专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08830997B1 Preventing denial-of-service attacks employing broadcast packets 有权
标题翻译：使用广播数据包防止拒绝服务攻击
公开(公告)号：US08830997B1
公开(公告)日：2014-09-09
申请号：US12917417
申请日：2010-11-01
申请人： Nafea Bishara , Tsahi Daniel , David Melman , Nir Arad
发明人： Nafea Bishara , Tsahi Daniel , David Melman , Nir Arad
IPC分类号： H04L12/28
CPC分类号： H04L45/00 , H04L12/4641 , H04L45/54 , H04L63/1458
摘要： A network device including a processor having an internet protocol (IP) address, and a processor port configured to communicate exclusively with the processor. The network device also includes a plurality of network ports configured to communicate with network nodes external to the network device. In addition, the network device includes a forwarding engine configured to selectively transfer packets (i) among the plurality of network ports, and (ii) between the processor port and the plurality of network ports; receive a broadcast packet from one of the plurality of network ports, the broadcast packet including a target IP address; and forward the broadcast packet to the processor, via the processor port, only when both (i) the broadcast packet is a control packet, and (ii) the target IP address of the broadcast packet matches the IP address of processor.
摘要翻译：一种网络设备，包括具有互联网协议（IP）地址的处理器和被配置为与处理器专用通信的处理器端口。网络设备还包括被配置为与网络设备外部的网络节点进行通信的多个网络端口。另外，网络设备包括：转发引擎，被配置为选择性地传送多个网络端口中的分组（i），以及（ii）处理器端口和多个网络端口之间; 从所述多个网络端口之一接收广播分组，所述广播分组包括目标IP地址; 并且只有当（i）广播分组都是控制分组时，并且（ii）广播分组的目标IP地址与处理器的IP地址匹配，则经由处理器端口将广播分组转发到处理器。

2. 发明授权

US07826447B1 Preventing denial-of-service attacks employing broadcast packets 有权
标题翻译：使用广播数据包防止拒绝服务攻击
公开(公告)号：US07826447B1
公开(公告)日：2010-11-02
申请号：US11196961
申请日：2005-08-04
申请人： Nafea Bishara , Tsahi Daniel , David Melman , Nir Arad
发明人： Nafea Bishara , Tsahi Daniel , David Melman , Nir Arad
IPC分类号： H04L12/28 , H04L12/56
CPC分类号： H04L45/00 , H04L12/4641 , H04L45/54 , H04L63/1458
摘要： An apparatus having a corresponding method and computer program comprises a processor; a plurality of ports to transmit and receive packets of data, the plurality of ports comprising a processor port in communication with the processor, the packets comprising broadcast packets and multicast packets; a memory to store a table that associates the processor port with one or more Internet protocol (IP) addresses; and a forwarding engine to transfer the packets between the ports, to transfer each of the broadcast packets to the processor port only when the table associates a target IP address of the broadcast packet with the processor port, and to transfer each of the multicast packets to the processor port only when the table associates a target IP address of the multicast packet with the processor port.
摘要翻译：具有相应方法和计算机程序的装置包括处理器; 用于发送和接收数据分组的多个端口，所述多个端口包括与所述处理器通信的处理器端口，所述分组包括广播分组和多播分组; 用于存储将处理器端口与一个或多个因特网协议（IP）地址相关联的表的存储器; 以及转发引擎，用于在端口之间传送分组，仅当该表将广播分组的目标IP地址与处理器端口相关联时将每个广播分组传送到处理器端口，并将每个多播分组传送到处理器端口只有当表将组播数据包的目标IP地址与处理器端口相关联时，

3. 发明授权

US07796590B1 Secure automatic learning in ethernet bridges 有权
标题翻译：在以太网桥上安全自动学习
公开(公告)号：US07796590B1
公开(公告)日：2010-09-14
申请号：US11346089
申请日：2006-02-01
申请人： David Melman , Nir Arad , Tsahi Daniel
发明人： David Melman , Nir Arad , Tsahi Daniel
IPC分类号： H04L12/54
CPC分类号： H04L45/02 , H04L45/36 , H04L45/66 , H04L49/3009 , H04L49/351 , H04L63/0236 , H04L63/1458
摘要： A method of managing network traffic. The method includes initializing a database in communication with a network device. The database includes a number of MAC address entries and a network flooding entry associated with each of the number of MAC address entries. Each of the number of MAC address entries is associated with a station known to the network. The method also includes receiving network traffic at the network device. The network traffic is associated with a MAC source address. The method further includes determining whether the MAC source address is included in the database, automatically learning a location associated with the MAC source address, and forwarding the network traffic over the network if the MAC source address is included in the database. Additionally, the method includes dropping or trapping the network traffic if the MAC source address is not included in the database. Dropping the network traffic is performed without interaction with a CPU.
摘要翻译：一种管理网络流量的方法。该方法包括初始化与网络设备通信的数据库。数据库包括多个MAC地址表项和与每个MAC地址表项相关联的网络洪泛条目。 MAC地址表项中的每一个与网络已知的站相关联。该方法还包括在网络设备处接收网络流量。网络流量与MAC源地址相关联。该方法还包括：如果MAC源地址包括在数据库中，则确定MAC源地址是否包括在数据库中，自动学习与MAC源地址相关联的位置，以及如果MAC源地址被包括在网络中，则转发网络流量。此外，如果MAC源地址不包括在数据库中，则该方法包括丢弃或捕获网络流量。执行网络流量下降而不与CPU进行交互。

4. 发明申请

US20100142398A1 HARDWARE IMPLEMENTATION OF NETWORK TESTING AND PERFORMANCE MONITORING IN A NETWORK DEVICE 有权
标题翻译：网络测试和性能监控在网络设备中的硬件实现
公开(公告)号：US20100142398A1
公开(公告)日：2010-06-10
申请号：US12691412
申请日：2010-01-21
申请人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
发明人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
IPC分类号： H04L12/26
CPC分类号： H04L1/24 , H04L43/028 , H04L43/0829 , H04L43/087 , H04L43/106 , H04L43/50
摘要： An embodiment of the present invention offloads the generation and monitoring of test packets from a Central processing Unit (CPU) to a dedicated network integrated circuit, such as a router, bridge or switch chip associated with the CPU. The CPU may download test routines and test data to the network IC, which then generates the test packets, identifies and handles received test packets, collects test statistics, and performs other test functions all without loading the CPU. The CPU may be notified when certain events occur, such as when throughput or jitter thresholds for the network are exceeded.
摘要翻译：本发明的实施例将测试分组的生成和监视从中央处理单元（CPU）卸载到专用网络集成电路，例如与CPU相关联的路由器，桥接器或交换芯片。 CPU可以将测试例程和测试数据下载到网络IC，然后生成测试数据包，识别和处理接收到的测试数据包，收集测试统计信息，并在不加载CPU的情况下执行其他测试功能。当某些事件发生时，例如当网络的吞吐量或抖动阈值被超过时，可能会通知CPU。

5. 发明申请

US20070223388A1 Hardware implementation of network testing and performance monitoring in a network device 有权
标题翻译：网络设备中网络测试和性能监控的硬件实现
公开(公告)号：US20070223388A1
公开(公告)日：2007-09-27
申请号：US11387549
申请日：2006-03-22
申请人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
发明人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
IPC分类号： H04J1/16
CPC分类号： H04L1/24 , H04L43/028 , H04L43/0829 , H04L43/087 , H04L43/106 , H04L43/50
摘要： An embodiment of the present invention offloads the generation and monitoring of test packets from a Central processing Unit (CPU) to a dedicated network integrated circuit, such as a router, bridge or switch chip associated with the CPU. The CPU may download test routines and test data to the network IC, which then generates the test packets, identifies and handles received test packets, collects test statistics, and performs other test functions all without loading the CPU. The CPU may be notified when certain events occur, such as when throughput or jitter thresholds for the network are exceeded.
摘要翻译：本发明的实施例将测试分组的生成和监视从中央处理单元（CPU）卸载到专用网络集成电路，例如与CPU相关联的路由器，桥接器或交换芯片。 CPU可以将测试例程和测试数据下载到网络IC，然后生成测试数据包，识别和处理接收到的测试数据包，收集测试统计信息，并在不加载CPU的情况下执行其他测试功能。当某些事件发生时，例如当网络的吞吐量或抖动阈值被超过时，可能会通知CPU。

6. 发明授权

US07668107B2 Hardware implementation of network testing and performance monitoring in a network device 有权
标题翻译：网络设备中网络测试和性能监控的硬件实现
公开(公告)号：US07668107B2
公开(公告)日：2010-02-23
申请号：US11387549
申请日：2006-03-22
申请人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
发明人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
IPC分类号： H04J1/16
CPC分类号： H04L1/24 , H04L43/028 , H04L43/0829 , H04L43/087 , H04L43/106 , H04L43/50
摘要： An embodiment of the present invention offloads the generation and monitoring of test packets from a Central processing Unit (CPU) to a dedicated network integrated circuit, such as a router, bridge or switch chip associated with the CPU. The CPU may download test routines and test data to the network IC, which then generates the test packets, identifies and handles received test packets, collects test statistics, and performs other test functions all without loading the CPU. The CPU may be notified when certain events occur, such as when throughput or jitter thresholds for the network are exceeded.
摘要翻译：本发明的实施例将测试分组的生成和监视从中央处理单元（CPU）卸载到专用网络集成电路，例如与CPU相关联的路由器，桥接器或交换芯片。 CPU可以将测试例程和测试数据下载到网络IC，然后生成测试数据包，识别和处理接收到的测试数据包，收集测试统计信息，并在不加载CPU的情况下执行其他测试功能。当某些事件发生时，例如当网络的吞吐量或抖动阈值被超过时，可能会通知CPU。

7. 发明授权

US07881221B2 Hardware implementation of network testing and performance monitoring in a network device 有权
标题翻译：网络设备中网络测试和性能监控的硬件实现
公开(公告)号：US07881221B2
公开(公告)日：2011-02-01
申请号：US12691412
申请日：2010-01-21
申请人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
发明人： Nir Arad , Tsahi Daniel , Maxim Mondaeev
IPC分类号： H04L1/00
CPC分类号： H04L1/24 , H04L43/028 , H04L43/0829 , H04L43/087 , H04L43/106 , H04L43/50
摘要： An embodiment of the present invention offloads the generation and monitoring of test packets from a Central processing Unit (CPU) to a dedicated network integrated circuit, such as a router, bridge or switch chip associated with the CPU. The CPU may download test routines and test data to the network IC, which then generates the test packets, identifies and handles received test packets, collects test statistics, and performs other test functions all without loading the CPU. The CPU may be notified when certain events occur, such as when throughput or jitter thresholds for the network are exceeded.
摘要翻译：本发明的实施例将测试分组的生成和监视从中央处理单元（CPU）卸载到专用网络集成电路，例如与CPU相关联的路由器，桥接器或交换芯片。 CPU可以将测试例程和测试数据下载到网络IC，然后生成测试数据包，识别和处理接收到的测试数据包，收集测试统计信息，并在不加载CPU的情况下执行其他测试功能。当某些事件发生时，例如当网络的吞吐量或抖动阈值被超过时，可能会通知CPU。

8. 发明授权

US07796594B2 Logical bridging system and method 有权
标题翻译：逻辑桥接系统和方法
公开(公告)号：US07796594B2
公开(公告)日：2010-09-14
申请号：US12030822
申请日：2008-02-13
申请人： David Melman , Nir Arad , Nafea Bshara
发明人： David Melman , Nir Arad , Nafea Bshara
IPC分类号： H04L12/28
CPC分类号： H04L45/04 , H04L12/46 , H04L12/4625 , H04L45/00 , H04L45/08 , H04L45/60 , H04L49/109 , H04L49/351
摘要： A system and method of extending a standard bridge to enable execution of logical bridging functionality are disclosed. In some implementations, a logical bridge may assign source logical port information to a data packet based on characteristics of the data packet, employ the source logical port information to learn the source address and to forward the data packet to a logical egress port, and map the logical egress port to a physical egress port at which the data packet is to be egressed. A tunnel interface may optionally be applied to a data packet upon egress.
摘要翻译：公开了一种扩展标准网桥以实现逻辑桥接功能的执行的系统和方法。在一些实现中，逻辑桥可以基于数据分组的特性将源逻辑端口信息分配给数据分组，使用源逻辑端口信息来学习源地址并将数据分组转发到逻辑出口端口，并且映射到出口数据包的物理出口端口的逻辑出口端口。隧道接口可以可选地在出口时应用于数据分组。

9. 发明授权

US08660120B2 Packet forwarding apparatus and method 有权
标题翻译：分组转发装置和方法
公开(公告)号：US08660120B2
公开(公告)日：2014-02-25
申请号：US13340393
申请日：2011-12-29
申请人： David Melman , Nir Arad , Nafea Bshara
发明人： David Melman , Nir Arad , Nafea Bshara
IPC分类号： H04L12/28
CPC分类号： H04L45/04 , H04L12/46 , H04L12/4625 , H04L45/00 , H04L45/08 , H04L45/60 , H04L49/109 , H04L49/351
摘要： A network device includes at least one source physical port configured to be coupled to a network, a plurality of egress ports, and a packet processor. The packet processor includes a processing stage configured to implement a logical port assignment mechanism to assign source logical port information to a data packet received via one of the at least one source physical port, wherein the source logical port information is based on characteristics of the data packet, wherein the source logical port information corresponds to a logical entity that is different from any source physical port, and a forwarding engine to determine one or more egress ports for forwarding the data packet based on at least the assigned source logical port information.
摘要翻译：网络设备包括被配置为耦合到网络，多个出口端口和分组处理器的至少一个源物理端口。分组处理器包括处理级，其被配置为实现逻辑端口分配机制以将源逻辑端口信息分配给经由至少一个源物理端口之一接收的数据分组，其中源逻辑端口信息基于数据的特性分组，其中所述源逻辑端口信息对应于不同于任何源物理端口的逻辑实体，以及转发引擎，用于基于至少所分配的源逻辑端口信息来确定用于转发所述数据分组的一个或多个出口。

10. 发明申请

US20120106553A1 PACKET FORWARDING APPARATUS AND METHOD 有权
标题翻译：分组装置和方法
公开(公告)号：US20120106553A1
公开(公告)日：2012-05-03
申请号：US13340393
申请日：2011-12-29
申请人： DAVID MELMAN , Nir Arad , Nafea Bshara
发明人： DAVID MELMAN , Nir Arad , Nafea Bshara
IPC分类号： H04L12/56
CPC分类号： H04L45/04 , H04L12/46 , H04L12/4625 , H04L45/00 , H04L45/08 , H04L45/60 , H04L49/109 , H04L49/351
摘要： A network device includes at least one source physical port configured to be coupled to a network, a plurality of egress ports, and a packet processor. The packet processor includes a processing stage configured to implement a logical port assignment mechanism to assign source logical port information to a data packet received via one of the at least one source physical port, wherein the source logical port information is based on characteristics of the data packet, wherein the source logical port information corresponds to a logical entity that is different from any source physical port, and a forwarding engine to determine one or more egress ports for forwarding the data packet based on at least the assigned source logical port information.
摘要翻译：网络设备包括被配置为耦合到网络，多个出口端口和分组处理器的至少一个源物理端口。分组处理器包括处理级，其被配置为实现逻辑端口分配机制以将源逻辑端口信息分配给经由至少一个源物理端口之一接收的数据分组，其中源逻辑端口信息基于数据的特性分组，其中所述源逻辑端口信息对应于不同于任何源物理端口的逻辑实体，以及转发引擎，用于基于至少所分配的源逻辑端口信息来确定用于转发所述数据分组的一个或多个出口。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式