Cisco Technology, Inc.

Munawar Hossain

Marco Foschiano

Vardarajan Venkatesh

Kevin L Wiley

Christophe Paggen

Suresh Gurajapu

Michael Lee Hall, Jr

Jason Yansheng Jiang

Sudheer Babu Chittireddy

Joseph M Sirrianni

A method is provided in one example and includes receiving an indication of a start of a point of interest associated with a portion of a video presentation, and determining a start time relative to a start time of the video presentation. The method further includes receiving an indication of an end time of the point of interest, and determining an end time of the point of interest relative to the start time of the video presentation. The method still further includes generating point of interest data that includes the start time and end time of the point of interest, and sending the point of interest data to a processing device. The processing device generates a composite point of interest video including the portion of the video presentation associated with the point of interest.

Method, system, and apparatus for marking point of interest video clips and generating composite point of interest video in a network environment

Methods and apparatus for intelligent sharing and tighter integration between a service engine (SE) for network communication and a high-speed forwarding device, such that certain network flows may be offloaded from the SE to benefit from the high-speed forwarding capacity of such a device are provided. To accomplish the integration, an application binary interface (ABI) may be employed as an in-band high-priority communication protocol between the data planes of the SE and the high-speed forwarding device, and an application programming interface (API) may be utilized to leverage the ABI and any in-band or out-of-band channel to allow the master SE to control the high-speed slave device. Such integration techniques are not limited to a few specialized hardware components, but may also be applied to other types of hardware resources, such as flow tables, quality of service (QoS) tables, access control list (ACL) tables for security, forwarding and adjacency tables, etc.

Multi-layer hardware-based service acceleration (MHSA)

In accordance with one embodiment of the present invention, a method for inline intrusion detection includes receiving a packet at a physical interface of an intrusion detection system. The packet is tagged with a first VLAN identifier associated with an external network. The network further includes buffering the packet at the physical interface, communicating a copy of the packet to a processor, and analyzing the copy of the packet at the processor to determine whether the packet includes an attack signature. The method also includes communicating a reply message from the processor to the interface indicating whether the packet includes an attack signature. If the packet does not contain an attack signature the buffered copy of the packet is re-tagged with a second VLAN identifier associated with a protected network and re-tagged packet is communicated to the protected network.

Inline intrusion detection using a single physical port

Growing community of inventors

Austin, TX, United States of America

Munawar Hossain