Mcafee, Inc.

Sable Networks, Inc.

Caspian Networks, Inc.

Faizel Lakhani

Ratinder Paul Singh Ahuja

Ratinder Ahuja

William James Deninger

Joel Evans Christner

Bert H Tanaka

Lawrence G Roberts

Jitendra B Gaitonde

Damodar K Hegde

John A McBrayne

Rahila Kasim

Gary G Croke

Tricci Y So

Chaitra Jayaram

Swati Patil

Joel Christener

Harsimran S Sandhu

Sirisha Ganti

Gary Croke

Riad Hartani

Sridevi Haridasa

Phillip Laverdiere

A method is provided in one example and includes generating a query for a database for information stored in the database. The information relates to data discovered through a capture system. The method further includes generating an Online Analytical Processing (OLAP) element to represent information received from the query. A rule based on the OLAP element is generated and the rule affects data management for one or more documents that satisfy the rule. In more specific embodiments, the method further includes generating a capture rule that defines items the capture system should capture. The method also includes generating a discovery rule that defines objects the capture system should register. In still other embodiments, the method includes developing a policy based on the rule, where the policy identifies how one or more documents are permitted to traverse a network.

System and method for data mining and security policy management

A method is provided in one example embodiment and it includes identifying a root term and determining one or more other terms belonging to a group associated with the root term. The method also includes selecting one or more of the terms from the group and generating a concept based on the selected terms from the group, wherein the concept is applied to a rule that affects data management for one or more documents that satisfy the rule. In more specific embodiments, the root term is identified via a search or via an incident list. In other embodiments, a collection of meaningful terms is provided to assist in determining the other terms for the group, the collection of meaningful terms being generated based on the root term. The concept can be used to automatically mark one or more documents that relate to the concept.

System and method for concept building

In one embodiment, a method is provided and includes capturing a plurality of packet streams, recreating a plurality of flows from the packet streams, and analyzing the flows to identify one or more incidents. The incidents identify one or more pieces of data. The incidents are filtered and the incidents are rendered on a display for an end user that initiated the filtering operation. In other embodiments, the display allows the end user to view a selected one of a group of attributes for the incidents. The display allows the end user to open a captured object associated with a specific incident. In still other embodiments, the display allows a user to filter the incidents using a selected one of a group of group options such as content, destination IP, destination location, destination port, filename, host IP, etc.

System and method for managing data and policies

A mechanism is disclosed for enabling a plurality of logical routers to be implemented within a single physical router. The logical routers emulate the behavior of interconnected, standalone routers. For example, the logical routers may be made aware of the presence of other logical routers within the same physical router. The logical routers may also have internal 'links' to each other. In addition, the logical routers may send routing information to each other. Thus, to each other and to routers external to the single physical router, the logical routers appear as if they are interconnected standalone routers. The logical routers may be further endowed with an ability to determine whether the next hop for a set of information (e.g. a packet) is to a logical router within the same physical router or to an external router. The logical routers take advantage of this distinction to perform routing between logical routers more efficiently.

Mechanism for implementing multiple logical routers within a single physical router

An invention is provided for affording an aggregate micro-flow having intelligent load balancing. Initially, a set of label switched paths (LSPs) is defined for a network domain. Then, as the network receives a set of data packets, a micro-flow comprising the set of data packets is defined. In addition to the information included in each received data packet, the micro-flow includes a quality of service (QoS) type. A particular label switched path (LSP) is selected from the defined set of LSPs, based on the QoS type of the micro-flow, and the micro-flow is transmitted along the selected LSP.

Micro-flow label switching

Growing community of inventors

Campbell, CA, United States of America

Faizel Lakhani