公开(公告)号：US20100226282A1

公开(公告)日：2010-09-09

申请号：US12465707

申请日：2009-05-14

申请人： Paul J. Aitken ,  Benoit Claise ,  Gowri Dhandapani ,  Zhipu Jin ,  Nagaraj Varadharajan ,  Stanford L. Yates

发明人： Paul J. Aitken ,  Benoit Claise ,  Gowri Dhandapani ,  Zhipu Jin ,  Nagaraj Varadharajan ,  Stanford L. Yates

IPC分类号： H04L12/28

CPC分类号： H04L41/00 ,  H04L43/026 ,  H04L63/02 ,  H04L63/1416

摘要： An apparatus is provided in one example embodiment and includes a network element configured to receive a plurality of packets. The network element is configured to couple to a module, the module being configured to generate a data record that is based on information associated with the packets and capable of being interpreted according to a template in which multiple information elements can be positioned to create a hierarchical relationship within structured data. The structured data further includes references to the information elements. The network element further including an export module configured to export the data record to a next destination.

摘要翻译： 在一个示例性实施例中提供了一种装置，并且包括被配置为接收多个分组的网络元件。 网络元件被配置为耦合到模块，该模块被配置为生成基于与分组相关联的信息的数据记录，并且能够根据其中可以定位多个信息元素的模板来解释以创建分层 结构化数据之间的关系。 结构化数据还包括对信息元素的引用。 所述网络元件还包括被配置为将所述数据记录导出到下一目的地的导出模块。

公开(公告)号：US09660992B1

公开(公告)日：2017-05-23

申请号：US13531325

申请日：2012-06-22

申请人： Song Wang ,  Michael Jacobsen ,  Martin Walter ,  Suiqiang Deng ,  Zhipu Jin

发明人： Song Wang ,  Michael Jacobsen ,  Martin Walter ,  Suiqiang Deng ,  Zhipu Jin

IPC分类号： H04L29/06

CPC分类号： H04L63/10 ,  G06F21/6218 ,  H04L61/103 ,  H04L61/1523 ,  H04L63/0209 ,  H04L63/08 ,  H04L63/20

摘要： Enforcing a policy is described. A mapping between an IP address of a device and a user identity is identified at a first appliance, at least in part by correlating event information. The mapping is transmitted to a second appliance. A policy is applied by the second appliance to the device based at least in part on the user identity.

公开(公告)号：US09047109B1

公开(公告)日：2015-06-02

申请号：US13528748

申请日：2012-06-20

申请人： Song Wang ,  Martin Walter ,  Zhipu Jin ,  Wilson Xu

发明人： Song Wang ,  Martin Walter ,  Zhipu Jin ,  Wilson Xu

IPC分类号： G06F9/455 ,  G06F9/46

CPC分类号： G06F9/45533 ,  G06F9/45558 ,  G06F2009/45587

摘要： Policy enforcement in an environment that includes virtualized systems is disclosed. Virtual machine information associated with a first virtual machine instance executing on a host machine is received. The information can be received from a variety of sources, including an agent, a log server, and a management infrastructure associated with the host machine. A policy is applied based at least in part on the received virtual machine information.

摘要翻译： 披露了包含虚拟化系统的环境中的策略实施。 接收与在主机上执行的第一虚拟机实例相关联的虚拟机信息。 可以从各种来源接收信息，包括代理，日志服务器和与主机相关联的管理基础设施。 至少部分地基于所接收的虚拟机信息应用策略。

公开(公告)号：US08125920B2

公开(公告)日：2012-02-28

申请号：US12465707

申请日：2009-05-14

申请人： Paul J. Aitken ,  Benoit Claise ,  Gowri Dhandapani ,  Zhipu Jin ,  Nagaraj Varadharajan ,  Stanford L. Yates

发明人： Paul J. Aitken ,  Benoit Claise ,  Gowri Dhandapani ,  Zhipu Jin ,  Nagaraj Varadharajan ,  Stanford L. Yates

IPC分类号： G01R31/08

CPC分类号： H04L41/00 ,  H04L43/026 ,  H04L63/02 ,  H04L63/1416

摘要： An apparatus is provided in one example embodiment and includes a network element configured to receive a plurality of packets. The network element is configured to couple to a module, the module being configured to generate a data record that is based on information associated with the packets and capable of being interpreted according to a template in which multiple information elements can be positioned to create a hierarchical relationship within structured data. The structured data further includes references to the information elements. The network element further including an export module configured to export the data record to a next destination.

摘要翻译： 在一个示例性实施例中提供了一种装置，并且包括被配置为接收多个分组的网络元件。 网络元件被配置为耦合到模块，该模块被配置为生成基于与分组相关联的信息的数据记录，并且能够根据其中可以定位多个信息元素的模板来解释以创建分层 结构化数据之间的关系。 结构化数据还包括对信息元素的引用。 所述网络元件还包括被配置为将所述数据记录导出到下一目的地的导出模块。