Hewlett-packard Development Company, L.p.

Hewlett-packard Company

Hewlett Packard Enterprise Development LP

Alan R Albrecht

Bruce E LaVigne

Mark Gooch

Steven Glen Jorgensen

Michael P Spratt

Mauricio Sanchez

Steven H Goody

Joseph A Curcio

Daniel J Dove

John Alan Wickeraad

Patricia Ann Thaler

Paul T Congdon

Simon Edwin Crouch

Bruce Edward LaVigne

Jonathan Manuel Watts

Mark Gravel

Thomas A Keaveny

Jonathan Greenlaw

Karen E Kimball

Jonathan Jedwab

Lisa S Brown

Joseph Daniel Gleason

Jayant Kadambi

Gregory C Watson

Mark Savoldi

Stuart Johnston

According to an example, a packet is tunnel encapsulated a packet according to a tunnel encapsulation template. The tunnel encapsulation template includes fields for the tunnel encapsulated packet, and the fields include static fields and variable fields. Field values are inserted into variable fields of the tunnel encapsulation template to generate the tunnel encapsulated packet.

Tunnel encapsulation

System and methods for metering output packet traffic at network devices. Ingress packet lookups are employed in combination with egress packet meters, which can be arranged in parallel fashion, and used to meter traffic across multiple blades of a switch chassis. Also, egress packet traffic metering is accomplished while matching complex ingress rules without additional egress packet processing. The system has a first node for creating requests that contain a number of filter indicies for specifying packet forwarding criteria. The first node also specifies values for the filter and meter indicies based on a packet to be forwarded. The system also has a second node coupled to the first node and to a number of ports. The second node has at least one table for specifying which of the ports are to receive the packet based on the filter values, and at least one table for accounting for egress traffic bandwidth.

System and methods for distributed output packet metering using input lookups

Network devices and methods are provided for packet processing. One method includes using logic embedded in an application specific integrated circuit on a network device to dynamically adjust an access control list. According to the method, the access control list is adjusted in response to information received from a checking functionality related to packets received by the network device from a particular port. The method also includes handling packets later received from the particular port according to the adjusted access control list.

Packet processing with adjusted access control list

A network, network devices, and methods are described for marked packet forwarding. A network device includes a network chip having a number of network ports for receiving and transmitting packets. The network chip includes logic to decapsulate a packet received from a tunnel, mark the packet with a handle associated with an originating network device of the packet using information from an encapsulation header, and forward the marked packet to a checking functionality having a destination address different from an original destination address of the packet.

Marked packet forwarding

A network event indicator system and corresponding method are described. The system includes an event rate classifier and an indicator drive state machine. The event rate classifier receives an event signal representing timing of a network event during a predetermined sample period and transmits an event rate signal. The indicator drive state machine receives the event rate signal and generates a drive indicator signal based on the received event rate signal.

Network event indicator system

One embodiment disclosed relates to a method of mirroring network traffic. A data packet is received by a network device, and an algorithm including randomization is applied to determine whether the data packet is selected to be mirrored. The packet is sent to a destination port, and if the data packet is selected to be mirrored, then the packet is also sent to a mirror port. Another embodiment of the invention relates to a networking device. The networking device includes at least a plurality of ports, a switching/routing engine, and a mirroring engine. The plurality of ports receive and transmit packets therefrom, and the switching/routing engine is coupled to the ports for transferring the packets therebetween. The mirroring engine is configured to apply an algorithm including randomization to select data packets for mirroring. Other embodiments are also disclosed.

Mirroring of a random subset of network traffic

A network, network devices, and methods are described for packet processing. A method includes using logic on a first network device to select a checking functionality based on a number of criteria. The method uses logic on the first network device to select the checking functionality from a list of checking functionalities. The checking functionality is selected for processing packets identified by the first network device. The method also includes using logic on the first network device to configure a tunnel initiation to tunnel packets to a second network device that is associated with the selected checking functionality. The second network device has a destination address different from an original destination address of identified packets.

Tunnel configuration associated with packet checking in a network

Buffer management in a network device. A new data packet is received at a packet buffer queue of the network switch, wherein the new data packet is a portion of a burst block. If the packet buffer queue is full, a data packet from within the packet buffer queue that is not a last sequential data packet of a burst block is dropped.

Buffer management in a network device

Network devices, systems, and methods are provided for packet processing. One network device includes a network chip having a number of network ports for the device. The network chip includes logic to select original data packets, based on a set of criteria, received from or destined to a particular port on the device and to tunnel the selected data packets to a second network device having a different destination address to that of the selected data packets.

Packet tunneling

Network devices, systems, and methods are provided for packet processing. One network device includes a network chip including logic and a number of network ports for the device for receiving and transmitting packets therefrom. The logic is operable to group a number of ports into a membership group based on a criteria, and define a filter index in association with a network packet to indicate the membership group.

Packet processing

A method for checking expected network traffic is disclosed. The method for checking expected network traffic includes accessing pre-registered expected results of a network traffic checking exercise that include expected packet content verification information for individual packets of the network traffic. In addition, the method includes accessing network traffic where individual packets of the network traffic include actual packet content verification information. Individual packets are identified that have expected packet content verification information that does not match their actual packet content verification information and individual packets are identified that have expected packet content verification information that does match their actual packet content verification information.

Methods and systems for checking expected network traffic

Network devices, systems, and methods are provided for packet processing. One method includes receiving a checking functionality rule set as an input to a distribution algorithm. The method includes bifurcating and providing configuration instructions, as an output from the distribution algorithm, to a first logic plane associated with a first logical entity and a second logic plane associated with a second logical entity. A collaboration algorithm is used to provide processing coordination between the first logical entity and the second logical entity.

Packet processing using distribution algorithms

Embodiments of the invention may include network devices, systems, and methods, including executable instructions and/or logic, for remote client remediation. One method includes identifying a client needing remediation, tunnel-encapsulating packets originating from the client during remediation, and forwarding the tunnel-encapsulated packets to a remote remediation functionality different from an original destination address of the packets and having membership in a remediation VLAN different from the original VLAN.

Growing community of inventors

Granite Bay, CA, United States of America

Alan R Albrecht