Abstract: In a server-client type system, when a large volume of data to be transmitted whose volume is not less than a predetermined value is generated, a server notifies to a terminal device as a transmission destination to the effect that the large volume of data is to be transmitted by the D-channel packet exchange, and after receiving a data transmission timing signal from the terminal device, starts transmission of the large volume of data using a B-channel to cause the terminal device to download the large volume of data, and the terminal device monitors a state of a free B-channel line in all ISDN communication devices on the client side connected to the same digital service unit upon receiving the notification of transmission of the large volume of data from the server and notifies the server of the data transmission timing signal by the D-channel packet exchange at timing not preventing use of a B-channel line.

Abstract: A method and system that includes an IP flow monitor in conjunction with an IP route comparator and an IP route injector to minimize the size of routing tables that need to be stored in a router of an IP network. The IP flow monitor monitors information, such as destination information that identifies and differentiates one IP flow from another. The monitored information is passed to the IP route comparator, which determines if it has stored preferred path information for the IP flow identified by the monitored information. If so, the preferred path information is passed to the IP route injector, which in turn passes it to the router in the edge network. The router updates it routing table in accordance with the new routing information. Other described embodiments include an embodiment having a cache and embodiments in which one or both of the IP route comparator and the IP route injector are local to the network (instead of being local).

Abstract: Multiple subroutines in one program, or a series of programs provide centralized network administration. The administrative program monitors communications software for consistency at both server and client locations, monitors logs, objects and files at server and/or client locations and assures that investigative measures be undertaken, either by providing automatic updates or by flagging monitored features for administrative follow-up.

Abstract: A system and method for scheduling transfers of data through a network, the system comprising a transfer module at each node in the network, the transfer module being configured to schedule data transfers according to available resources at each node. In one embodiment, the transfer module includes a scheduling module, a routing module, and an execution module. The scheduling module at each node evaluates a single hop request in view of objectives, such as a deadline, and the available resources at that node, for example transmit bandwidth, receive bandwidth, and storage space, all of which may change as a function of time.

Abstract: A cross-bar switch includes a set of input ports and a set of sink ports in communication with the input ports. The input ports receive packets, which are snooped by the sink ports. The cross-bar switch also includes a set of port address tables. Each port address table is adapted to store data identifying a plurality of destinations supported by a sink port. For example, a first port address table is adapted to identify a plurality of destinations supported by a first sink port in the set of sink ports. When determining whether to accept a packet, a sink port considers whether the packet's destination is identified in the sink port's port address table. By supporting multiple destinations, a port address table implicitly facilitates a sink port's multicast operation.

Abstract: Application of the technique of statistical line grouping to banyan-type networks to practically alleviate the problems of output contention, traffic fluctuation, burstiness, and so forth without incurring additional preprocessing and buffering on the input traffic by introducing alternate-routing ingredient to the unique-routing banyan-type network, but does not complicate the switching control too much through alternate routing. The concentrator composed of interconnected routing cells is employed to fill in each of the dilated nodes of the banyan-type network to give a hybrid network. An extremely simple self-routing control mechanism over the hybrid network which is the natural melting of the self-routing control inside the concentrators and the self-routing control over the banyan-type network is presented.

Abstract: A distributed network access system in accordance with the present invention includes at least an external processor and a programmable access device. The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control on the message.

Abstract: Communication occurs between a source and a destination over plural communications paths by first identifying content to be sent to a destination via a communications system. After discovering that plural communications paths connecting directly to the destination are available, the content is divided into plural different portions and is transmitted to the destination such that each of the plural different portions is routed via a different one of the plural communications paths.

Abstract: A method for performing end-to-end “tree-based ordered multicasting” (TOM) which ensures collective integrity and consistency of distributed operations, and which is applicable to distributed multiparty collaboration and other multipoint applications. The TOM protocol performs cascaded total ordering of messages among on-tree hosts en route from senders to receivers, and does not require the building of a separate propagation graph to compute ordering information. TOM elects sequencer nodes dynamically based on address extensions of the multicast tree. Message ordering is performed by multicasting a message from each source node to receivers, unicasting a control message from a source node across a primary node to an ordering node for the designated multicast group or transmission in the tree, determining a binding sequence number for the message and a multicast to the receiver group, and delivering messages at end hosts according to the agreed-upon sequence numbers.

Abstract: A multimaster bus system includes a bus for connecting to devices connected thereto and a bus controller that controls the bus and/or the bus grant. The multimaster bus system includes providing the bus with data and/or signals paths. The bus controller can alter statically and/or dynamically the course of these paths. Such a multimaster bus system enables several connections to be simultaneously established in the easiest possible way and between the devices connected thereto.

Abstract: A multiprocessor computer system to selectively transmit address transactions using a broadcast mode or a point-to-point mode. Either a directory-based coherency protocol or a broadcast snooping coherency protocol is implemented to maintain coherency. A node is formed by a group of clients which share a common address and data network. The address network determines whether a transaction is conveyed in broadcast mode or point-to-point mode. The address network includes a table with entries which indicate transmission modes corresponding to different regions of the address space within the node. Upon receiving a coherence request transaction, the address network may access the table to determine the transmission mode which corresponds to the received transaction. Network congestion may be monitored and transmission modes adjusted accordingly. When network utilization is high, the number of transactions which are broadcast may be reduced.

Abstract: A method and device thereof for managing messages received at a bridging device. A bridging device receives a first message comprising a first contact information and a first distance vector representing a first number of hops the first message has traversed. The first distance vector is compared to a stored second distance vector corresponding to a stored second contact information for the remote electronic device, wherein the second contact information and second distance vector are provided by a second message. The second distance vector represents a second number of hops the second message has traversed. Provided the first number of hops is greater than the second number of hops, the first message is discarded. Alternatively, provided the first number of hops is not greater than the second number of hops, the second contact information and second distance vector are discarded and the first contact information and first distance vector are stored on a computer- readable memory of the bridging device.

Abstract: The present invention realizes a communication system and a method for a communication system including a source node, one or more destination nodes and a controller. The controller is adapted to notify the source node and the one or more destination nodes of first information representing the logical connection and second information that is unique to the controller, and the source node is adapted to divide data to be transmitted to the one or more destination nodes into a plurality of segment data, and transfer each of the segment data with the first and second information obtained from by the controller to the one or more destination nodes. In addition, each of the one or more destination nodes includes a receiving buffer, and is adapted to store each segment data in the receiving buffer.

Abstract: A distributed communication system is most efficient if subscriber data is located as close as possible to subscribers when they access the system. However, it is common for subscribers of mobile communication systems to relocate for long periods of time. Relocation of subscribers is automatically detected by generating an activity log file of location data and identifiers, where each identifier is associated with either a communication device or a person using the communication system. Pattern analysis is automatically performed based on the location data and the identifiers to determine whether private data should be relocated from a first location to a second location within the communication system, when service can be provided more efficiently from the second location.

Abstract: The present invention provides a system and apparatus for efficient and reliable, control and distribution of data files in large-scale distributed networks. The members of a group of servers in a multicast network elect a group leader whenever a new group leader is required, as when the prior group leader become unavailable, as detected by absence of a periodic heartbeat message published by the leader. The election is carried out by a system of voting by each candidate whereby each candidate has a priority calculated from its configuration, and the server with the highest priority is configured to claim the leadership faster than the other candidates. As part of the claim, each candidate multicasts its priority. Each candidate that receives a multicast claim for leadership from another candidate compares its own priority against the claimant and only votes for itself if its own priority is higher.

Abstract: A general purpose, software-controlled central processor (CP) can be augmented by a set of task specific, specialized peripheral processors (PPs). The central processor accomplishes its functions with the support of the PPs. Peripheral processors may include but are not limited to a packet parser, a packet deconstructor, a search engine, and a packet editor. At each step in the use of this network processor system, the central processor has an opportunity to intervene and modify the handling of the packet based on its interpretation of PP results. The programmable nature of the CP and the PPs provides the system with flexibility and adaptability.

Abstract: This document describes a protocol for reliably synchronizing states of nodes in a distributed environment through use of a Scalable Atomic Multicast (SAM) Service that ensures both atomicity and total order among messages sent to a multicast group. In addition to possessing good scalability property, this fault-tolerant protocol does not require explicit knowledge of multicast group membership, allows for non-disturbing state synchronization, and supports asynchronous non-blocking communications. According to one aspect of this invention, a dedicated sequencer is responsible solely for assigning sequence numbers to the multicast messages. The sequencer does not multicast the messages. Another aspect of the invention is the use of receiver-driven negative acknowledgments. According to third aspect, the invention supports message consolidation and garbage collection.

Abstract: A routing table circuit for a router has one or more input ports and output ports for message communication. In the routing table circuit, one or more routing table memories store a plurality of routing table arrays. The routing table arrays are arranged hierarchically in levels, and each routing table array is associated with a predetermined subset of prefixes. Each routing table array has entries. The entries include a block default route pointer field to store a block default route pointer, if any, and a routing field. The route engine may access any level of table array by using a next level route pointer stored in the routing field. Using the block default route and the routing field, the present invention further reduces the number of memory accesses and the update cost for route insertion and deletion by identifying and skipping elements that do not require route updating.

Abstract: The storage system is configured to expand from small to large configurations at a reasonable cost with performance decided approximately to a target system scale. The storage system has a plurality of protocol transformation units, each used for transforming a protocol to be exchanged with the server or disk drives, and a plurality of data caching control units, each having a cache memory unit for storing data and a function for controlling the cache memory unit. The plurality of data cashing control units are divided into a plurality of control clusters while the cache memory unit is controlled only in its corresponding control cluster independently and the system management unit is connected to an interconnection, such that the system management unit manages the plurality of protocol transformation units and the plurality of control clusters are managed integrally as one system.

Abstract: A method and apparatus is provided for facilitating the exchange of user profile information between an information provider and an application system. The invention allows a user to create and edit user profile information stored by an information provider. The information provider stores the information and provides a mechanism for providing the user profile information, or portions thereof, to various application systems. When a user initiates a registration or similar process with an application system, the present invention facilitates the exchange of information between the application system and the information provider to streamline the registration process.

Abstract: A distributed network access system in accordance with the present invention includes at least an external processor and a programmable access device. The programmable access device has a message interface coupled to the external processor and first and second network interfaces through which packets are communicated with a network. The programmable access device includes a packet header filter and a forwarding table that is utilized to route packets communicated between the first and second network interfaces. In response to receipt of a series of packets, the packet header filter in the programmable access device identifies messages in the series of messages upon which policy-based services are to be implemented and passes identified messages via the message interface to the external processor for processing. In response to receipt of a message, the external processor invokes service control on the message and may also invoke policy control on the message.

Abstract: A method and system for finding a longest prefix match for a key in a computer network is disclosed. The method and system include providing a main engine and providing an auxiliary engine. The main engine is for storing a first plurality of addresses and for searching the first plurality of addresses for the longest prefix match for the key. None of the first plurality of addresses is a prefix for another address of the first plurality of addresses. The auxiliary engine is for storing and searching a second plurality of addresses. A first address of the second plurality of addresses is capable of including the prefix for a second address of the first plurality of addresses or for a third address for the second plurality of addresses. None of the first plurality of addresses is the prefix for any of the second plurality of addresses. Each of the second plurality of addresses is distinct from each of the first plurality of addresses.

Abstract: Process for control and management of an Intranet network by means of a Web browser, comprising the steps of: discovering the devices of an Intranet network, including the different subnets; extracting data representative of those devices for the purpose of compiling a file which is transmitted through a HTTP protocol to a Web server associated to a database; deploying a Internet Control Agent in the devices contained within said Intranet, said agent being controllable from the said Web server by a set of commands being exchanged with the HTTP or HTTPS protocol; regularly transmitting set of instructions to said agents for the purpose of controlling tasks to be performed within the network. Preferably, the set of instructions is used for controlling a remote installation of a software package within the devices in accordance with selections made by the IT administrator.

Abstract: Embodiments of a routing system are disclosed, including a method for routing communications in a storage system. The storage system may include multiple nodes interconnected by an interconnection fabric that provides multiple independent paths between a source node and a destination node. Some nodes may be connected to one or more disk drives. The method may include receiving a communication to be sent from a source node to a destination node, selecting a communication path from the multiple independent paths, and sending the communication on the selected communication path. This process may be repeated so that multiple communications may be sent. Each communication path may be selected according to a preference assigned to it, so that a more preferred path is selected more often than a less preferred path. The preferences may be updated to reflect changed conditions in the interconnection fabric.

Abstract: A packet communications apparatus of the present invention essentially comprises a plurality of network interfaces (NIFs), a learned address table, a packet forwarding unit (PFU) and a processor for directive packets to change state (PDPCS). The learned address table contains information for identifying a NIF through which to send a packet. The PFU selects a port through which to forward a packet by referring to the learned address table, according to the state of the NIFs, and forwards or discards a packet received from a user terminal. The PDPCS receives a packet including a directive to change the state of a specific NIF to one of the connected state, disconnected state and stateless. The PDPCS changes the state of the specific NIF to one of the connected state, disconnected state and stateless, according to the directive in the packet.

Abstract: A proximity-oriented redirection system for service-to-client attachment in a virtual overlay distribution network. The virtual overlay distribution network includes addressable routers for routing packet traffic, wherein a packet of data is routed from a source node to a destination node based on address fields of the packet. The invention includes a redirector coupled to at least one of the addressable routers and includes: logic for accepting a service request from a client; logic for determining a selected server for handling the service request, the selected server being one of a plurality of servers that can handle the service request; and logic for generating a redirection message directed to the client for redirecting the service request to the selected server.

Abstract: The present invention provides a method and apparatus for facilitating communication with non-fault tolerant network nodes in a fault-tolerant network environment. In various embodiments, a network address or network location of any network nodes present on a network that are not fault-tolerant is determined and stored, and data intended for the detected non-fault-tolerant network nodes is routed only over that network to which the non-fault-tolerant network node is connected. In further embodiments, the fault-tolerant network comprises a primary and redundant network with fault tolerant network nodes that are attached to each network; a non-fault-tolerant network node that is attached to either the primary or redundant network is then operable to communicate with any fault-tolerant network node via data sent over only the network to which the non-fault-tolerant network node is connected.

Abstract: A method and apparatus for determining routing feasibility of a plurality of nets. Each net has an associated set of one or more routing solutions, wherein each solution specifies one or more routing resources consumed by the net. A liveness Boolean function is generated having variables that represent respective net/solution pairs. If there exists a set of values for the variables such that at least one of the variables for each net is logically true, then the liveness function is true. An exclusivity function is generated using the variables that represent the net/solution pairs. If there exists at least one set of values for the variables such that no resource is used is by more than a predetermined number of nets, then the exclusivity function is true. The nets are routable using the provided solutions if there is one set of values for the variables such that both the liveness and exclusivity functions are true.

Abstract: Administrative requests of a distributed network application executing in a clustered computing environment comprising a plurality of nodes, wherein the application requires centralized administration via a master node, are routed from the nodes at which the requests originate to the node that is acting as the master for the distributed network application.

Abstract: Any of the processors CPU1 to CPUn turns the miss hit detecting signal line 5 to a low level upon detecting occurrence of a miss hit. In response, the mode switching controller 2 is notified of the occurrence of a miss hit and switches each of the processors CPU1 to CPUn to the synchronous operation mode. Also, each command from each of the processors CPU1 to CPUn is appended with a tag. When each of the processors CPU1 to CPUn feeds the synchronization detecting signal line 6 with the tags which are identical as designated as a synchronous point, the operation of the processors can be switched to the non-synchronous operation mode by the mode switching controller 2.

Abstract: A card, particularly a digital line card is provided for use with a chassis having a slot for receiving the digital line card. The chassis has an Ethernet bus for receiving packets from the line card and has a power supply and power strip for supplying power to the line card. The line card includes a public switched telephone network (PSTN) digital line input/output interface for sending digital signals over the PSTN and for receiving digital signals from PSTN. A line card control processor is connected to the digital line input/output interface. An Ethernet input/output is provided for sending packets over a local network corresponding to signals received from the telephone line and for receiving packets from the local network and forwarding received signals to the digital line input/output interface.

Abstract: A method, and associated computer system, for redistributing software packages in a distributed computer network after a failed distribution attempt is made in a distributed computer network by a master network device. The method includes determining which intermediate distribution devices or servers were affected by the failed distribution. Then for each of these devices, identifying a distribution job that failed and retrieving from the particular distribution device stored distribution parameters, such as distribution control commands, a set of distributed packages, and a distribution list, used in the failed distribution. The method continues with building new distribution commands for the failed distribution job from the retrieved distribution parameters and then performing a redistribution of the set of software packages utilizing the new distribution commands.

Abstract: Methods and apparatus are disclosed for communication between appliances. In one embodiment, the method comprises receiving at an appliance communications manager that stands apart from source and destination appliances, a connection request from a source appliance, receiving at the appliance communications manager destination appliance communication information for a destination appliance, and receiving at the appliance communications manager a communication message from the source appliance. The method additionally comprises storing the communication message in a data memory of the appliance communications manager, establishing, via the appliance communications manager, a communication link with the destination appliance, and transferring the stored communication message to the destination appliance via the communication link.

Abstract: In order to enable one monitor device to be used as the monitor device for a plurality of computers, a display controller displays a frame represented by display data entered from a second computer on a liquid crystal display in a window within a frame represented by display data entered from a first computer, and the position and size of the window are altered by the display controller on the basis of communication data for display control extracted by a communication controller and entered from the first computer or the second computer.

Abstract: The present invention relates to an apparatus and method enabling transmission and reception of data between wireless network devices in an ad hoc network-based piconet without a piconet coordinator (PNC). The apparatus for transmitting and receiving data between wireless devices according to the present invention includes a beacon generator module for constructing a virtual piconet by generating a beacon so that a device lacking a PNC function can perform a virtual PNC function; and a virtual PNC termination module for shutting down the virtual piconet when association of a PNC-capable device with the virtual piconet is present in the virtual piconet.

Abstract: The present invention relates to logo domain hosting method and apparatus connecting directly to a domain address by using logo. The logo domain hosting method comprises the steps of receiving a domain request signal from a domain requester, wherein the domain request signal comprises a logo, registering the logo as a logo domain, transmitting a logo domain register confirmation signal corresponding to the registered logo domain, transmitting a classified code corresponding to the logo selected by an internet user to a domain name server, extracting an IP address corresponding to the classified code and providing the IP address with the internet user.

Abstract: A method and apparatus for routing a transaction. Initially, a resource is identified which is capable of servicing a transaction based upon resource data indicative of the capabilities of resources associated with a transactional processing system and a transaction request indicative of a request associated with the transaction. Upon identifying the resource capable of servicing the transaction, the transaction is supplied to the identified resource.

Abstract: A network control apparatus for controlling devices in a predetermined area of a communication network includes a request-receiving unit for receiving a first route-setting request, a database for storing device information and topology information, a request-range-judging unit for forming a judgment as to whether or not the first route-setting request is relevant to any of the controlled devices, and a request-transmitting unit for transmitting the first route-setting request to an upper-level network control apparatus in the case of the request-range-judging unit's judgment outcome indicating that the first route-setting request is irrelevant to any of the controlled devices.

Abstract: The invention provides a method of operating a communication network. The network comprises numerous stations, each of which can transmit and receive data in order to transmit messages from originating stations to destination stations opportunistically via intermediate stations. Each station selects one of a number of possible calling channels to transmit probe signals to other stations. The probe signals contain data identifying the station in question and include details of its connectivity to other stations. Other stations receiving the probe signals respond directly or indirectly, thereby indicating both to the probing station and other stations their availability as destination or intermediate stations. The probing station evaluates the direct or indirect responses to identify other stations with which it can communicate optimally.

Abstract: A system, method, and computer program product are disclosed for providing a four-tier CORBA architecture. A three-tier CORBA network is provided. The three-tier CORBA network includes a first CORBA ORB coupled to a second CORBA ORB, and the second CORBA ORB coupled to a third CORBA ORB. The first CORBA ORB occupies a first level of a network hierarchy. The second CORBA ORB occupies a second level of the network hierarchy. And, the third CORBA ORB occupies a third level of the network hierarchy. A global CORBA ORB is coupled to the three-tier CORBA network, wherein the global CORBA ORB occupies a top level of the network hierarchy.

Abstract: A policy enables a subscriber to connect to multiple service providers simultaneously using a network address translation technique that translates an address identifying the subscriber and associated with a first service provider into an address identifying the subscriber and associated with a second service provider for a particular application. The subscriber registers with a single home service provider and connects to that single home service provider for a packet session. To connect to additional service providers that provide additional applications during the packet session, the NAT rule is downloaded from the home service provider to a router at the border between the subscriber and the access network of the home service provider. Each IP packet received at the router to or from the subscriber is filtered to determine the subscriber's address and an application identifier.

Abstract: Methods and apparatus are provided for selecting a server that can provider content to a client in an optimal manner. A server selection system is coupled to a network node that can identify servers that can provide client reqeusted content. Performance metrics of the servers and their associated priorities are obtained. Servers with metrics that are worse than all the metrics of any other server are optionally eliminated from consideration for best server. Priorities for the metrics are obtained. The metric with the highest priority is applied to analyze the group of servers. The server with the best value for the metric and all servers with metric values falling within a significance window are retained. All others are eliminated from consideration. The other metrics are applied until no metrics remain or only one server remains. If no metrics remain, a best server is identified from the remaining group.

Abstract: A method is for controlling an exchange in a data transmission system, in which information demand data from information demanders and information supply data representing information which can be supplied by various information suppliers are compared in order to ascertain corresponding information demand data and information supply data. After a successful preliminary comparison for particular minimum matches, the information demand data in question are first transmitted to a data comparison device associated with the information supplier in question for the purpose of a more detailed comparison with the information represented by the information supply data. Upon receipt of positive comparison result data from the data comparison device, indicating that the information which can be supplied matches the information demand data, the exchange then transmits corresponding search result data to a terminal belonging to the information demander.

Abstract: The present invention provides an improved method and system for controlling packet flow through a protocol stack. The system comprises the layer manager which interfaces with each stack layer. The layer manager handles the packet flow to the stack layers. For a new packet path to be supported, only the Layer Manager needs to be modified, not the stack layers. This makes the implementation of the layers in the protocol stack easier. In an alternative embodiment, the layer manager comprises a plurality of protocol descriptor lists for supported services and uses these lists to route a packet to the appropriate stack layer. With this alternative embodiment, new stack layers may be inserted into the protocol stack without the need to modify the existing stack layers.

Abstract: A system and method of handling and routing a desired command between a sender with a coupled invoker and a recipient With a coupled receiver that uses and implements a next hop technique. A router object is provided with a hierarchical tree of routers mapped by a router destination table. A destination address of the desired command is examined, moved, and routed to a next hop location based on the router destination table and the destination address. It is determined whether the desired command has reached the final destination, and the command is delivered from the invoker to the receiver when the final desired destination address has been reached.

Abstract: The Internet Protocol mobility supporting method deals with supporting of roaming of a Mobile Node in a Mobile Internet Protocol Network from a home network towards a Visited Network. The home network comprises a home agent. The Mobile Internet Protocol Network excluding the visited network comprises a Foreign Agent. The method of the present invention comprises the step of forwarding a destination address towards the Home Agent by the Mobile Node at roaming of the Mobile Node from the home network to the visited network. Additionally, the Foreign Agent assigning entity, at request of the Mobile node assigns the Foreign Agent to the Mobile Node. Subsequently, the Home Agent establishes a path between the Home Agent and the Foreign Agent. Finally, a path between the Foreign Agent and the Mobile Node is established by the Foreign Agent based on the destination address.

Abstract: An Internet-based, secure, distributed task-brokering and parallel-processing method/system/article-of-manufacture advantageously leverages under-utilized network-based computing resources for bandwidth-intensive and/or computationally-intensive problems, and provides significant cost advantages over traditional coarse-grained parallel computing techniques.

Abstract: A system and associated method and computer program product are provided for analyzing a network. Included is a plurality of agents coupled to a plurality of computers interconnected via a network. Each agent is adapted to collect information relating to at least one of the computers. Further provided is a plurality of host controllers coupled to the agents for collecting the information from the agents. Still yet, a plurality of zone controllers is coupled to the host controllers for collecting the information from the host controllers.

Abstract: The present invention provides a system and apparatus for efficient and reliable, control and distribution of data files or portions of files, applications, or other data objects in large-scale distributed networks. A unique content-management front-end provides efficient controls for triggering distribution of digitized data content to selected groups of a large number of remote computer servers. Network distribution messages are dispatched according to a sorted list of servers, based on factors such as nearness, server processor speed, reliability, and CPU Usage. For large numbers of servers, a store-and-forward approach becomes much more efficient. A first selected server receives the message from a content control manager (CCM). The first server requests instructions for the next server listed on an ordered list in the CCM and forwards a copy of that message to the next identified server. Each server reports its completion and requests further instructions from the CCM.

Abstract: A system and method are provided for monitoring traffic in an enterprise network. Similar hosts may be grouped using flow information. Network policy may then be created at the group level based on the signatures of the hosts and groups of hosts in the enterprise. Hosts may be arranged in hierarchical clusters. Some of these clusters may be selected as groups based on a desired degree of similarity between hosts in a group. The similarity between hosts may be determined based on similarity of network behavior of the hosts.