DOMAIN NAME SYSTEM (DNS) BASED ANOMALY DETECTION
    243.
    发明申请
    DOMAIN NAME SYSTEM (DNS) BASED ANOMALY DETECTION 审中-公开
    域名系统(DNS)基于异常检测

    公开(公告)号:US20160359887A1

    公开(公告)日:2016-12-08

    申请号:US15097236

    申请日:2016-04-12

    CPC classification number: H04L63/1425 H04L61/1511 H04L61/2514

    Abstract: In one embodiment, a method includes receiving at an analytics module operating at a network device, network traffic data collected from a plurality of sensors distributed throughout a network and installed in network components to obtain the network traffic data, identifying at the analytics module, Domain Name System (DNS) exchanges within the network, associating at the analytics module, the DNS exchanges with process, user, and host information, and identifying at the analytics module, anomalies in the DNS exchanges. An apparatus and logic are also disclosed herein.

    Abstract translation: 在一个实施例中,一种方法包括:在分布在网络设备上的分析模块接收从分布在整个网络上的多个传感器收集并安装在网络组件中的网络流量数据,以获得网络流量数据,在分析模块识别域 在网络内的名称系统(DNS)交换,在分析模块关联,DNS与进程,用户和主机信息交换,以及在分析模块识别DNS交换中的异常。 本文还公开了一种装置和逻辑。

    SERVER-CLIENT DETERMINATION
    244.
    发明申请
    SERVER-CLIENT DETERMINATION 审中-公开
    服务器端客户决定

    公开(公告)号:US20160359686A1

    公开(公告)日:2016-12-08

    申请号:US15140395

    申请日:2016-04-27

    Abstract: Systems, methods, and computer-readable media are provided for determining whether a node in a network is a server or a client. In some examples, a system can collect, from one or more sensors that monitor at least part of data traffic being transmitted via a pair of nodes in a network, information of the data traffic. The system can analyze attributes of the data traffic such as timing, port magnitude, degree of communication, historical data, etc. Based on analysis results and a predetermined rule associated with the attributes, the system can determine which node of the pair of nodes is a client and which node is a server.

    Abstract translation: 系统,方法和计算机可读介质被提供用于确定网络中的节点是服务器还是客户端。 在一些示例中,系统可以从监视经由网络中的一对节点传输的数据流量的至少一部分的一个或多个传感器收集数据流量的信息。 系统可以分析数据流量的属性,如定时,端口大小,通信程度,历史数据等。基于分析结果和与属性相关联的预定规则,系统可以确定该对节点的哪个节点是 客户端和哪个节点是服务器。

    Miscabling detection protocol
    246.
    发明授权
    Miscabling detection protocol 有权
    兼容检测协议

    公开(公告)号:US09444634B2

    公开(公告)日:2016-09-13

    申请号:US14448733

    申请日:2014-07-31

    Abstract: Systems, methods, and non-transitory computer-readable storage media for a miscabling detection protocol. One or more switches can periodically send miscabling protocol (MCP) packets on non-fabric ports on all configured EPG VLANs. A first switch located at a network fabric receives a miscabling protocol (MCP) packet indicating an identity of an originating switch and a port number of an originating port of the MCP packet via a receiving port on the first switch, wherein the MCP packet is received from an external network connected to the receiving port, and wherein the originating switch and originating port are also located at the network fabric and connected to the external network. Based on the MCP packet, the first switch then detects a loop between the receiving port, the originating port, and the external network. Next, the first switch blocks the receiving port or the originating port in response to detecting the loop.

    Abstract translation: 系统,方法和非暂时的计算机可读存储介质,用于混合检测协议。 一个或多个交换机可以在所有配置的EPG VLAN上的非Fabric端口周期性地发送miscable协议(MCP)数据包。 位于网络结构的第一交换机经由第一交换机上的接收端口接收指示发起交换机的标识和MCP分组的始发端口的端口号的混合协议(MCP)分组,其中接收到该MCP分组 来自连接到接收端口的外部网络,并且其中始发交换机和始发端口也位于网络结构处并连接到外部网络。 基于MCP分组,第一交换机然后检测接收端口,始发端口和外部网络之间的环路。 接下来,响应于检测到环路,第一交换机阻塞接收端口或始发端口。

    Stacking metadata contexts for service chains
    247.
    发明授权
    Stacking metadata contexts for service chains 有权
    堆叠服务链的元数据上下文

    公开(公告)号:US09438512B2

    公开(公告)日:2016-09-06

    申请号:US14851236

    申请日:2015-09-11

    CPC classification number: H04L45/566 H04L45/306 H04L69/22

    Abstract: Presented herein are techniques useful in a network comprising a plurality of network nodes each configured to apply one or more service functions to traffic that passes through the respective network nodes. A network node receives packets encapsulated in a service header that includes information defining a first set of context headers stacked into an association of metadata that is relevant to one or more service functions within a service path comprised of one or more network nodes. The network node performs at least one of the service functions in the service path and rewrites the service header with a second set of context headers. The second set of context headers include metadata derived from performing the service function(s) at the network node.

    Abstract translation: 这里呈现的是在网络中有用的技术,其包括多个网络节点,每个网络节点被配置为将一个或多个服务功能应用于通过各个网络节点的业务。 网络节点接收封装在服务头部中的分组,其包括定义堆叠成与由一个或多个网络节点组成的服务路径内的一个或多个服务功能相关的元数据关联的第一组上下文标题的信息。 网络节点执行服务路径中的至少一个服务功能,并用第二组上下文头重写服务头部。 第二组上下文报头包括从在网络节点处执行服务功能导出的元数据。

    Stacking Metadata Contexts for Service Chains
    248.
    发明申请
    Stacking Metadata Contexts for Service Chains 审中-公开
    堆栈服务链的元数据上下文

    公开(公告)号:US20160006651A1

    公开(公告)日:2016-01-07

    申请号:US14851236

    申请日:2015-09-11

    CPC classification number: H04L45/566 H04L45/306 H04L69/22

    Abstract: Presented herein are techniques useful in a network comprising a plurality of network nodes each configured to apply one or more service functions to traffic that passes through the respective network nodes. A network node receives packets encapsulated in a service header that includes information defining a first set of context headers stacked into an association of metadata that is relevant to one or more service functions within a service path comprised of one or more network nodes. The network node performs at least one of the service functions in the service path and rewrites the service header with a second set of context headers. The second set of context headers include metadata derived from performing the service function(s) at the network node.

    Abstract translation: 这里呈现的是在网络中有用的技术,其包括多个网络节点,每个网络节点被配置为将一个或多个服务功能应用于通过各个网络节点的业务。 网络节点接收封装在服务头部中的分组,其包括定义堆叠成与由一个或多个网络节点组成的服务路径内的一个或多个服务功能相关的元数据关联的第一组上下文标题的信息。 网络节点执行服务路径中的至少一个服务功能,并用第二组上下文头重写服务头部。 第二组上下文报头包括从在网络节点处执行服务功能导出的元数据。

    SYSTEM AND METHOD FOR PROVIDING SMART GRID COMMUNICATIONS AND MANAGEMENT
    249.
    发明申请
    SYSTEM AND METHOD FOR PROVIDING SMART GRID COMMUNICATIONS AND MANAGEMENT 审中-公开
    用于提供智能网通信和管理的系统和方法

    公开(公告)号:US20150365245A1

    公开(公告)日:2015-12-17

    申请号:US14837845

    申请日:2015-08-27

    Abstract: A method is provided in one example embodiment and includes receiving a request for a service that involves phasor measurement unit (PMU) data; identifying a service device in a network to perform the service; and multicasting one or more results of the service to a group of subscribers identified by a multicast group address. In more particular embodiments, particular PMU data is redirected to the service device via a service insertion architecture (SIA) protocol. In addition, the service can include replicating packets and masking a subset of traffic for forwarding to a first hop router of the network. In certain example instances, metadata is used in order to apply the service to certain traffic propagating in the network.

    Abstract translation: 在一个示例实施例中提供了一种方法,并且包括接收对涉及相量测量单元(PMU)数据的服务的请求; 识别网络中的服务设备来执行所述服务; 以及将一个或多个服务结果多播到由多播组地址标识的一组订户。 在更具体的实施例中,特定PMU数据经由服务插入架构(SIA)协议被重定向到服务设备。 此外,该服务可以包括复制分组并且掩蔽用于转发到网络的第一跳路由器的流量子集。 在某些示例实例中,使用元数据来将服务应用于在网络中传播的某些流量。

    NETWORK FABRIC OVERLAY
    250.
    发明申请
    NETWORK FABRIC OVERLAY 有权
    网络织物覆盖

    公开(公告)号:US20150124826A1

    公开(公告)日:2015-05-07

    申请号:US14530550

    申请日:2014-10-31

    Abstract: Disclosed herein are methods of forwarding packets on a network, such as a leaf-spine network having leaf devices and spine devices. The methods may include receiving a packet at an ingress leaf device, and determining based, at least in part, on a header of the packet whether the packet is to be transmitted to a spine device. The methods may further include ascertaining based, at least in part, on a header of the packet whether to perform encapsulation on the packet, encapsulating the packet according to a result of the ascertaining, and then transmitting the packet to a spine device according to a result of the determining. Also disclosed herein are network apparatuses which include a processor and a memory, at least one of the processor or the memory being configured to perform some or all of the foregoing described methods.

    Abstract translation: 这里公开了在诸如具有叶装置和脊柱装置的叶脊网络的网络上转发分组的方法。 所述方法可以包括在入口叶设备处接收分组,以及至少部分地基于所述分组的报头确定所述分组是否要传送到脊柱设备。 所述方法可以进一步包括至少部分地基于分组的报头来确定是否对分组进行封装,根据确定的结果封装分组,然后根据所述分组将分组发送到脊柱设备 决定的结果。 本文还公开了包括处理器和存储器的网络设备,处理器或存储器中的至少一个被配置为执行前述所描述的方法中的一些或全部。

Patent Agency Ranking