3com Corporation

3com Technologies

Hewlett-packard Company

Gareth Edward Allwright

Kam Choi

Christopher Hay

Patrick Gibson

Kevin Jennings

Jerome Nolan

David J Law

Eugene O'Neill

Edele O'Malley

Kevin Loughran

Vincent Gavin

Francisco Aquino

Peter Furlong

Tin Lam

Fergus Casey

Andrew Davy

Edward M Staples

Detection of a signature in a data packet comprises performing a pre-classification of the packet, using header information and particularly a 5-tuple access control list, into one of a multiplicity of flows and directing the payload of the packet to a respective one of a multiplicity of deterministic finite state machines each of which stores a plurality of signatures as a sequence of states and acts only on the respective flow.

Reduction of false positive detection of signature matches in intrusion detection systems

A method performs a lookup on a search key word, employing a trie database including multiple trie blocks that include pointers to other trie blocks. Each trie is accessible by means of a segment of the search key. A selected section of the search key word is applied to a content addressable memory. In the event of an absence of a match of the selected section with an entry in the content addressable memory, a trie search is performed on the whole search key word. In the event of a match of the selected section with an entry in the content addressable memory, a partial trie search is performed, commencing with a first segment of the search key word after the selected section that has been matched in the content addressable memory.

Trie search engines and ternary CAM used as pre-classifier

A detector for determining which interface protocol is in use by a serialiser/deserialiser, and comprising detecting channels composed of clocked delays and bit comparators for detecting the presence of idle signals coded according to either ten-bit or five-bit protocols using either one or two clocks.

Automatic detector of media interface protocol type

A FIFO store for data packets and their respective status words includes space for the writing of a predetermined sync word or one of a cyclic sequence of predetermined sync words with each status word. The sync word can be used to prevent forwarding of a packet and as an aid to fault diagnosis if on reading the status word the sync word does not match any of the predetermined sync words.

FIFO storage including pointer misalignment detection

A network device incorporating selective compression of stored data packets is disclosed. The network device receives, stores and forwards data packets and includes a system for applying a compression algorithm to packets after their header portions and storing the partially compressed packets, which are decompressed after readout from storage and before they are forwarded. Lengths of a packet as received and as subject to the compression algorithm are compared to prevent storage when the algorithm fails to produce a shorter packet.

Network device incorporating selective compression of stored data packets

A network switch includes a plurality of receive ports for receiving addressed data packets and a plurality of transmit ports for forwarding the addressed data packets and structure responsive to data in said the packets for directing received packets to the transmit ports. In respect of at least one of the transmit ports the switch includes an output buffer for storing data packets before they are forwarded from the port and an allocation controller. The allocation controller allocates each packet destined for the buffer and each packet leaving the buffer for the port into at least one of a plurality of categories, which may be based on priority or protocol data and may define traffic types such as video or audio. For each of the categories there is an allocation register for defining a respective selected proportion of the memory space of the output buffer and structure for accumulating a running total of packet sizes, the total being reduced by the size of each packet in the respective category and leaving the buffer for the port. A packet is discarded when the running total of packet sizes for packets of the same category exceeds the respective proportion of the memory space defined in the respective allocation register. The organization of the switch allows the allocation of a minimum bandwidth for each of the categories.

Network switch including bandwidth allocation controller

A network switch includes a plurality of receive ports for receiving addressed data packets and a plurality of transmit ports for forwarding the addressed data packets and is responsive to data in the packets for directing received packets to the transmit ports. The switch includes, with respect to at least one transmit port, a bandwidth controller for at least one selected packet type. The bandwidth controller diminishes an aggregate count in response to the sizes of packets of the one type destined for the transmit port and continually augments the aggregate count at a selectable rate. The switch compares the aggregate count with a threshold and initiates a discard of packets of the one type before they can be forwarded from the transmit port so as to limit the proportion of available bandwidth occupied by packet so of the one type with respect to the transmit port.

Network switch including bandwidth controller

An application specific integrated circuit includes a multiplicity of operational blocks each of which includes at least one respective data bus and at least one respective visibility bus and a respective addressable multiplexer for selecting between those buses to provide an output on a to respective block bus. An interface block includes a first addressable multiplexer for selecting output data from a selected one of the blocks and providing an output; a register coupled to the output of the first addressable multiplexer; and a second addressable multiplexer for selecting between data provided by the output of the first addressable multiplexer and data in the register. Different portions of externally supplied address words are applied to the first addressable multiplexer and the respective addressable multiplexer, and a decoder is responsive to the address words for controlling the second addressable multiplexer. The arrangement provides a common multiplexing system for data buses and visibility buses.

Application specific integrated circuit with dual-mode system for externally accessible data buses and visibility buses

A system including an ordered data table containing linked lists of MAC addresses has a multiplicity of search engines which have their access to an LRU engine under the control of a token which is passed from one search engine to the next when the LRU engine has completed reordering the table after an address look-up. The system avoids conflicts between searching and reordering and allows reordering to be performed at a controlled rate.

System for controlling look-ups in a data table in a network switch

A network switch includes a transmit queue of packets along with indication (e.g. in respective status words) of the type of each packet and its size. An arbitrator includes a counter which is incremented by the size (e.g. in bytes) of each packet of a first type (e.g. 'low-loss') and decremented by a scaled size of each packet of a second type (e.g. 'normal loss'). If the queue exceeds a set limit, preferably less than the maximum possible size of the queue, packets are discarded if a scaled packet of the second type exceeds the net content of the counter.

Method and apparatus for controlling traffic queues in network switches

A network device which includes flow control, being responsive to a control frame prescribing a pause in the forwarding of packet from a port, sorts received packets intended for forwarding from that port into a first queue, e.g. critical latency traffic and at least one other queue. A count of the number of packets in the first queue is determined at the onset of a pause and at least that number of packets are discarded from the first queue if the pause time exceeds a programmable reference.

Network device including selective discard of packets

A plurality of circuit cards include at least a first card having a first internal power rail, an earth connection, respective operating circuits powered from the first power rail, external terminals coupled to its operating circuit, and a first external connection. A second of the plural cards has a second internal power rail, an earth connection, respective operating circuits powered from the second power rail, external terminals coupled to its operating circuit, and a second external connector. The first card includes a bipolar transistor with an emitter-base junction forwardly biased in response to normal voltage between the first power rail and the earth connection and a collector connected to the first external connector. The second card includes a resistive connection between its second internal power rail and the second external connector and circuits responsive to changes in voltage level at the second connector.

Growing community of inventors

St. Albans, United Kingdom

Gareth Edward Allwright