专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08037175B1 Network device having service card for intercept and monitoring of packet flows 有权
标题翻译：具有用于拦截和监视分组流的业务卡的网络设备
公开(公告)号：US08037175B1
公开(公告)日：2011-10-11
申请号：US12822904
申请日：2010-06-24
申请人： Manoj Apte , Sandeep Jain , Fritz Budiyanto , Senthil Kumar Duraiswamy , Saravanan Deenadayalan , Yulianto Kokasih Ko
发明人： Manoj Apte , Sandeep Jain , Fritz Budiyanto , Senthil Kumar Duraiswamy , Saravanan Deenadayalan , Yulianto Kokasih Ko
IPC分类号： G06F15/173
CPC分类号： H04L43/028 , H04L45/10 , H04L45/38
摘要： A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the CSs. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow CSs to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.
摘要翻译：网络设备包括执行通信协议的服务卡（例如，动态流捕获（DFC）服务卡），以从一个或多个控制源接收指定至少一个目的地的流捕获信息和用于匹配一个或多个分组的标准流动。网络设备包括从网络接收分组的网络接口卡，用于复制分组的分组复制模块，以及将接收卡的复制分组提供给DFC服务卡的控制单元。网络设备包括高速缓存从CS接收到的流捕获信息的过滤器高速缓存。网络设备可以提供指定的基于网络的通信的实时拦截和中继。此外，本文描述的技术允许CS在指定流捕获信息（例如，在50毫秒内）甚至在高容量网络下，稍微延迟地敲击分组流。

2. 发明授权

US07747737B1 Network device having service card for dynamic flow capture and monitoring of packet flows 有权
标题翻译：网络设备具有用于动态流捕获和监视分组流的业务卡
公开(公告)号：US07747737B1
公开(公告)日：2010-06-29
申请号：US11517232
申请日：2006-09-07
申请人： Manoj Apte , Sandeep Jain , Fritz Budiyanto , Senthil Kumar Duraiswamy , Saravanan Deenadayalan , Yulianto Kokasih Ko
发明人： Manoj Apte , Sandeep Jain , Fritz Budiyanto , Senthil Kumar Duraiswamy , Saravanan Deenadayalan , Yulianto Kokasih Ko
IPC分类号： G06F15/173
CPC分类号： H04L43/028 , H04L45/10 , H04L45/38
摘要： A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the CSs. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow CSs to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.
摘要翻译：网络设备包括执行通信协议的服务卡（例如，动态流捕获（DFC）服务卡），以从一个或多个控制源接收指定至少一个目的地的流捕获信息和用于匹配一个或多个分组的标准流动。网络设备包括从网络接收分组的网络接口卡，用于复制分组的分组复制模块，以及将接收卡的复制分组提供给DFC服务卡的控制单元。网络设备包括高速缓存从CS接收到的流捕获信息的过滤器高速缓存。网络设备可以提供指定的基于网络的通信的实时拦截和中继。此外，本文描述的技术允许CS在指定流捕获信息（例如，在50毫秒内）甚至在高容量网络下，稍微延迟地敲击分组流。

3. 发明授权

US07633944B1 Managing timeouts for dynamic flow capture and monitoring of packet flows 有权
标题翻译：管理动态流捕获和监视数据包流的超时
公开(公告)号：US07633944B1
公开(公告)日：2009-12-15
申请号：US11561726
申请日：2006-11-20
申请人： Szelap Philip Chang , Manoj Apte , Saravanan Deenadayalan
发明人： Szelap Philip Chang , Manoj Apte , Saravanan Deenadayalan
IPC分类号： H04L12/28
CPC分类号： H04L43/028 , H04L45/38 , H04L63/0263
摘要： Techniques are described for managing timeouts of filter criteria in a packet flow capture applications. The techniques allow for handling large amounts of timeouts used when monitoring a high volume of packet flows, without placing extreme demands on the operating system for managing the timeouts. The timeout data structure may be a circular array having a plurality of elements. The timeout array represents a span of time and the elements represent sequential units of time. Each element contains one or more pointers. The pointer may point to an entry in the filter table, or may be a null pointer. A timer thread periodically checks the timeout array to determine whether any timeouts occur at the current time. The timer thread checks the element of the array corresponding to the current time by computing an index into the array based on the current time.
摘要翻译：描述了用于管理分组流捕获应用中的过滤标准超时的技术。这些技术允许处理在监视大量数据包流时使用的大量超时，而不需要操作系统来管理超时。超时数据结构可以是具有多个元素的圆形阵列。超时数组表示时间跨度，元素表示连续的时间单位。每个元素包含一个或多个指针。指针可以指向过滤器表中的条目，或者可以是空指针。定时器线程会定期检查超时数组，以确定当前是否发生任何超时。定时器线程根据当前时间计算阵列中的索引来检查与当前时间对应的阵列的元素。

4. 发明授权

US08031715B1 Network device having service card for dynamic flow capture and monitoring of packet flows 有权
标题翻译：网络设备具有用于动态流捕获和监视分组流的业务卡
公开(公告)号：US08031715B1
公开(公告)日：2011-10-04
申请号：US12637576
申请日：2009-12-14
申请人： Szelap Philip Chang , Manoj Apte , Saravanan Deenadayalan
发明人： Szelap Philip Chang , Manoj Apte , Saravanan Deenadayalan
IPC分类号： H04L12/28
CPC分类号： H04L43/028 , H04L45/38 , H04L63/0263
摘要： A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the control sources. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow control sources to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.
摘要翻译：网络设备包括执行通信协议的服务卡（例如，动态流捕获（DFC）服务卡），以从一个或多个控制源接收指定至少一个目的地的流捕获信息和用于匹配一个或多个分组的标准流动。网络设备包括从网络接收分组的网络接口卡，用于复制分组的分组复制模块，以及将接收卡的复制分组提供给DFC服务卡的控制单元。网络设备包括高速缓存从控制源最近接收的流捕获信息的过滤器高速缓存。网络设备可以提供指定的基于网络的通信的实时拦截和中继。此外，即使在高容量网络下，本文所描述的技术也允许控制源在指定流捕获信息（例如，在50毫秒内）之后稍微延迟地分组分组流。

5. 发明授权

US07809827B1 Network device having service card for lawful intercept and monitoring of packet flows 有权
标题翻译：网络设备具有合法拦截和监控分组流的业务卡
公开(公告)号：US07809827B1
公开(公告)日：2010-10-05
申请号：US11516878
申请日：2006-09-07
申请人： Manoj Apte , Sandeep Jain , Fritz Budiyanto , Senthil Kumar Duraiswamy , Saravanan Deenadayalan , Yulianto Kokasih Ko
发明人： Manoj Apte , Sandeep Jain , Fritz Budiyanto , Senthil Kumar Duraiswamy , Saravanan Deenadayalan , Yulianto Kokasih Ko
IPC分类号： G06F15/173
CPC分类号： H04L43/028 , H04L45/10 , H04L45/38
摘要： A network device comprises a service card (e.g., a lawful intercept (LI) service card) executing a communication protocol to receive, from one or more sources (e.g., law enforcement agents), intercept information specifying at least one destination and criteria for matching one or more packet flows. The network device further includes a network interface card to receive a packet from a network, and a control unit to provide the packet from the interface card to the LI service card. The LI service card executes a flow match detection module that, when the packet matches the criteria of the intercept information, forwards the packet to the destination specified by the intercept information. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow LEAs to tap packet flows with little delay after specifying intercept information, e.g., within 50 milliseconds, even under high-volume networks.
摘要翻译：网络设备包括执行通信协议的服务卡（例如合法拦截（LI）服务卡），以从一个或多个来源（例如执法人员）接收指定至少一个目的地的拦截信息和用于匹配的标准一个或多个分组流。网络设备还包括从网络接收分组的网络接口卡，以及将接口卡向L1服务卡提供分组的控制单元。 LI服务卡执行流匹配检测模块，当分组符合拦截信息的标准时，将分组转发到由拦截信息指定的目的地。网络设备可以提供指定的基于网络的通信的实时拦截和中继。此外，即使在高容量网络下，本文所描述的技术允许LEA在指定拦截信息（例如，在50毫秒内）之后稍微延迟地敲击分组流。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式