Hewlett-packard Development Company, L.P.

Hewlett Packard Enterprise Development LP

Daniel E Ford

Charles F Clark

Chuck A Black

Steven V Britt

Ballard Claude Bare

Adrian Cowham

Ted T Nguyen

Jim A Baumgartner

Gregory D Dolkas

Scott A Gulland

Anh Tuan Vuong

Jeffrey A LaBarge

In one embodiment, an edge network device may monitor a network service that is provided at a network service device. Information related to the monitored network service may be temporarily stored at the edge network device and transmitted to a remote network device. In one embodiment, an administrative device may compare current extracted information with stored historical information to determine if a unique machine identifier of an end user device has been spoofed.

Determination of spoofing of a unique machine identifier

A switch comprises a switching module coupled to a plurality of ports. The switching module receives and forwards a plurality of packets through the ports. The switch also comprises a management unit comprising a processor and an agent executable by the processor. The agent causes the processor to monitor each packet received by the switching module and determine whether each such packet contains a predetermined fingerprint. Upon determining that a packet contains the predetermined fingerprint, the processor causes additional information to be included in a copy of the fingerprinted packet and forwarded to a predetermined address. The switching module also forwards the packet containing the predetermined fingerprint, but without the additional information, to an address corresponding to a destination address contained in the packet. A method of programming the switches is also described as well as a management workstation used to program the switches and analyze the fingerprinted packets.

Switch that monitors for fingerprinted packets

A system comprises a processor, a network interface coupled to the processor, and storage accessible to the processor. The network interface is configured to receive network status messages from a plurality of agents across a network. Each network status message indicates a status of a network. The storage comprises a plurality of queues with each queue corresponding to one of the agents. The network status messages from a given agent are stored in a queue corresponding to that agent pending processing by the processor. Upon a number of network status messages in a queue for a particular agent exceeding an agent high water mark, the processor sends a stop message through the network interface to such agent to cause such agent to cease sending network status messages.

Cessation of sending network status messages to a server

A method includes receiving a message to be logged. In response to receiving the message, the message is written to a stream corresponding to an active archive. The active archive includes compressed messages. Also in response to receiving the message, the message is written to an active log without compression.

Network message logging and archival

An embodiment of the present invention comprises a method of configuring one or more target network devices for operation, that further comprises the steps of creating an object for deployment to a predetermined target network device, the object having configuration data for configuring the target network device, and at least one of identification data identifying the object, an autonomous encapsulated agent for executing necessary steps for installing the configuration data, identification data identifying the predetermined target network device, and authentication data for authenticating at least one of the predetermined target network device identification data and object identification data, transporting the object to the predetermined target network device, and the autonomous encapsulated agent begins an on-site process of installing the configuration data in the predetermined target network device.

Autonomous network device configuration method

Methods, systems, and devices are provided for device driver selection. One embodiment of a management station includes a processor, memory in communication with the processor, and program instructions stored in memory and executable on the processor. The program instructions are executable to initiate execution of a particular device function that will use a driver, select a set of drivers based upon defined device information, and call a routine in a particular driver from the selected set of drivers which executes to determine whether the particular driver is most appropriate to perform the particular device function for a particular device.

Device driver selection

Network devices, systems, and methods are described that perform network service monitoring. One method includes examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service, forwarding packet service type information and packet address information to a second network device in response to a determination that the protocol of the packet corresponds to the network service, comparing the packet service type information and an associated service type address to a list of service types and addresses on the second network device, and executing a remedial action if, based on the comparing, it is determined that the network service is an unauthorized service and that a provider of the network service is an unauthorized provider.

Network service monitoring

Methods, computer readable media, and device embodiments are provided for port configuration. One method embodiment includes defining a number of ports for which a number of port configuration properties are to be configured, grouping the number of ports into one or more port configuration groups, and defining the number of port configuration properties to be configured within a particular port configuration group.

Port configuration

Network devices, systems and methods are described that may be used in network switch deployment. One method embodiment includes physically connecting a network switch to a network prior to booting the network switch, booting the network switch into a non-bridging mode, and providing the network switch with a configuration while the switch is in the non-bridging mode.

Network switch deployment

Network devices, systems, and methods are described that perform network service monitoring. One method includes examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service, forwarding an event to a second network device in response to a determination that the protocol of the packet corresponds to the network service, determining whether the network service is an authorized service by comparing the network service to a list of network services, and executing a remedial action in response to a determination that the network service is an unauthorized service.

A method and system for monitoring a characteristic relating to real-time network health are described. The method includes detecting a functionality attribute of a service application accessed with a server of the network. Networking devices of the network are interrogated in relation to an operational status thereof. The real-time network health characteristic is inferred from the functionality attribute and/or the operational status detected.

Method and system for monitoring network health

Systems, methods, and device are provided for device status identification. One method embodiment includes transmitting an SNMP message to a device. The method includes opening a socket connection on the device in response to an SNMP error message returned from the device. And, the method includes initiating a time-out function upon opening the socket connection.

Device status identification

An access control system for use with a networked computer system [] comprises a host [] of the networked computer system, and a bit stream whereby information is transferred from a source of said bit stream to said host [], said bit stream bearing a routing label identifying an origin of said bit stream in the computer network. The system further comprises a word integrated with said bit stream, said word including a routing label identifying an origin of said word in the computer network, and an access control module in communication with said host, said access control module operable to make an identification, wherein the identification includes comparing the origin of said bit stream to the origin of said word.

Growing community of inventors

Granite Bay, CA, United States of America

Daniel E Ford