Ixia

Keysight Technologies Singapore (holdings) Pte. Ltd.

Keysight Technologies Singapore (sales) Pte. Ltd.

Keysight Technologies Singapore (holdlngs) Pte. Ltd.

Marcel Felix Desdier

Clifford Lee Hannel

Randy Fung

Anirban Majumder

Jan R A Olderdissen

Wenxing Quan

Jan Olderdissen

Siuman Hui

Ky Hong Le

Deepesh Arora

Wei Lian

Elaine Rhodes

Ophir Shmuel Artzi

Larry Allan Campbell

Methods, systems, and computer readable media for packet monitoring in a virtual environment are disclosed. According to one method executed at a virtual tap element residing in between a first virtual machine and a second virtual machine in a virtual network environment, the method includes obtaining cryptographic key information from either the first virtual machine or the second virtual machine and detecting an encrypted packet flow being communicated in the virtual network environment between the first virtual machine and the second virtual machine via the virtual tap element. The method further includes decrypting the encrypted packet flow using the cryptographic key information, generating a decrypted packet flow set comprising at least a portion of the decrypted packet flow, and sending the decrypted packet flow set to a packet analyzer.

Methods, systems, and computer readable media for monitoring encrypted packet flows within a virtual network environment

Methods, systems, and computer readable media for providing high availability support at a bypass switch are disclosed. One method occurs at a bypass switch. The method includes determining that an inline tool associated with a bypass switch is unavailable. The method also includes determining whether the inline tool is required or optional. The method further includes in response to determining that the inline tool is required, disabling at least one link associated with the bypass switch so as to trigger a switchover involving a second bypass switch.

Methods, systems, and computer readable media for providing high availability support at a bypass switch

According to one system, the system includes a chassis defining an enclosure and containing one or more slots. The system further includes a radio frequency identification (RFID) reader module comprising at least one processor and one or more RFID readers located within the enclosure, wherein the one or more RFID readers are configured to read data stored in RFID tags associated with one or more unpowered network taps. The RFID reader module is configured to receive, from a first RFID reader associated with a first slot of the chassis, information regarding a first unpowered network tap in the first slot, to determine, using a known location of the first RFID reader, a slot identifier associated with the first unpowered network tap, wherein the slot identifier indicates that the first unpowered network tap is in the first slot, and to provide the information and the slot identifier to a management system.

Methods, systems, and computer readable media for management of passive network taps using radio frequency identification (RFID)

Systems and methods are disclosed to provide on demand packet traffic monitoring for packet communications within virtual packet processing environments. Virtual TAPs (test access ports) within virtualization layers for VM (virtual machine) host hardware systems are controlled by external controllers to configure watch filters for VM platforms operating within the virtualization layer based upon trigger events determined within packet flow data and/or based upon other external trigger events. The virtual TAP controller then periodically receives watch filter packet data updates from the virtual TAP and further controls the virtual TAP to configure more detailed focus filters for the VM platforms based upon watch filter trigger events. The virtual TAP controller can further communicate one or more VM action commands (e.g., stop VM, stop application, etc.) to the virtual TAP for application to the VM platforms based upon trigger events associated with this more detailed focus filter data.

On demand packet traffic monitoring for network packet communications within virtual processing environments

A network tap with battery assisted and programmable failover is disclosed. The network tap includes a processing element, at least one optical-electrical transceiver, and at least one multiplexer/demultiplexer module. A backup battery provides power to the optical-electrical transceiver(s) and the multiplexer/demultiplexer module(s) but not the processing element when operating in a failover mode. The network tap is programmable to operate in a fail open mode in which traffic received from the network passes through the network tap during failover or a fail closed mode in which traffic receive from the network is blocked during failover.

Network tap with battery-assisted and programmable failover

A system for monitoring data traversing a bidirectional optical fiber includes a network tap. The network tap includes first and second network ports for bidirectional data transmission over a first optical fiber. The device includes first and second tap ports respectively associated with the first and second network ports. The first network port receives data transmitted in a first direction over the first optical fiber and at a first wavelength and provides the data to the second network port and to the first tap port. The second network port receives data transmitted in a second direction opposite the first direction over the first optical fiber and at a second wavelength different from the first wavelength and provides the data to the first network port and to the second tap port. The first and second tap the first and second tap ports provide the data to one or more network monitoring devices.

Taps for bidirectional high-speed data on optical fibers

A switching system includes memory and a switching circuit. The memory stores a port priority table and a trigger source and condition table. The switching circuit for switches network traffic between a number of ports based on the port priority table, the trigger source and condition table, and port health status data. Switching network traffic includes: determining a priority path for a first port using the port health status data and the trigger source and condition table; determining a second port specified as a destination for network traffic arriving at the first port by the port priority table for the priority path; and routing incoming network traffic from the first port to the second port.

Methods and systems for switching network traffic in a communications network

A virtual interface is disclosed. A method may include allowing upper layer software to transparently access the capabilities of a network device via a virtual interface as if the network device were in a computing device in which the upper layer software is resident. A communication channel may be established with a computing device. A virtual interface to a network device in the computing device is created. Incoming data units directed to the network device are received via the communication channel, and are made available via the virtual interface. Outgoing data units directed to the virtual interface may be forwarded to the network device via the communication channel. The methods may be implemented on computing devices that include network cards, including computers and/or network testing systems.

Growing community of inventors

Pleasanton, CA, United States of America

Marcel Felix Desdier