Tippingpoint Technologies, Inc.

Cisco Technology, Inc.

Hewlett-packard Development Company, L.p.

3com Corporation

Craig S Cantrell

Dennis James Cox

Brian Smith

Marc Willebeek-LeMair

Donovan Kolbly

John Francis McHale

Robert H Locklear, Jr

Kip R McClanahan

Joe Wayne Blackard

Francis S Webster, Iii

Charles R Buckman

Jon Harald Werner

James R Sisk

William Keith Brewer

Jonathan Harrod

Anthony J P Carew

Donovan M Kolby

John H Werner

A network node includes a classify engine interfaced with the Internet. The classify engine accepts packets from the Internet and determines classification information for each packet. A process engine is interfaced with the classify engine, and has ports, each port being associated with a function. A controller is interfaced with the classify engine and the process engine. The controller programs the classify engine with a dataflow program to route each packet to a predetermined port of the process engine based on the classification information of the packet.

System and method for processing network packet flows

A system and method provides a broadband network node for a best effort network such as the Internet or intranets which supports the inexpensive and rapid deployment of services to the best efforts network. Separate data path and control path mechanisms allow high-speed data transfers with parallel processing flows for the data path that are controlled across data flows by the control path. Packets are classified, modified and shaped to enable the service on the network with an accountant to track packet traffic for control and billing purposes. A series of processing blades perform a modification function for each blade that processes packets according to classifications. The processing blades are modular and scalable for insertion in the broad band switch to rapidly adapt the broadband network node for new services.

An active network defense system is provided that is operable to monitor and block traffic in an automated fashion. This active network defense system is placed in-line with respect to the packet traffic data flow as a part of the network infrastructure. In this configuration, inspection and manipulation of every passing packet is possible. An algorithmic filtering operation applies statistical threshold filtering to the data flow in order to identify threats existing across multiple sessions. A trigger filtering operation applies header and content match filtering to the data flow in order to identify threats existing within individual sessions. Threatening packet traffic is blocked and threatening sessions are terminated. Suspicious traffic is extracted from the data flow for further examination with more comprehensive content matching as well as asset risk analysis. A flow control mechanism is provided to control passage rate for packets passing through the data flow.

Active network defense system and method

A network discovery functionality, intrusion detector functionality and firewalling functionality are integrated together to form a network security system presenting a self-deploying and self-hardening security defense for a network.

Network security system integration

A packet filtering operation implements a hierarchical technique. Received packet traffic is first filtered with a first filtering criteria. This first filtering action generates a first pass traffic portion and a fail traffic portion from the received packet traffic. The fail traffic portion is then second filtered with a second filtering criteria. This second filtering action generates a second pass traffic portion and a reject traffic portion. The first filtering criteria provide for higher throughput, lower accuracy processing while the second filtering criteria provide for lower throughput, higher accuracy processing. Dynamic adjustments may be made to the first and second filtering criteria to achieve better overall packet filtering performance. For example, load is measured and the filtering criteria adjusted to better balance load between the hierarchical filtering actions.

Multi-level packet screening with dynamically selected filtering criteria

A communication system includes a number of communication devices coupled to a data network using communication servers. The communication system supports communication sessions between a variety of networks and devices using, at least in part, XDSL communication techniques. Specifically, information associated with a session passes between a device and an associated server using a modifiable number of XDSL modems and associated twisted pair lines.

Data communication using a modifiable number of XDSL modems

A remote XDSL transceiver unit (,) includes an XDSL transceiver (,) and a control block (,). The XDSL transceiver (,) is operable to establish and communicate across an XDSL physical layer. The control block (,) is coupled to the XDSL transceiver (,) and operates to transmit a request for service to a loop termination point. The control block (,) also operates to identify a signal received from the loop termination point (,) and respond based upon a current context of the remote XDSL transceiver unit (,). Further, the control block (,) operates to control power-up and training of the XDSL transceiver (,) such that the XDSL physical layer can be dynamically brought up and down. In one embodiment, the control block (,) operates to store profile information for an established XDSL physical layer to use for future re-establishing of the XDSL physical layer.

Remote XDSL transceiver unit and method of operation

A communication system includes an access server that communicates information between a wide area network (WAN) and a local area network (LAN). The access server includes a WAN interface, a switch fabric, a number of route processors, and a LAN interface. The switch fabric directs information from the WAN interface to a selected route processor based on its loading characteristics.

Growing community of inventors

Austin, TX, United States of America

Craig S Cantrell