Qwilt, Inc.

Cisco Technology, Inc.

Alon Maor

Yoav Gressel

Dan Sahar

Gaash Hazan

Doron Oz

Oren Shemesh

Assi Abramovitz

Arnon Warshavsky

Doron Jacoby

Methods and systems are provided for generating a traffic simulation respective of at least one content storing server, the content storing server operative for caching popular content. One method includes sniffing traffic between at least a first portion of a network and at least a second portion of the network, identifying, from the sniffed traffic, at least a source of content and at least a destination of the content, determining if the content is stored on a cache, simulating a notification respective of the content, and generating a simulation of traffic respective at least of: the content and the simulated notification.

System and method of performing analytics with respect to content storing servers caching popular content

An apparatus comprising a network interface to at least a first portion of a network and at least a second portion of a network. A deep-packet-inspection (DPI) unit identifies at least a source of content, the DPI unit further inspecting one or more packets provided from the identified at least a source of content over the first portion of the network, each packet having at least a specific source address and a specific destination address. A storage stores at least a portion of the content. A content delivery unit receives a request from the second portion of the network for requested content from the identified at least a source of content and responsive thereto provides the requested content, or portions of the requested content, from the storage to the second network if the requested content, or portions of the requested content, is stored in the storage, or otherwise sending the request over the first portion of the network to the identified at least a source of content for the requested content, or missing portions of the requested content.

System for detection of content servers and caching popular content therein

An apparatus including a network interface to a first portion of a network and a second portion of a network. A deep-packet-inspection (DPI) unit identifies a content source, inspects one or more packets provided from the identified source over the first network portion, each packet having a source address and a destination address. A storage stores at least a portion of the content. A content delivery unit receives a request from the second network portion for requested content from the identified source and responsive thereto provides the requested content, or portions of the requested content, from the storage to the second network portion if the requested content, or a portion of the requested content, is stored in the storage, or otherwise sends the request over the first network portion to the identified source for the requested content, or missing portions of the requested content.

In one embodiment, flows are monitored that are open for a length of time until ending by either a distinct ending or by being silent longer than a configured aging timer (wherein a silent flow is a 'zombie flow'). In response to each first flow ending, a total flow time value may be increased by a length of time that first flow was open, and in response to each second flow ending by aging, a zombie flow time value may be increased by the aging timer. A ratio of zombie flows at a particular time in the computer network that will be ended by aging may be estimated as the zombie flow time value divided by the total flow time value. Also, in other embodiments, a capacity improvement, performance hit, and accuracy hit may be predicted based on a new aging timer value.

Growing community of inventors

Shoham, Israel

Alon Maor