Cisco Technology, Inc.

Frank Gerard Bordonaro

Uwe Sellentin

Paul Aloysius Schmidt

John P Fussell

Bernie P Pearce

Kui Zhang

Satyanarayana Rao Raparla

John Lautmann

Scott Allan Bales

Louis F Menditto

Robert Michael Batz

Arun G Khanna

Christopher O'Rourke

Amitava Das

Arunkumar Bhushappagala Thippeswamy

Scott Allen Bales

Glenn D Watson

Gnanaprakasam Pandian

Kushal A Patel

Richard Brian Livingston

Ravi Periasamy

Ramin Naderi

Andrew Joseph Mead

Barry V Fussell

Patricia Ann Webster

Paul A Schmidt

Christopher C O'ROURKE

Techniques for responding to intrusions on a packet switched network include receiving user data at a subscriber-aware gateway server between a network access server and a content server. The user data includes subscriber identifier data that indicates a unique identifier for a particular user, network address data that indicates a network address for a host used by the particular user, NAS data that indicates an identifier for the network access server, flow list data that indicates one or more open data packet flows, and suspicious activity data. The suspicious activity data indicates a value for a property of the open data packet flows that indicates suspicious activity. It is determined whether an intrusion condition is satisfied based on the suspicious activity data. If the intrusion condition is satisfied, then the gateway responds based at least in part on user data other than the network address data.

Techniques for network protection based on subscriber-aware application proxies

A signaling network node is configured for identifying a received signaling message as belonging to one of a plurality of prescribed originating node groups, based on prescribed message class selection criteria. Each originating node group has at least one originating node and is assigned at least one congestion threshold relative to a message rate (e.g., messages per unit time or number of bytes per unit time). The signaling network node determines the message rate for each corresponding originating node group; if the message rate for an originating node group exceeds the corresponding at least one congestion threshold, the signaling network node outputs a congestion signaling message to the originating node having sent the signaling message, for reduction of the corresponding message rate.

Arrangement for controlling congestion in an SS7 signaling node based on packet classification

A method for communicating data is provided that includes receiving a plurality of bits associated with a communications flow and determining whether one or more samples included in the flow should be suppressed. The method also includes suppressing a selected one or more of the samples if the selected samples are similar to previously received samples. The cell site element is further operable to invert one or more selected header bits. In a more particular embodiment, the bits to be inverted are part of a fixed length field and the inverted bits are odd. The inversion of the bits reduces packet overhead that is present in an HDLC communications environment.

System and method for mitigating the effects of bit insertion in a communications environment

An apparatus for communicating data is provided that includes a cell site element associated with a base transceiver station and operable to receive a plurality of packets associated with a communications flow, the packets including a plurality of subrates. The cell site element is further operable to detect a congestion condition via a measurement of a level in a receive jitter buffer. When the congestion condition exists, individual subrates can be dropped from subsequent backhaul packets until congestion subsides. In more particular embodiments, the cell site element can be informed that congestion exists, whereby a congestion level is assigned to a collection of the subrates. In addition, the cell site element prioritizes the subrates and removes individual samples from one or more of the packets; high priority calls and critical radio control information are not affected during the congestion condition.

System and method for detecting and regulating congestion in a communications environment

An apparatus for communicating data is provided that includes a cell site element associated with a base transceiver station and operable to receive a plurality of packets associated with a communications flow, the packets including a plurality of subrates. The cell site element is further operable to detect a congestion condition via a measurement of a level in a receive jitter buffer. When the congestion condition exists, individual subrates can be dropped from subsequent backhaul packets until congestion subsides. Single timeslots of the flow are systematically added back during a configured time interval such that congestion abatement will back-off gradually. In more particular embodiments, the cell site element can be informed that congestion exists, whereby a congestion level is assigned to a collection of the subrates. In addition, the cell site element prioritizes the subrates and removes individual samples from one or more of the packets.

System and method for addressing dynamic congestion abatement for GSM suppression/compression

A method for communicating data is provided that includes receiving a plurality of bits associated with a communications flow and determining whether one or more samples included in the flow should be suppressed. The method also includes suppressing a selected one or more of the samples. The method also includes retransmitting certain samples when a given sample has stopped changing, in comparison to a previously received sample, for a configured time interval.

System and method for implementing a preemptive retransmit for error recovery in a communications environment

A device for measuring network performance in an Internet protocol (IP) network including a counter generating a send sequence number representing a relative send timing indicator for a data packet sent to a respondent network address. The counter generates a receive sequence number representing a relative receive timing indicator for a return data packet received by the device. A comparator compares the send sequence number with the receive sequence number to measure data packet loss.

Method and apparatus for measuring network data packet delay, jitter and loss

A method for operating a computer network has a source router transmit a first message to be received by an intermediate router of the computer network, the first message to activate the intermediate router to listen for a designated time period for the intermediate router to receive a second message. Upon receiving a second message by the intermediate router during the designated time period, the intermediate router responds to the second message in response to receiving the second message during the designated time period.

Method and apparatus for measuring latency of a computer network

A method for communicating data is provided that includes receiving a plurality of bits associated with a communications flow and determining whether one or more samples included in the flow should be suppressed. The method also includes suppressing a selected one or more of the samples if the selected samples are similar to previously received samples. In a more particular embodiment, the method also includes positioning unique samples that are included in the flow in a super-frame to be communicated to a next destination. Additionally, the method may include receiving the unique samples and evaluating the unique samples in order to restore a plurality of bits associated with the communications flow.

System and method for implementing dynamic suppression and recreation of suppressed data in a communications environment

A method for communicating data is provided that includes receiving a plurality of bits associated with a communications flow and inspecting the bits. The method also includes determining whether one or more samples included in the flow should be suppressed. A portion of the bits is converted to 1 bits such that they are designated for later suppression. A selected one or more of the samples are suppressed if the selected samples are designated for suppression.

System and method for determining whether to dynamically suppress data in a communications environment

A method for communicating data is provided that includes receiving a plurality of bits associated with a communications flow and determining whether one or more samples included in the flow should be suppressed. The method further includes suppressing a selected one or more of the samples if the selected samples are similar to previously received samples and interleaving one or more voice data segments associated with a voice call into outgoing Internet protocol (IP) traffic flows. In more particular embodiments, packets that do not come in from a GSM port on the cell site element are designated as default best effort (BE) traffic.

System and method for implementing quality of service in a backhaul communications environment

A method for communicating data is provided that includes receiving a plurality of cells associated with a communications flow and determining whether one or more of the cells included in the flow should be suppressed, whereby a selected one or more of the cells are suppressed. The method also includes identifying cells that cannot be suppressed and suppressing portions thereof.

System and method for implementing suppression in a communications environment

An apparatus for measuring data transmission performance through a packet switched network, the apparatus having a time of day (TOD) clock for determining a send TOD timestamp, and for determining a present TOD when a data packet returns to the sending apparatus. The apparatus further comprising a counter that is incremented by a send sequence number each time data is sent, and one or more subtractors for calculating a first time difference between the send TOD timestamp and a receive TOD timestamp, and for calculating a second time difference between the receive TOD and the present TOD. Additionally, one or more comparators of the apparatus compare a sequence difference between the send sequence number and a receive sequence number in order to measure data transmission performance.

A control mechanism enables a destination router to authenticate a response time request issued by a source router. The control mechanism uses a control message that is transmitted by the source router to the destination router. Receipt of the control message by the destination router causes the destination router to listen for a server request message for a designated response time. The source router, after sending the control message, transmits a server request message to the destination router. In the event that the destination router receives the server request message within the designated response time, then the destination router responds to the server request message by providing the request to service software. The control message may encapsulate a message that holds the response time request. The request message may be encrypted.

Growing community of inventors

Cary, NC, United States of America

Frank Gerard Bordonaro