periods for that network device are scheduled in a corresponding frame having the common frame size, with the frames in the respective network devices of the line being time shifted relative to one another by designated offsets. For each of one or more of the active periods of each of the network devices of the line, received packets are scheduled for processing in that network device.

Abstract: The techniques discussed herein contemplate improved methods and systems for transcoding application content to minimize latency in just-in-time conversion of application formats. In embodiments, a target client device requests application content of a particular format from a content provider. If the content provider does not have a local copy of the requested format, the content is split to multiple segments and a first high-priority segment is identified. This first segment is converted using a dedicated high-performance computing unit and transmitted with minimal latency to the target client device for immediate rendering. Concurrently, remaining segments of the content are converted in multiple lower performance computing units and fed into the target client device. By ensuring that at least a first segment of the application is available for immediate rendering while other segments are converted, the transcoding application minimizes latency delay in rendering of the application in the target device.

Abstract: A technique for providing a first information processing apparatus configured to acquire first identification information as information for identifying the information processing apparatus, searching for a second information processing apparatus capable of wireless communication, acquiring a second identification information as information for identifying the second information processing apparatus that was found, comparing the first identification information and the second identification information, changing the first identification information when the first identification information and the second identification information are identical, and notifying when the first identification information is changed.

Abstract: A method, apparatus, and computer program product for discovering network paths between network devices in a distance-vector network are provided. The method may include providing a node model of network devices in a distance-vector network. The node model may include a network address corresponding to a network device. The network address may be used to query the network device for routing information. This routing information may be used to identify another network address corresponding to a second network device, and to identify a path from the first network device to the second network device. These devices and the path therebetween may be mapped in the node model. Finally, the second network device may be queried for subsequent routing information to identify and map subsequent devices and paths.

Abstract: A method for processing packets in a network device includes receiving a packet at the network device, identifying a flow with which the packet is associated, and, based at least in part on the identified flow, selectively causing the packet, or a packet descriptor associated with the packet, to bypass at least a first packet processing unit of the network device.

Abstract: In a method of controlling transmission of data units, a first fragment of a data unit is received, and it is determined whether other fragments of the data unit have been received. The first fragment of the data unit is transmitted only if the other fragments of the data unit have been received.

Abstract: A network architecture in accordance with the present invention includes a communication network that supports one or more network-based Virtual Private Networks (VPNs). The communication network includes a plurality of boundary routers that are connected by access links to CPE edge routers belonging to the one or more VPNs. To prevent traffic from outside a customer's VPN (e.g., traffic from other VPNs or the Internet at large) from degrading the QoS provided to traffic from within the customer's VPN, the present invention gives precedence to intra-VPN traffic over extra-VPN traffic on each customer's access link through access link prioritization or access link capacity allocation, such that extra-VPN traffic cannot interfere with inter-VPN traffic.

Abstract: A method for relieving network node congestion includes determining an average of an aggregated load on a network node that routes network traffic, projecting a demand on the network node based on extrapolating the average of the aggregated load to a future period, determining a current level of congestion on the network node, and projecting a future level of congestion on the network node based on the projected demand and the current level of congestion. An available capacity of other network nodes in a portion of the communication network that includes the network node is determined, as well as whether the projected future level of congestion on the network node can be relieved using the determined available capacity of the other network nodes.