专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

61. 发明授权

US07957372B2 Automatically detecting distributed port scans in computer networks 失效
标题翻译：自动检测计算机网络中的分布式端口扫描
公开(公告)号：US07957372B2
公开(公告)日：2011-06-07
申请号：US10896733
申请日：2004-07-22
申请人： Alan David Boulanger , Robert William Danford , Kevin David Himberger , Clark Debs Jeffries
发明人： Alan David Boulanger , Robert William Danford , Kevin David Himberger , Clark Debs Jeffries
IPC分类号： H04L12/28 , G06F9/00 , G06F11/00
CPC分类号： H04L63/1416 , H04L63/1466
摘要： A detection and response system including a set of algorithms for detecting within a stream of normal computer traffic a subset of (should focus on network traffic eliciting a response) TCP or UDP packets with one IP Source Address (SA) value, one or a few Destination Address (DA) values, and a number exceeding a threshold of distinct Destination Port (DP) values. A lookup mechanism such as a Direct Table and Patricia search tree record and trace sets of packets with one SA and one DA as well as the set of DP values observed for the given SA, DA combination. The detection and response system reports the existence of such a subset and the header values including SA, DA, and multiple DPs of the subset. The detection and response system also includes various administrative responses to reports.
摘要翻译：一种检测和响应系统，包括一组用于在正常计算机业务流内检测的一组算法（应该侧重于引发响应的网络业务）具有一个IP源地址（SA）值的TCP或UDP分组，一个或几个目标地址（DA）值和超过不同目标端口（DP）值阈值的数字。一个查找机制，如直接表和帕特里夏搜索树记录，跟踪一组SA和一个DA的数据包以及给定SA，DA组合观察到的一组DP值。检测和响应系统报告这样的子集的存在以及包括SA，DA和子集的多个DP的标题值。检测和响应系统还包括对报告的各种管理响应。

62. 发明授权

US07107344B2 Connection allocation technology 失效
标题翻译：连接分配技术
公开(公告)号：US07107344B2
公开(公告)日：2006-09-12
申请号：US09931540
申请日：2001-08-16
申请人： Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi
发明人： Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi
IPC分类号： G06F15/16
CPC分类号： H04L69/16 , H04L67/14 , H04L69/163
摘要： A method and apparatus useful in network management which makes intelligent, high speed, connection allocation decisions, overcoming difficulties encountered heretofore and providing enhanced network services. During episodes of network congestion, some connection requests for a class of service of low value and with currently a high number of existing connections may be purposefully ignored (not acknowledged with an Acknowledge (ACK) packet) so that the processing capability of a device will not become overwhelmed, causing the dropping of new connection is to note the numbers of connections of different classes relative to their service-level contracts, to ignore abundant, low-value connection requests in accordance with value policies when and only when necessary, and to insure that valuable new connection requests that conform to their contract connection rates can be intelligently accommodated.
摘要翻译：一种在网络管理中有用的方法和装置，其实现智能，高速，连接分配决策，克服迄今遇到的困难并提供增强的网络服务。在网络拥塞发生期间，可以有目的地忽略一些低价值服务和当前具有大量现有连接的连接请求（未被确认（ACK）分组确认），使得设备的处理能力将不会变得不堪重负，导致新连接的下降是注意到不同类别与其服务级别合同的连接数量，当且仅在必要时根据价值政策忽略丰富的低价值连接请求，并且确保符合其合同连接率的有价值的新连接请求可以被智能地适应。

63. 发明授权

US07054855B2 Method and system for performing a pattern match search for text strings 失效
公开(公告)号：US07054855B2
公开(公告)日：2006-05-30
申请号：US09898253
申请日：2001-07-03
申请人： Claude Basso , Jean Louis Calvignac , Philippe Damon , Gordon Taylor Davis , Marco C. Heddes , Clark Debs Jeffries
发明人： Claude Basso , Jean Louis Calvignac , Philippe Damon , Gordon Taylor Davis , Marco C. Heddes , Clark Debs Jeffries
IPC分类号： G06F17/30
CPC分类号： G06F17/30985 , H04L29/12132 , H04L29/12594 , H04L61/1552 , H04L61/30 , Y10S707/99933 , Y10S707/99942
摘要： A method and system for performing a pattern match search for a data string having a plurality of characters separated by delimiters. In accordance with the method of the present invention a search key is constructed by generating a full match search increment comprising the binary representation of a data string element, wherein the data string element comprises all characters between a pair of delimiters. The search key is completed by concatenating a pattern search prefix to the full match search increment, wherein the pattern search prefix is a cumulative pattern search result of each previous full match search increment. A full match search is then performed within a lookup table utilizing the search key. In response to finding a matching pattern within the lookup table, the process returns to constructing a next search key. In response to not finding a matching pattern, the previous full match search result is utilized to process the data string.

64. 发明授权

US06886073B2 Method and system for performing range rule testing in a ternary content addressable memory 失效
标题翻译：在三元内容可寻址存储器中执行范围规则测试的方法和系统
公开(公告)号：US06886073B2
公开(公告)日：2005-04-26
申请号：US10173994
申请日：2002-06-18
申请人： Gordon Taylor Davis , Clark Debs Jeffries , Jan Van Lunteren
发明人： Gordon Taylor Davis , Clark Debs Jeffries , Jan Van Lunteren
IPC分类号： G06F12/00 , G06F17/30 , H04L29/06
CPC分类号： H04L69/22 , H04L69/12
摘要： A method and system for storing and searching for prefixes for rules, such as filter rules, in a computer system is disclosed. The method and system include providing a ternary content addressable memory (TCAM). The filter rules use range(s) of values in at least one dimension and correspond to prefix(es). The range(s) are described by prefix(es). Some filter rules may intersect. The method and system include providing priorities for the filter rules. The priorities include at least one different priority for the filter rules that intersect. The method and system also include storing the prefixes in the TCAM in block(s) in an order based upon the priorities of the filter rules. In another aspect, the method and system include searching the TCAM for a longest prefix match for a key and searching an additional storage for an almost exact match for the key in parallel with the TCAM. In this aspect, the method and system include returning the longest prefix match having a lowest or a highest location if the longest prefix match is found in the TCAM and the almost exact match is not found in the additional storage.
摘要翻译：公开了一种用于在计算机系统中存储和搜索诸如过滤规则的规则的前缀的方法和系统。该方法和系统包括提供三元内容可寻址存储器（TCAM）。过滤器规则使用至少一个维度中的值的范围，并对应于前缀（es）。范围由前缀（es）描述。一些过滤规则可能会相交。该方法和系统包括为过滤规则提供优先级。优先级至少包含与交叉的过滤规则的一个不同的优先级。该方法和系统还包括基于过滤器规则的优先级按顺序将块中的前缀存储在块中。在另一方面，所述方法和系统包括搜索TCAM对于密钥的最长前缀匹配，并且搜索附加存储器以与所述TCM并行的所述密钥几乎精确匹配。在这方面，如果在TCAM中找到最长前缀匹配并且在附加存储器中找不到几乎精确的匹配，则该方法和系统包括返回具有最低或最高位置的最长前缀匹配。

65. 发明授权

US06870811B2 Quality of service functions implemented in input interface circuit interface devices in computer network hardware 失效
标题翻译：服务质量在计算机网络硬件的输入接口电路接口设备中实现
公开(公告)号：US06870811B2
公开(公告)日：2005-03-22
申请号：US09764954
申请日：2001-01-18
申请人： Kenneth James Barker , Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi , Kartik Sudeep
发明人： Kenneth James Barker , Gordon Taylor Davis , Clark Debs Jeffries , Mark Anthony Rinaldi , Kartik Sudeep
IPC分类号： H04L12/56 , H04L12/28
CPC分类号： H04L47/32 , H04L47/10 , H04L47/12
摘要： The decision to discard or forward a packet is made by a flow control mechanism, upstream from the forwarding engine in the node of a communication network. The forwarding engine includes a switch with mechanism to detect congestion in the switch and return a binary signal B indicating congestion or no congestion. The flow control mechanism uses B and other network related information to generate a probability transmission table against which received packets are tested to determine proactively whether a packet is to be discarded or forwarded.
摘要翻译：通过在通信网络的节点中的转发引擎的上游的流控制机制来进行丢弃或转发分组的决定。转发引擎包括具有检测交换机拥塞的机制的交换机，并返回指示拥塞或不拥塞的二进制信号B. 流控制机制使用B和其他网络相关信息来生成概率传输表，对其接收到的分组进行测试，以主动确定分组是否被丢弃或转发。

66. 发明授权

US06807576B1 Method and system for determining and graphically representing frame classification rule relationships 失效
标题翻译：用于确定和图形化地表示帧分类规则关系的方法和系统
公开(公告)号：US06807576B1
公开(公告)日：2004-10-19
申请号：US09658299
申请日：2000-09-08
申请人： Clark Debs Jeffries , Victoria Sue Thio , Alex Warshavsky , Avraham Zehavi
发明人： Clark Debs Jeffries , Victoria Sue Thio , Alex Warshavsky , Avraham Zehavi
IPC分类号： G06F15173
CPC分类号： H04L63/0263 , H04L29/06 , H04L67/36 , H04L69/329 , Y10S707/99932 , Y10S707/99933 , Y10S707/99937 , Y10S707/99942 , Y10S707/99943
摘要： A method and system for graphically representing relationships between a plurality of filter rules in a computer system is disclosed. The computer system includes a display. Each of the plurality of filter rules has a priority. The method and system include allowing entry of at least one filter rule of the plurality of filter rules and providing a graphical display of a first portion of the plurality of filter rules on the display. Each of the first portion of the plurality of filter rules is displayed hierarchically based on the priority of each of the first portion of the plurality of filter rules. If the first portion of plurality of filter rules includes a plurality of intersecting filter rules, then displaying the plurality of intersecting filter rules in the graphical display to indicate at least one intersection of at least one higher priority filter rule and at least one lower priority filter rule and to indicate that the at least one higher priority filter rule dominates the at least one lower priority filter rule.
摘要翻译：公开了用于图形表示计算机系统中的多个过滤规则之间的关系的方法和系统。计算机系统包括显示器。多个过滤器规则中的每一个具有优先级。所述方法和系统包括允许输入多个过滤器规则中的至少一个过滤规则，并在显示器上提供多个过滤器规则的第一部分的图形显示。基于多个滤波器规则的第一部分中的每一个的优先级，多个滤波器规则的第一部分中的每一个被分层显示。如果多个滤波器规则的第一部分包括多个相交的滤波器规则，则在图形显示中显示多个相交的滤波器规则以指示至少一个较高优先级的滤波器规则和至少一个较低优先级滤波器的至少一个交集并且指示所述至少一个较高优先级过滤规则支配所述至少一个较低优先级过滤规则。

67. 发明授权

US06771601B1 Network switch having source port queuing and methods, systems and computer program products for flow level congestion control suitable for use with a network switch having source port queuing 失效
标题翻译：具有源端口排队的网络交换机和用于流级拥塞控制的方法，系统和计算机程序产品，适用于具有源端口排队的网络交换机
公开(公告)号：US06771601B1
公开(公告)日：2004-08-03
申请号：US09494580
申请日：2000-01-31
申请人： Metin Aydemir , Clark Debs Jeffries , Jeffrey James Lynch
发明人： Metin Aydemir , Clark Debs Jeffries , Jeffrey James Lynch
IPC分类号： G01R3108
CPC分类号： H04L49/506 , H04L49/3018
摘要： A network switch as well as methods, systems and computer program products for controlling congestion at a granularity of less than a link are provided. Such finer granularity may be provided by pausing traffic at a source port level of a network switch. The network switch which transmitted a message which resulted in congestion being detected is notified of the congestion and pauses the communications from the source port of the message while maintaining communications over the link from other source ports. Such source port level congestion control may be provided by a network switch having a sub-queue of its output queues where each sub-queue corresponds to an input port. Source port level pausing of transmissions may then be provided by pausing the sub-queue associated with a source port.
摘要翻译：提供了一种网络交换机以及用于以小于链路的粒度来控制拥塞的方法，系统和计算机程序产品。可以通过在网络交换机的源端口级别暂停业务来提供这样更细的粒度。通过来自其它源端口的链路保持通信，通知发送了检测到拥塞的消息的网络交换机，并阻塞来自消息的源端口的通信。这样的源端口级拥塞控制可以由具有其输出队列的子队列的网络交换机提供，其中每个子队列对应于输入端口。然后可以通过暂停与源端口相关联的子队列来提供源端口级别暂停发送。

68. 发明授权

US06725216B2 Partitioning search key thereby distributing table across multiple non-contiguous memory segments, memory banks or memory modules 有权
标题翻译：分区搜索键，从而在多个不连续的存储器段，存储体或存储器模块之间分配表
公开(公告)号：US06725216B2
公开(公告)日：2004-04-20
申请号：US09928200
申请日：2001-08-10
申请人： Gordon Taylor Davis , Clark Debs Jeffries
发明人： Gordon Taylor Davis , Clark Debs Jeffries
IPC分类号： G06F1730
CPC分类号： H04L45/745 , G06F7/02 , G06F2207/025 , H04L45/00 , H04L45/60 , Y10S707/99933 , Y10S707/99934
摘要： A system and method for retrieving information in a distributed table by partitioning a search key. A packet processor may generate a search key for a received packet of data. The packet processor may partition the search key into a plurality of segments where the length of each segment corresponds to a size of a particular layer of a table. The packet processor may read a particular entry in a particular layer, e.g., the first layer, of the table using a value of the segment, e.g., the first segment, associated with that layer. A determination may be made to determine if the particular entry read stores a pointer that points to the next level of the table. If so, then the packet processor may read a particular entry in the next level of the table using the value of the next segment of the plurality of segments.
摘要翻译：一种用于通过划分搜索关键字来检索分布式表中的信息的系统和方法。分组处理器可以生成用于所接收的数据分组的搜索关键字。分组处理器可以将搜索密钥划分成多个段，其中每个段的长度对应于表的特定层的大小。分组处理器可以使用与该层相关联的段（例如，第一段）的值来读取表的特定层（例如，第一层）中的特定条目。可以确定确定特定条目读取是否存储指向表的下一级的指针。如果是这样，则分组处理器可以使用多个段的下一个段的值来读取表的下一个级别中的特定条目。

69. 发明授权

US06473763B1 System, method and computer program for filtering multi-action rule set 失效
标题翻译：用于过滤多动作规则集的系统，方法和计算机程序
公开(公告)号：US06473763B1
公开(公告)日：2002-10-29
申请号：US09540921
申请日：2000-03-31
申请人： Everett Arthur Corl, Jr. , Clark Debs Jeffries , Colin Beaton Verrilli
发明人： Everett Arthur Corl, Jr. , Clark Debs Jeffries , Colin Beaton Verrilli
IPC分类号： G06F1730
CPC分类号： H04L63/0263 , G06F17/30985 , H04L43/50 , H04L63/0236 , H04L63/1433 , Y10S707/99942 , Y10S707/99943
摘要： A method and system for testing a plurality of filter rules in a computer system is disclosed. The plurality of filter rules is used with a key. Each of the plurality of filter rules is capable of being described using a plurality of bits corresponding to a portion of the key. The plurality of bits can include at least one binary value, at least one wildcard, and at least one boundary symbol. The at least one binary value can be a zero or a one. The method and system include selecting a portion of the plurality of filter rules that the key can match by testing part of the key against a portion of the plurality of bits and explicitly testing the key against the portion of the plurality of filter rules. A first bit of the portion of the plurality of bits has a first maximum number of the at least one binary symbol for the plurality of filter rules. Each subsequent bit of the portion plurality of bits has a second maximum number of the at least one binary symbol for a plurality of remaining bits and is selected based on testing of a prior bit. Preferably, the portion of the plurality of bits is tested using a decision tree which includes nodes corresponding to a second portion of the plurality of bits.
摘要翻译：公开了一种用于测试计算机系统中的多个过滤规则的方法和系统。多个过滤器规则与密钥一起使用。多个滤波器规则中的每一个能够使用与密钥的一部分相对应的多个比特来描述。多个比特可以包括至少一个二进制值，至少一个通配符和至少一个边界符号。至少一个二进制值可以是零或一个。所述方法和系统包括通过根据多个比特的一部分测试部分密钥来选择密钥可以匹配的多个过滤规则的一部分，并针对多个过滤规则的部分显式测试密钥。多个位的部分的第一位具有用于多个滤波器规则的至少一个二进制符号的第一最大数目。部分多个比特的每个后续比特具有多个剩余比特的至少一个二进制符号的第二最大数目，并且基于先前比特的测试来选择。优选地，使用包括对应于多个比特的第二部分的节点的决策树来测试多个比特的部分。

70. 发明授权

US06359862B1 ATM network available bit rate (ABR) explicit rate flow control system 失效
标题翻译： ATM网络可用比特率（ABR）显式速率流量控制系统
公开(公告)号：US06359862B1
公开(公告)日：2002-03-19
申请号：US08978178
申请日：1997-11-25
申请人： Clark Debs Jeffries , Ken Van Vu
发明人： Clark Debs Jeffries , Ken Van Vu
IPC分类号： H04J324
CPC分类号： H04L12/5602 , H04L2012/5635 , H04L2012/5681
摘要： A method of flow control for Available Bit Rate (ABR) sources in an Asynchronous Transfer Mode (ATM) network is implemented. An effective rate for the source is determined by an ATM switch based on a critically damped second order system. The effective rate is damped toward a share value that is based on the source queue length, a target queue length, and the actual cell rates of the connected ABR sources sending traffic through the ATM switch. The resulting feedback loop ensures that the source queue length will not exceed the target queue length.
摘要翻译：实现了异步传输模式（ATM）网络中可用比特率（ABR）源的流量控制方法。源的有效速率由基于绝对阻尼二阶系统的ATM交换机确定。根据源队列长度，目标队列长度和连接的ABR源通过ATM交换机发送流量的实际信元速率，有效速率被抑制。所产生的反馈循环确保源队列长度不会超过目标队列长度。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式