公开(公告)号：US20190007327A1

公开(公告)日：2019-01-03

申请号：US15639914

申请日：2017-06-30

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Han Hee Song ,  Antonio Nucci ,  Marco Mellia ,  Martino Trevisan ,  Idilio Drago

IPC: H04L12/851 ,  H04L29/12

Abstract: In an example embodiment, a Software Defined Networking (SDN) application identifies a domain based on a destination address of a packet that is associated with a primary service. The domain corresponds to the primary service, and the primary service is configured to trigger one or more support flows from one or more ancillary services. The SDN application identifies the one or more support flows based on the domain, and generates one or more rules for distribution to one or more network elements that handle packets of the one or more support flows from the one or more ancillary services.

公开(公告)号：US09602331B2

公开(公告)日：2017-03-21

申请号：US13665662

申请日：2012-10-31

Applicant: Cisco Technology, Inc.

Inventor： Marco Di Benedetto ,  Mario Baldi ,  Vijay Chander ,  Alessandro Salvatori

IPC: G06F15/16 ,  H04L29/10 ,  H04L29/06

CPC classification number: H04L29/10 ,  H04L69/12 ,  H04L69/22

Abstract: Providing a shared interface among a plurality of compute units is disclosed. A plurality of compute units is determined and a shared interface for the plurality of compute units is provided, wherein incoming traffic is received by any of the plurality of compute units. Also, the packet is received at the shared interface for a plurality of compute units. The packet is encapsulated using a first header, wherein the first header specifies one of the plurality of compute units, and wherein the one of the plurality of compute units is selected independent of an interface address associated with the shared interface.

公开(公告)号：US11005754B1

公开(公告)日：2021-05-11

申请号：US16229745

申请日：2018-12-21

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi

IPC: H04L12/771 ,  H04L29/06

Abstract: In one example embodiment, a network management device obtains a definition of a first network packet header, an identification of a condition indicating that a network packet has the first network packet header, and a definition of processing action information that includes a key and a processing action to be taken on the network packet when metadata in the network packet matches the key. The network management device merges custom network packet processing instructions written in a data plane programming language with pre-existing network packet processing instructions written in the data plane programming language to produce merged network packet processing instructions written in the data plane programming language. The custom network packet processing instructions define the first network packet header, identify the condition, and define the processing action information. The network management device provides the merged network packet processing instructions for execution by a network node.

公开(公告)号：US10785164B2

公开(公告)日：2020-09-22

申请号：US16058256

申请日：2018-08-08

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Murty Kotha

IPC: H04L12/911 ,  H04L12/823 ,  H04L12/721

Abstract: In one example, a collection network node comprising a plurality of ingress ports obtains, at a first one of the plurality of ingress ports, a first copy of a packet of a packet flow comprising a plurality of packets. The collection network node determines whether the collection network node had previously obtained a copy of any of the plurality of packets of the packet flow. When it is determined that the collection network node had previously obtained a copy, the collection network node determines whether the collection network node had previously obtained a copy at the first one of the plurality of ingress ports or at a different one of the plurality of ingress ports. When it is determined that the collection network node had previously obtained a copy at a different one of the plurality of ingress ports, the collection network node refrains from forwarding the first copy.

公开(公告)号：US20190372906A1

公开(公告)日：2019-12-05

申请号：US16058256

申请日：2018-08-08

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Murty Kotha

IPC: H04L12/911 ,  H04L12/721 ,  H04L12/823

Abstract: In one example, a collection network node comprising a plurality of ingress ports obtains, at a first one of the plurality of ingress ports, a first copy of a packet of a packet flow comprising a plurality of packets. The collection network node determines whether the collection network node had previously obtained a copy of any of the plurality of packets of the packet flow. When it is determined that the collection network node had previously obtained a copy, the collection network node determines whether the collection network node had previously obtained a copy at the first one of the plurality of ingress ports or at a different one of the plurality of ingress ports. When it is determined that the collection network node had previously obtained a copy at a different one of the plurality of ingress ports, the collection network node refrains from forwarding the first copy.

公开(公告)号：US10250465B2

公开(公告)日：2019-04-02

申请号：US15248075

申请日：2016-08-26

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Han Hee Song

IPC: H04L12/24 ,  H04L12/26 ,  H04L12/721 ,  H04L29/08

Abstract: Presented herein are network traffic/flow monitoring techniques for identifying a primary/core domain that is representative of the service being accessed by a series/set of network flows, and grouping networking traffic flows that result from the user's accessing of the core domain. In one example, a plurality of core domains each corresponding to a primary web service configured to be directly accessed by network flows via one or more networks is identified. For each of the plurality of core domains, one or more models of traffic activity resulting from access to the corresponding primary web service by a network flow is generated. Based on the models of traffic activity, real-time network traffic flows are associated to a selected one of the core domains.

公开(公告)号：US20190079869A1

公开(公告)日：2019-03-14

申请号：US15700453

申请日：2017-09-11

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Amedeo Sapio ,  Fulvio Giovanni Ottavio Risso ,  Narendra Anand ,  Antonio Nucci

IPC: G06F12/0817 ,  H04L29/08

Abstract: In one embodiment, a device in a network receives one or more data units. The device calculates a hash value based on the one or more data units and using a hash function. Ranges of hash values generated by the hash function are assigned to different devices along the path such that any given hash value generated by the hash function is assigned to a predefined number of the devices along the path. The device determines whether the calculated hash value is within the range of hash values assigned to the device. The device stores data derived from the one or more data units, when the device determines that the calculated hash value is within the range of hash values assigned to to the device.

公开(公告)号：US11637787B2

公开(公告)日：2023-04-25

申请号：US16922399

申请日：2020-07-07

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Murty Kotha

IPC: H04L47/70 ,  H04L47/32 ,  H04L45/00

Abstract: In one example, a collection network node comprising a plurality of ingress ports obtains, at a first one of the plurality of ingress ports, a first copy of a packet of a packet flow comprising a plurality of packets. The collection network node determines whether the collection network node had previously obtained a copy of any of the plurality of packets of the packet flow. When it is determined that the collection network node had previously obtained a copy, the collection network node determines whether the collection network node had previously obtained a copy at the first one of the plurality of ingress ports or at a different one of the plurality of ingress ports. When it is determined that the collection network node had previously obtained a copy at a different one of the plurality of ingress ports, the collection network node refrains from forwarding the first copy.

公开(公告)号：US20200336436A1

公开(公告)日：2020-10-22

申请号：US16922399

申请日：2020-07-07

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Murty Kotha

IPC: H04L12/911 ,  H04L12/823 ,  H04L12/721

Abstract: In one example, a collection network node comprising a plurality of ingress ports obtains, at a first one of the plurality of ingress ports, a first copy of a packet of a packet flow comprising a plurality of packets. The collection network node determines whether the collection network node had previously obtained a copy of any of the plurality of packets of the packet flow. When it is determined that the collection network node had previously obtained a copy, the collection network node determines whether the collection network node had previously obtained a copy at the first one of the plurality of ingress ports or at a different one of the plurality of ingress ports. When it is determined that the collection network node had previously obtained a copy at a different one of the plurality of ingress ports, the collection network node refrains from forwarding the first copy.

公开(公告)号：US20180062950A1

公开(公告)日：2018-03-01

申请号：US15248075

申请日：2016-08-26

Applicant: Cisco Technology, Inc.

Inventor： Mario Baldi ,  Han Hee Song

IPC: H04L12/26 ,  H04L12/721

CPC classification number: H04L43/026 ,  H04L41/142 ,  H04L41/16 ,  H04L43/12 ,  H04L45/38 ,  H04L67/02 ,  H04L67/10

Abstract: Presented herein are network traffic/flow monitoring techniques for identifying a primary/core domain that is representative of the service being accessed by a series/set of network flows, and grouping networking traffic flows that result from the user's accessing of the core domain. In one example, a plurality of core domains each corresponding to a primary web service configured to be directly accessed by network flows via one or more networks is identified. For each of the plurality of core domains, one or more models of traffic activity resulting from access to the corresponding primary web service by a network flow is generated. Based on the models of traffic activity, real-time network traffic flows are associated to a selected one of the core domains.