Emc Corporation

Extrahop Networks, Inc.

Emc IP Holding Company LLC

John Gemignani, Jr

Xue Jun Wu

Michael Kerber Krause Montague

Benjamin Thomas Higgins

Jeff James Costlow

Eric James Rongo

Daniel J Sledz

Embodiments are directed to monitoring network traffic using network monitoring computers (NMCs). Networks may be configured to protect servers using centralized security protocols. Centralized security protocols may depend on centralized control provided by authentication control servers. If a client intends to access protected servers it may communicate with the authentication control server to obtain keys that enable it to access the requested servers. NMCs may monitor network traffic the centralized security protocol to collect metrics associated with the control servers, clients, or resource servers.

Monitoring encrypted network traffic

Aggregate socket resource management is presented herein. A system can comprise a processor; and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising: determining a present aggregate amount of data associated with processing requests from a socket; setting a defined aggregate data limit on the present aggregate amount of data; and in response to determining changes in a difference between the defined aggregate data limit and the present aggregate amount of data, modifying a defined data capacity limit on a data capacity of a receive buffer of the socket. In an example, the determining of the changes in the difference between the defined aggregate data limit and the present aggregate amount of data comprises reducing/increasing the defined data capacity limit in response to the difference being determined to be decreasing/increasing.

Aggregate socket resource management

An enhanced address domain is presented herein. A system can comprise a processor; and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising: creating an upper-layer socket of an enhanced address domain; allocating a protocol control block (PCB) and associating the PCB with the upper-layer socket&#x2014;the PCB storing information representing a private state of the upper-layer socket; creating a lower-layer socket of an existing address domain&#x2014;the lower-layer socket referenced from the upper-layer socket using the PCB; and installing upcall(s) on the lower-layer socket to be intercepted via the enhanced address domain. In an aspect, the upper-layer socket supports enhancement(s) to the existing address domain and a socket type of the lower-layer socket.

Enhanced protocol socket domain

Implementations are provided herein for dynamically tuning resource allocation within a node among a cluster of nodes of a distributed file system. Each node can have a plurality of protocol heads that enable the node to communicate with clients using varying protocols. As tasks are received by the node from the client through the protocol head, the amount of work required to perform the task can be estimated, the amount of resources consumed by the task can be estimated, the amount of kernel memory required to perform the task can be estimated, and the amount of general memory required to perform the task can be estimated. Using these estimations, tasks can be scheduled by a scheduler based on the most efficient means to concurrently process as many tasks as possible using available resources of the node. In addition to efficiently scheduling tasks by the scheduler, a dynamic tuner can also reside on the node that can monitor all work executing on the node for each protocol head. The tuner can then distribute and, over time, redistribute resources to each protocol head using real-time data to make adjustments. In addition to tuning resources allocated to the protocol heads, the tuner can also account for pending and scheduled system task activity, as well as account for misbehaving clients.

Growing community of inventors

Bremerton, WA, United States of America

John Gemignani, Jr