公开(公告)号：US09130818B2

公开(公告)日：2015-09-08

申请号：US13792407

申请日：2013-03-11

申请人： Gregory S. Hilton ,  Andrew M. Spooner ,  Franz J. Weller ,  Patricia A. Abkowitz ,  Ronald A. Pleshek ,  Richard G. Jeske ,  Keith E. Cheney ,  Charles A. Webb, III ,  Scott A. Harper

发明人： Gregory S. Hilton ,  Andrew M. Spooner ,  Franz J. Weller ,  Patricia A. Abkowitz ,  Ronald A. Pleshek ,  Richard G. Jeske ,  Keith E. Cheney ,  Charles A. Webb, III ,  Scott A. Harper

IPC分类号： H04L12/701 ,  H04L12/931 ,  H04L12/24 ,  H04L12/26

CPC分类号： H04L45/00 ,  H04L41/0893 ,  H04L43/00 ,  H04L49/00

摘要： Systems and methods are disclosed for unified systems of network tool optimizers (NTOs). A NTO supervisor device controls switch fabric circuitry to interconnect a plurality of NTO member devices so that packets received at a source port for one NTO member device can be output to a destination port for a different NTO member device. The NTO supervisor device is further configured to analyze filters for the NTO member devices and to generate filter rules for forwarding packets among the various NTO member devices using the switch fabric circuitry. Further, additional secondary NTO supervisor devices can also be included within the unified NTO system to further expand the system. As such, a plurality of NTO member devices are managed and controlled by one or more NTO supervisor devices to form a highly scalable and efficient unified NTO system.

摘要翻译： 公开了网络工具优化器（NTO）的统一系统的系统和方法。 NTO主管设备控制交换结构电路以互连多个NTO成员设备，使得在一个NTO成员设备的源端口处接收的分组可以被输出到不同NTO成员设备的目的地端口。 NTO管理器设备还被配置为分析NTO成员设备的过滤器，并且生成用于使用交换结构电路在各种NTO成员设备之间转发分组的过滤规则。 此外，还可以在统一的NTO系统中包含附加的辅助NTO监控器设备，以进一步扩展系统。 因此，多个NTO成员设备由一个或多个NTO主管设备管理和控制，以形成高度可扩展且高效的统一NTO系统。

公开(公告)号：US20130259045A1

公开(公告)日：2013-10-03

申请号：US13432172

申请日：2012-03-28

申请人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

发明人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

IPC分类号： H04L12/56

CPC分类号： H04L45/306 ,  H04L29/06095

摘要： Systems and methods are disclosed for modifying network packets to use unrecognized headers/fields for packet classification and forwarding in packet processing systems, such as network tool optimizer (NTO) devices. The packet modifications described allow standard switch or routing integrated circuits (ICs) to process, classify, and forward packets based upon data that is not typically recognized by the hardware capabilities of the standard packet routing circuitry for packet processing. Input packets are modified so that unrecognized data becomes recognized data for purposes of packet processing, classification, and forwarding by the packet routing circuitry. These modifications are then removed after packets are processed to reform the original packets. The original packets are then provided to destination devices based upon packet classification and forwarding control information. As such, packet processing, classification, and forwarding is provided in packet processing systems using headers/fields that are not supported for processing by standard switch or routing integrated circuits (ICs).

摘要翻译： 公开了用于修改网络分组以使用诸如网络工具优化器（NTO）设备的分组处理系统中的用于分组分类和转发的无法识别的报头/字段的系统和方法。 所描述的分组修改允许标准交换机或路由集成电路（IC）基于通常不被用于分组处理的标准分组路由选择电路的硬件能力识别的数据来处理，分类和转发分组。 修改输入分组，使得无法识别的数据成为数据包处理，分类和分组路由电路转发目的的数据。 然后在处理数据包以改造原始数据包后，删除这些修改。 然后基于分组分类和转发控制信息将原始分组提供给目的设备。 因此，在使用不支持标准交换机或路由集成电路（IC）处理的报头/字段的分组处理系统中提供分组处理，分类和转发。

公开(公告)号：US08842672B2

公开(公告)日：2014-09-23

申请号：US13432172

申请日：2012-03-28

申请人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

发明人： Stefan Johansson ,  Keith E. Cheney ,  Patricia A. Abkowitz ,  Shardendu Pandey ,  Gregory S. Hilton

IPC分类号： H04L12/56

CPC分类号： H04L45/306 ,  H04L29/06095

摘要： Systems and methods are disclosed for modifying network packets to use unrecognized headers/fields for packet classification and forwarding in packet processing systems, such as network tool optimizer (NTO) devices. The packet modifications described allow standard switch or routing integrated circuits (ICs) to process, classify, and forward packets based upon data that is not typically recognized by the hardware capabilities of the standard packet routing circuitry for packet processing. Input packets are modified so that unrecognized data becomes recognized data for purposes of packet processing, classification, and forwarding by the packet routing circuitry. These modifications are then removed after packets are processed to reform the original packets. The original packets are then provided to destination devices based upon packet classification and forwarding control information. As such, packet processing, classification, and forwarding is provided in packet processing systems using headers/fields that are not supported for processing by standard switch or routing integrated circuits (ICs).

摘要翻译： 公开了用于修改网络分组以使用诸如网络工具优化器（NTO）设备的分组处理系统中的用于分组分类和转发的无法识别的报头/字段的系统和方法。 所描述的分组修改允许标准交换机或路由集成电路（IC）基于通常不被用于分组处理的标准分组路由选择电路的硬件能力识别的数据来处理，分类和转发分组。 修改输入分组，使得无法识别的数据成为数据包处理，分类和分组路由电路转发目的的数据。 然后在处理数据包以改造原始数据包后，删除这些修改。 然后基于分组分类和转发控制信息将原始分组提供给目的设备。 因此，在使用不支持标准交换机或路由集成电路（IC）处理的报头/字段的分组处理系统中提供分组处理，分类和转发。

公开(公告)号：US08842548B2

公开(公告)日：2014-09-23

申请号：US13346123

申请日：2012-01-09

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28 ,  G06F15/16

CPC分类号： H04L43/12 ,  H04L43/028

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use superset packet forwarding, such that ingress filter engines are configured with ingress filter rules so as to forward a superset of packets to output ports associated with overlapping filters. Egress filter engines are configured with egress filter rules to then determine which of the superset packets are actually sent out the output ports.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用超集包转发，使得入口过滤器引擎配置有入口过滤器规则，以便将分组的超集转发到与重叠过滤器相关联的输出端口。 出口过滤器引擎配置有出口过滤器规则，然后确定哪些超集包实际上被发送出输出端口。

公开(公告)号：US20110317694A1

公开(公告)日：2011-12-29

申请号：US13227617

申请日：2011-09-08

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/56

CPC分类号： H04L43/028 ,  H04L45/306 ,  H04L49/90

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use a packet processing system whereby forwarding behavior is governed by matching packets in parallel against multiple user-specified packet filtering criteria, and by performing forwarding actions associated with all such matching filter criteria. The multi-action packet forwarding can be implemented using hardware configured to directly provide multi-action packet forwarding and/or hardware configured to provide single-packet-forwarding that has been subsequently configured using filter engines to provide multi-action packet forwarding.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用分组处理系统，由此通过与多个用户指定的分组过滤标准并行地匹配分组来管理转发行为，并且通过执行与所有这样的匹配过滤器标准相关联的转发动作。 可以使用配置为直接提供多动作分组转发和/或被配置为提供单个分组转发的硬件来实现多动作分组转发，所述单分组转发随后使用过滤器引擎配置以提供多动作分组转发。

公开(公告)号：US08018943B1

公开(公告)日：2011-09-13

申请号：US12462221

申请日：2009-07-31

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28

CPC分类号： H04L43/028 ,  H04L45/306 ,  H04L49/90

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use a packet processing system whereby forwarding behavior is governed by matching packets in parallel against multiple user-specified packet filtering criteria, and by performing forwarding actions associated with all such matching filter criteria. The multi-action packet forwarding can be implemented using hardware configured to directly provide multi-action packet forwarding and/or hardware configured to provide single-packet-forwarding that has been subsequently configured using filter engines to provide multi-action packet forwarding.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用分组处理系统，由此通过与多个用户指定的分组过滤标准并行地匹配分组来管理转发行为，并且通过执行与所有这样的匹配过滤器标准相关联的转发动作。 可以使用配置为直接提供多动作分组转发和/或被配置为提供单个分组转发的硬件来实现多动作分组转发，所述单分组转发随后使用过滤器引擎配置以提供多动作分组转发。

公开(公告)号：US08929356B2

公开(公告)日：2015-01-06

申请号：US13759407

申请日：2013-02-05

申请人： Shardendu Pandey ,  Stefan Johansson ,  Robin O'Connor ,  Keith E. Cheney

发明人： Shardendu Pandey ,  Stefan Johansson ,  Robin O'Connor ,  Keith E. Cheney

IPC分类号： H04L12/28 ,  H04W28/08 ,  H04W40/00

CPC分类号： H04W28/08 ,  H04L43/026 ,  H04L43/12 ,  H04L45/306 ,  H04W40/00

摘要： Systems and methods are disclosed for mobile user identification and tracking for load balancing in packet processing systems. Packet processing systems, such as network tool optimizer (NTO) systems, are configured to receive packets associated with multiple mobile users, to extract user identification information from the packets, to store identity binding information for the mobile users, to track changes in identification information for mobile users within a communication system by analyzing control information within packets for the communication system, and to forward packets to one or more tool ports associated with the packet processing system. The packet processing systems disclosed thereby allow for user packets to be identified and sent to the same load-balanced network tool, even though the user identification information changes over time within the communication system. The disclosed embodiments are useful for a wide variety of mobile and/or non-mobile communication systems and related communication protocols.

摘要翻译： 公开了用于移动用户识别和跟踪用于分组处理系统中的负载平衡的系统和方法。 诸如网络工具优化器（NTO）系统的分组处理系统被配置为接收与多个移动用户相关联的分组，从分组中提取用户识别信息，以存储移动用户的身份绑定信息，以跟踪识别信息的变化 通过分析用于通信系统的分组内的控制信息，并将分组转发到与分组处理系统相关联的一个或多个工具端口，为通信系统内的移动用户。 所公开的分组处理系统即使用户识别信息在通信系统内随着时间的推移而被允许将用户分组识别并发送到相同的负载平衡网络工具。 所公开的实施例对于各种移动和/或非移动通信系统和相关通信协议是有用的。

公开(公告)号：US08902895B2

公开(公告)日：2014-12-02

申请号：US13227617

申请日：2011-09-08

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28

CPC分类号： H04L43/028 ,  H04L45/306 ,  H04L49/90

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use a packet processing system whereby forwarding behavior is governed by matching packets in parallel against multiple user-specified packet filtering criteria, and by performing forwarding actions associated with all such matching filter criteria. The multi-action packet forwarding can be implemented using hardware configured to directly provide multi-action packet forwarding and/or hardware configured to provide single-packet-forwarding that has been subsequently configured using filter engines to provide multi-action packet forwarding.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用分组处理系统，由此通过与多个用户指定的分组过滤标准并行地匹配分组来管理转发行为，并且通过执行与所有这样的匹配过滤器标准相关联的转发动作。 可以使用配置为直接提供多动作分组转发和/或被配置为提供单个分组转发的硬件来实现多动作分组转发，所述单分组转发随后使用过滤器引擎配置以提供多动作分组转发。

公开(公告)号：US08098677B1

公开(公告)日：2012-01-17

申请号：US12462293

申请日：2009-07-31

申请人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

发明人： Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Gregory S. Hilton ,  Patricia A. Abkowitz ,  Arun K. Thakkar ,  Himanshu M. Thaker

IPC分类号： H04L12/28 ,  H04L12/56 ,  G06F15/16 ,  G06F3/00

CPC分类号： H04L43/12 ,  H04L43/028

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between input ports and output ports. The input ports and output ports are configured to be connected to source devices and destination devices, for example, network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can use superset packet forwarding, such that ingress filter engines are configured with ingress filter rules so as to forward a superset of packets to output ports associated with overlapping filters. Egress filter engines are configured with egress filter rules to then determine which of the superset packets are actually sent out the output ports.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，用于改善输入端口和输出端口之间的分组转发。 输入端口和输出端口被配置为连接到源设备和目标设备，例如网络监视环境中的网络源和目标工具。 公开的网络设备和工具优化器可以使用超集包转发，使得入口过滤器引擎配置有入口过滤器规则，以便将分组的超集转发到与重叠过滤器相关联的输出端口。 出口过滤器引擎配置有出口过滤器规则，然后确定哪些超集包实际上被发送出输出端口。

公开(公告)号：US08934495B1

公开(公告)日：2015-01-13

申请号：US12462222

申请日：2009-07-31

申请人： Gregory S. Hilton ,  Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Himanshu M. Thaker

发明人： Gregory S. Hilton ,  Ronald A. Pleshek ,  Charles A. Webb, III ,  Keith E. Cheney ,  Himanshu M. Thaker

IPC分类号： H04L12/28 ,  H04L12/56

CPC分类号： H04L67/02 ,  H04L41/22 ,  H04L43/028 ,  H04L43/12 ,  H04L65/1006 ,  H04L67/2828 ,  H04L67/322 ,  H04L67/36

摘要： Systems and methods are disclosed that allow for improved management and control of packet forwarding in network systems. Network devices and tool optimizers and a related systems and methods are disclosed for improved packet forwarding between network sources and destination tools in a network monitoring environment. The network devices and tool optimizers disclosed can include a graphical user interfaces (GUIs) through which a user can create and modify filters and select associated filter criteria for forwarding packets from input ports to output ports. The network devices and tool optimizers can also automatically generate filter rules and apply them to the appropriate filter engines so that packets are forwarded as desired by the user. The GUI can be configured to provide other features as well.

摘要翻译： 公开了允许改进网络系统中分组转发的管理和控制的系统和方法。 公开了网络设备和工具优化器以及相关的系统和方法，以改善网络监视环境中的网络源和目的地工具之间的分组转发。 公开的网络设备和工具优化器可以包括图形用户界面（GUI），用户可以通过图形用户界面（GUI）创建和修改过滤器并且选择相关联的过滤标准以将分组从输入端口转发到输出端口。 网络设备和工具优化器还可以自动生成过滤器规则并将其应用到适当的过滤器引擎，以便数据包按照用户的需要进行转发。 GUI也可以配置为提供其他功能。