专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2009088649A3 DETECTING ROOTKITS OVER A STORAGE AREA NETWORK 审中-公开
公开(公告)号：WO2009088649A3
公开(公告)日：2009-07-16
申请号：PCT/US2008/086776
申请日：2008-12-15
申请人： CISCO TECHNOLOGY, INC. , MAINO, Fabio R. , DUTT, Dinesh G. , SHARMA, Samar , PAUL, Arindam
发明人： MAINO, Fabio R. , DUTT, Dinesh G. , SHARMA, Samar , PAUL, Arindam
IPC分类号： G06F21/00 , H04L9/32 , G06F17/30 , G06F11/30
摘要： Embodiments of the invention improve the detection of malicious software applications, such as a rootkit, on hosts configured to access storage volumes over a storage area network (SAN). A rootkit detection program running on a switch may be configured to detect rootkits present on the storage volumes of the SAN. Because the switch may mount and access storage volumes independently from the (possibly comprised) hosts, the rootkit is not able to conceal itself from the rootkit detection program running on the switch.

2. 发明申请

WO2009088649A2 DETECTING ROOTKITS OVER A STORAGE AREA NETWORK 审中-公开
标题翻译：在存储区域网络中检测基础
公开(公告)号：WO2009088649A2
公开(公告)日：2009-07-16
申请号：PCT/US2008086776
申请日：2008-12-15
申请人： CISCO TECH INC , MAINO FABIO R , DUTT DINESH G , SHARMA SAMAR , PAUL ARINDAM
发明人： MAINO FABIO R , DUTT DINESH G , SHARMA SAMAR , PAUL ARINDAM
IPC分类号： G06F21/00 , G06F11/30 , G06F17/30 , H04L9/32
CPC分类号： G06F21/564 , G06F21/566 , G06F2221/2151
摘要： Embodiments of the invention improve the detection of malicious software applications, such as a rootkit, on hosts configured to access storage volumes over a storage area network (SAN). A rootkit detection program running on a switch may be configured to detect rootkits present on the storage volumes of the SAN. Because the switch may mount and access storage volumes independently from the (possibly comprised) hosts, the rootkit is not able to conceal itself from the rootkit detection program running on the switch.
摘要翻译：本发明的实施例改进了被配置为通过存储区域网络（SAN）访问存储卷的主机上的恶意软件应用程序（例如rootkit）的检测。可以将在交换机上运行的rootkit检测程序配置为检测存储在SAN存储卷上的rootkit。因为交换机可以独立于（可能包含的）主机安装和访问存储卷，所以rootkit不能将自己隐藏在交换机上运行的rootkit检测程序中。

3. 发明申请

WO2007127520A3 APPARATUS AND METHODS FOR CONTROLLING A DATA TAPPING SESSION IN A STORAGE AREA NETWORK 审中-公开
公开(公告)号：WO2007127520A3
公开(公告)日：2007-11-08
申请号：PCT/US2007/062035
申请日：2007-02-13
申请人： CISCO TECHNOLOGY, INC., ET AL. , SHARMA, Samar , D'CRUZ, Roy M. , KRISHNAN, Jhaanaki M. , BILLORE, Prashant , DUTT, Dinesh G.
发明人： SHARMA, Samar , D'CRUZ, Roy M. , KRISHNAN, Jhaanaki M. , BILLORE, Prashant , DUTT, Dinesh G.
IPC分类号： G06F15/167
摘要： Disclosed is a session modification mechanism for altering a data tapping process in a storage area network (SAN). In general. a data tapping mechanism is set up so that an applicance receives SAN data that is tapped from a particular SAN session. That is, the data tapping mechanism provides to a particular appliance a copy of the SAN data that is being written from a particular host to a particular storage device. The session modification mechanism allows the appliance to alter various aspects of the SAN session that is to be (or is being) tapped. Examples of various modification features includes (i) redirecting READ commands initiated by the host to the applicance and not sending such command to the storage device, (ii) redirecting both READ and WRITE commands initiated by the host to the appliance and not sending such commands to the storage device, (iii) halting redirection and thereby causing READ commands initiated by the host to be sent to the storage device and WRITE commands initiated by the host to be mirrored to both the storage device and appliance, (iv) quiescing and unquiescing all data I/O's for the particular storage device and appliance, and (v) stopping and starting the data tapping mechanism.

4. 发明申请

WO2007008735A3 APPARATUS AND METHODS FOR DATA TAPPING IN A STORAGE AREA NETWORK 审中-公开
标题翻译：用于存储区域网络中的数据提取的装置和方法
公开(公告)号：WO2007008735A3
公开(公告)日：2007-11-15
申请号：PCT/US2006026640
申请日：2006-07-06
申请人： CISCO TECH INC , SHARMA SAMAR , D CRUZ ROY M , KUMAR SANJAYA , BILLORE PRASHANT , DUTT DINESH G , EDSALL THOMAS J
发明人： SHARMA SAMAR , D CRUZ ROY M , KUMAR SANJAYA , BILLORE PRASHANT , DUTT DINESH G , EDSALL THOMAS J
IPC分类号： G06F15/16 , G06F15/167 , H04L12/28
CPC分类号： H04L67/1097 , H04L63/00 , H04L63/30
摘要： Disclosed are methods and apparatus for data tapping within a storage area network (SAN) and providing tapped data to a third party device, such as an appliance. In general, mechanisms are provided in a SAN to allow a data tap of data flowing between an initiator and a target. In one implementation, a data virtual target (DVT) (314) in created in a network device (304) to intercept data sent by a specific initiator (302) to a specific logical unit of a specific target (306). The data or a copy of the data (316) is sent to both the specific logical unit of the specific target and to an appliance. The data routing may be accomplished by use of a virtual initiator (VI) (313), which is configured to send the data (or a copy of the data) to the specific target and the appliance. In a transparent mode of operations, the DVT has a same PWWN (port world wide name) and FCID (fibre channel identifier) as the specific target. In a first proxy mode of operation, the DVT has a different PWWN and FCID than the specific target. In a second proxy mode of operation, the DVT has a same PWWN and different FCID than the specific target.
摘要翻译：公开了用于在存储区域网络（SAN）内进行数据分接并将分接数据提供给第三方设备（例如设备）的方法和设备。通常，SAN中提供了机制以允许在发起者和目标之间流动数据的数据抽头。在一个实现中，在网络设备（304）中创建的数据虚拟目标（DVT）（314）被创建以截取由特定发起者（302）发送到特定目标（306）的特定逻辑单元的数据。数据或数据的副本（316）被发送到特定目标的特定逻辑单元和设备。数据路由可以通过使用虚拟启动器（VI）（313）来完成，该虚拟启动器被配置为将数据（或数据的副本）发送到特定目标和设备。在透明操作模式下，DVT具有与特定目标相同的PWWN（端口全球名称）和FCID（光纤通道标识符）。在第一代理操作模式中，DVT具有与特定目标不同的PWWN和FCID。在第二代理操作模式中，DVT具有与特定目标相同的PWWN和不同的FCID。

5. 发明申请

WO2006124479A3 CIFS FOR SCALABLE NAS ARCHITECTURE 审中-公开
公开(公告)号：WO2006124479A3
公开(公告)日：2006-11-23
申请号：PCT/US2006/018164
申请日：2006-05-10
申请人： CISCO TECHNOLOGY, INC. , SHARMA, Samar , DUTT, Dinesh, G. , KUMAR, Sanjaya , MAHAJAN, Umesh , EDSALL, Thomas, J.
发明人： SHARMA, Samar , DUTT, Dinesh, G. , KUMAR, Sanjaya , MAHAJAN, Umesh , EDSALL, Thomas, J.
IPC分类号： G06F15/16 , G06F17/30
摘要： A scalable NAS file system and protocols for implementing CIFS thereon are disclosed. In certain embodiments, the protocols implement the CIFS protocol on a scalable File server architecture having one or more protocol termination nodes, one or more File server nodes (16a-16y Fig.1 ), and one or more disk controller nodes ( 18a-18z Fig.1 ). Among the features that may be speciFically implemented are tree access, File access, user authentication, locking, state maintenance, and failover of protocol termination nodes (14a-14x fig.1) and file server nodes ( 16a- 16y fig. l ).

6. 发明申请

WO2005055497A2 APPARATUS AND METHOD FOR PERFORMING FAST FIBRE CHANNEL WRITE OPERATIONS OVER RELATIVELY HIGH LATENCY NETWORKS 审中-公开
标题翻译：用于执行相对较高时间网络的快速光纤通道写操作的装置和方法
公开(公告)号：WO2005055497A2
公开(公告)日：2005-06-16
申请号：PCT/US2004/039904
申请日：2004-11-29
申请人： CISCO TECHNOLOGY, INC. , BASAVAIAH, Murali , AMBATI, Satish , IYENGAR, Magesh , EDSALL, Thomas , DUTT, Dinesh, G. , GAI, Silvano , CHANDRASEKARAN, Varagur, V.
发明人： BASAVAIAH, Murali , AMBATI, Satish , IYENGAR, Magesh , EDSALL, Thomas , DUTT, Dinesh, G. , GAI, Silvano , CHANDRASEKARAN, Varagur, V.
IPC分类号： H04L
CPC分类号： G06F3/0659 , G06F3/0613 , G06F3/0635 , G06F3/067 , H04L67/1097
摘要： A method and apparatus to improve the performance of a SCSI write over a high latency network. The apparatus includes a first Switch close to the initiator in a first SAN and a second Switch close to the target in a second SAN. In various embodiments, the two Switches are border switches connecting their respective SANs to a relatively high latency network between the two SANs. In addition, the initiator can be either directly connected or indirectly connected to the first Switch in the first SAN. The target can also be either directly or indirectly connected to the second Switch in the second SAN. During operation, the method includes the first Switch sending Transfer Ready (Xfr_rdy) frame(s) based on buffer availability to the initiating Host in response to a SCSI Write command from the Host directed to the target. The first and second Switches then coordinate with one another by sending Transfer Ready commands to each other independent of the target's knowledge. The second switch buffers the data received from the Host until the target indicates it is ready to receive the data. Since the Switches send frames to the initiating Host independent of the target, the Switches manipulate the OX_ID and RX_ID fields in the Fibre Channel header of the various commands associated with the SCSI Write. The OX_ID and RX_ID fields are manipulated so as to trap the commands and so that the Switches can keep track of the various commands associated with the SCSI write.
摘要翻译：一种通过高延迟网络提高SCSI写入性能的方法和装置。该设备包括靠近第一SAN中的发起者的第一交换机和在第二SAN中靠近目标的第二交换机。在各种实施例中，两个交换机是将它们各自的SAN连接到两个SAN之间相对较高延迟的网络的边界交换机。此外，启动器可以直接连接或间接连接到第一个SAN中的第一个交换机。目标也可以直接或间接地连接到第二个SAN中的第二个交换机。在操作期间，该方法包括响应于从指向目标的主机的SCSI写入命令，基于发起主机的缓冲区可用性的第一个交换机发送传输就绪（Xfr_rdy）帧。第一个和第二个交换机然后通过发送传输就绪命令相互协调，独立于目标的知识。第二个交换机缓存从主机接收的数据，直到目标指示它准备好接收数据。由于交换机将发送帧发送到独立于目标的发起主机，交换机将处理与SCSI写入相关联的各种命令的光纤通道报头中的OX_ID和RX_ID字段。操作OX_ID和RX_ID字段以捕获命令，以便交换机可以跟踪与SCSI写入相关联的各种命令。

7. 发明申请

WO2005004408A1 FIBRE CHANNEL SWITCH THAT ENABLES END DEVICES IN DIFFERENT FABRICS TO COMMUNICATE WITH ONE ANOTHER WHILE RETAINING THEIR UNIQUE FIBRE CHANNEL DOMAIN_IDS 审中-公开
标题翻译：光纤通道开关，使用不同的织物的终端设备在保留其独特的光纤通道域之前与另一个通信
公开(公告)号：WO2005004408A1
公开(公告)日：2005-01-13
申请号：PCT/US2004/020518
申请日：2004-06-25
申请人： CISCO TECHNOLOGY, INC. , DUTT, Dinesh, G. , EDSALL, Thomas , JAIN, Ankur , GAI, Silvano , BENERJEE, Subrata , BERGAMASCO, Davide , RAIMONDO, Bruno , BHARDWAJ, Rajeev
发明人： DUTT, Dinesh, G. , EDSALL, Thomas , JAIN, Ankur , GAI, Silvano , BENERJEE, Subrata , BERGAMASCO, Davide , RAIMONDO, Bruno , BHARDWAJ, Rajeev
IPC分类号： H04L12/46
CPC分类号： H04L67/1097 , H04L45/04 , H04L2212/00
摘要： An Fibre Channel Switch which enables end devices in different Fabrics to communicate with one another while retaining their unique Fibre Channel Domain_ IDs. The Switch is coupled to a first fabric having a first set of end devices and a second fabric having a second set of end devices. The Switch is configured to enable communication by the first set of end devices associated with the first fabric with the second set of end devices associated with the second set of end devices using the unique Domain_IDs of each of the first set and the second set of end devices. In one embodiment of the invention, the first and second fabrics are first and second Virtual Storage Array Networks (VSANs) respectively. In an alternative embodiment, the first fabric and the second fabric are separate physical fabrics.
摘要翻译：光纤通道交换机使得不同结构中的终端设备能够彼此通信，同时保留其独特的光纤通道Domain_ID。开关耦合到具有第一组端部装置的第一织物和具有第二组端部装置的第二织物。交换机被配置为使用与第一组终端设备相关联的第二组终端设备的第一组终端设备与第一组织相关联的第一组终端设备进行通信，使用第一组和第二组端点中的每一个的唯一Domain_ID 设备。在本发明的一个实施例中，第一和第二织物分别是第一和第二虚拟存储阵列网络（VSAN）。在替代实施例中，第一织物和第二织物是分离的物理织物。

8. 发明申请

WO2003085900A1 LABEL SWITCHING IN FIBRE CHANNEL NETWORKS 审中-公开
标题翻译：光纤通道网络中的标签开关
公开(公告)号：WO2003085900A1
公开(公告)日：2003-10-16
申请号：PCT/US2003/009442
申请日：2003-03-25
申请人： ANDIAMO SYSTEMS, INC. , LEE, Scott, S. , DUTT, Dinesh, G. , EDSALL, Thomas, J.
发明人： LEE, Scott, S. , DUTT, Dinesh, G. , EDSALL, Thomas, J.
IPC分类号： H04L12/46
CPC分类号： H04L45/50 , H04L12/4604 , H04L45/00
摘要： Methods and apparatus are provided for label switched routing in fibre channel networks. Techniques are provided for implementing label switching based on particular characteristics of fibre channel networks. By using label switching, mechanisms such as traffic engineering, security, and tunneling through networks that do not support fibre channel frames can be implemented.
摘要翻译：为光纤通道网络中的标签交换路由提供了方法和设备。提供了基于光纤通道网络的特定特征实现标签切换的技术。通过使用标签交换，可以实现诸如流量工程，安全性和通过不支持光纤信道帧的网络的隧道等机制。

9. 发明申请

WO2006124479A2 CIFS FOR SCALABLE NAS ARCHITECTURE 审中-公开
标题翻译： CIFS可扩展的NAS架构
公开(公告)号：WO2006124479A2
公开(公告)日：2006-11-23
申请号：PCT/US2006018164
申请日：2006-05-10
申请人： CISCO TECH INC , SHARMA SAMAR , DUTT DINESH G , KUMAR SANJAYA , MAHAJAN UMESH , EDSALL THOMAS J
发明人： SHARMA SAMAR , DUTT DINESH G , KUMAR SANJAYA , MAHAJAN UMESH , EDSALL THOMAS J
IPC分类号： G06F17/30 , G06F3/06 , G06F15/167 , H04L29/08 , H04L29/14
CPC分类号： H04L63/08 , G06F17/30197 , H04L67/1002 , H04L67/1008 , H04L67/1097 , H04L69/40
摘要： A scalable NAS file system and protocols for implementing CIFS thereon are disclosed. In certain embodiments, the protocols implement the CIFS protocol on a scalable file server architecture having one or more protocol termination nodes, one or more file server nodes, and one or more disk controller nodes. Among the features that may be specifically implemented are tree access, file access, user authentication, locking, state maintenance, and failover of protocol termination nodes and file server nodes.
摘要翻译：公开了一种可扩展的NAS文件系统和用于在其上实现CIFS的协议。在某些实施例中，协议在具有一个或多个协议终止节点，一个或多个文件服务器节点和一个或多个磁盘控制器节点的可伸缩文件服务器架构上实现CIFS协议。可以具体实现的功能包括协议终止节点和文件服务器节点的树访问，文件访问，用户认证，锁定，状态维护和故障转移。

10. 发明申请

WO2013039643A1 PACKET FORWARDING USING AN APPROXIMATE INGRESS TABLE AND AN EXACT EGRESS TABLE 审中-公开
标题翻译：使用近似生成表和精确排气表的分组转发
公开(公告)号：WO2013039643A1
公开(公告)日：2013-03-21
申请号：PCT/US2012/051048
申请日：2012-08-16
申请人： CISCO TECHNOLOGY, INC. , DHARMAPURIKAR, Sarang , CHU, Kit, Chiu , MADDURY, Mahesh , DUTT, Dinesh, G. , MATUS, Francisco
发明人： DHARMAPURIKAR, Sarang , CHU, Kit, Chiu , MADDURY, Mahesh , DUTT, Dinesh, G. , MATUS, Francisco
IPC分类号： H04L12/56
CPC分类号： H04L45/54 , H04L45/7453 , H04L49/25 , H04L49/30 , H04L49/3009 , H04L49/351 , H04L49/354
摘要： Techniques are provided for forwarding packets via an intermediate network device. A packet comprising a destination MAC address is received at a first port of a network device having a plurality of bi-directional ports. A second port of the network device to which the packet should be forwarded is identified through the use of at least an approximate ingress table at the first port comprising a plurality of compressed destination MAC addresses each having an associated egress port, and the packet is forwarded to the second port. At the second port, a subsequent network device to which the packet should be forwarded is identified through the use of an exact egress table at the second port including exact destination MAC addresses each associated with a network device connected to the second port, and the packet is forwarded to the subsequent network device.
摘要翻译：提供了用于经由中间网络设备转发分组的技术。在具有多个双向端口的网络设备的第一端口处接收包括目的地MAC地址的分组。通过至少使用包括多个压缩目的地MAC地址的第一端口的近似入口表来识别分组应转发到的网络设备的第二端口，每个端口具有相关联的出口端口，并且该分组被转发到第二个港口在第二端口，通过使用第二端口处的精确出口表来识别分组应转发到的后续网络设备，包括与连接到第二端口的网络设备相关联的确切目的地MAC地址，并且分组被转发到后续的网络设备。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式