Cisco Technology, Inc.

Richard Brian Livingston

Nitin Karkhanis

Robert T Bell

Frank Gerard Bordonaro

Marcos Klein

Uwe Sellentin

Balachander Chandrasekaran

Praveen Joshi

Steven Joseph Rich

Bernie P Pearce

Jared B Pendleton

Robert L Sargent

Vinod Pandarinathan

Mark W Eklund

Dennis E Caughran

Alan Lei

Venkata Rajasekharu Athreyapurapu

Kannan Saravanan

Santos Haro

An example method is provided and includes providing an encrypted image to a central processing unit of an integrated circuit and decrypting the encrypted image using a cryptographic key element. The cryptographic key element is embedded within the integrated circuit. The method also includes evaluating the decrypted image in order to verify its authenticity, and executing the decrypted image if the decrypted image is successfully verified. In more particular embodiments, the verification includes utilizing an executable and linkable format (ELF) to signify that encryption has been enabled for at least a portion of the encrypted image. A processor within the integrated circuit can be provided with the cryptographic key element that corresponds to a product family of devices. The method can also include providing a corresponding image of the decrypted image to an external memory of the integrated circuit.

System and method for executing encrypted binaries in a cryptographic processor

Methods, systems and apparatus for optimizing a source code are provided. Dependencies for each header file and source code file in the source code are identified for all possible compilation contexts. Certain dependencies can be classified into complete types and incomplete types or named references. Further, these incomplete type dependencies are removed by adding forward declarations where appropriate.

Method and system for optimizing source code

A method and system for validating a Command Line Interface (CLI) configlet on an image is provided. The method includes creating a parse graph using a plurality of self-describing data constructs, identifying a plurality of parse chain data constructs in the parse graph, deriving at least one CLI/configlet from the image file based on the plurality of self-describing data constructs; and comparing the at least one CLI/configlet derived from the image file with a plurality of CLIs/configlets.

Method and system for validating a CLI/configlet on a given image

A method, a system, a computer readable medium, and an apparatus for providing information related to a configuration file to a user are provided. The user provides the configuration file to the system of the invention. The system conducts a search for the information related to the configuration file. The information is sought in at least one source, and the information that is found in the source is provided back to the user.

Method and system for annotating configuration files

The invention provides a Virtual Local Area Network (VLAN) over a DLSw interconnection so that VLAN identification is preserved as a packet is forwarded from a source VLAN over the TCP/IP link of the DLSw interconnection to a corresponding destination VLAN. A packet assigned to a VLAN is received by a first router. The first router uses a universal parser to determine the VLAN assignment of the packet. The parser is universal as it responds to the type of packet and type of VLAN (Ethernet, IEEE 802.5, etc.). The parser then writes VLAN information into a data structure in the router memory. The parsed data written into the data structure may include the following: the VLAN identification; a user priority identification; a CFI tag field; etc. The information fields in the data structure are assigned to the particular packet as it is processed by the router. Finally, as an outgoing encapsulated packet is built by the router, the fields of the data structure are read by the processes building the packet and written into fields of the encapsulating header. An encapsulated packet is then built by the first router for transmission over a TCP/IP connection with an encapsulating SSP header. A second router receives the encapsulated packet. The second router then builds a VLAN packet in response to the VLAN identification read from the encapsulating header and transmits the packet onto a destination VLAN corresponding to the source VLAN.

Virtual LANs over a DLSw network

A router transmits an ARP Explorer request packet onto a subnetwork in order to learn the route (RIF information) from the router to an end station. The end station receives a plurality of ARP Explorer request packets from the router because of multiple paths in an SRB network, and the end station transmits an ARP Explorer response packet in response to each ARP Explorer request packet received. The invention adopts the path of the first ARP Explorer response packet received by the router from the end station for the RIF information from the router to the end station, and uses a &ldquo;duplicate ignore&rdquo; timer in order to avoid freezing this route into the router tables. The timer begins running upon receipt of the first ARP Explorer response packet, and expires after an &ldquo;update time interval&rdquo;. No further ARP Explorer response packet is processed until after expiration of the update time interval.

Duplicate ignore delay timer for ARP like protocol messages using are protocol

A method for computing an ACK timing interval for an ACK timer in a protocol layer LLC type 2 session first measures a time interval between transmission of a frame by a source computer joined to a to a destination computer by an intermediate link, and receipt of a corresponding acknowledgment frame by the source computer from the destination computer. The two events at the source computer, starting a timer upon commencement of transmission of a frame or sequence of frames and the later reception of an acknowledge message indicating receipt of those frames, permits calculation of a measured time interval. The measured time interval is used to compute the bandwidth of the intermediate link. The required ACK timing interval for the ACK timer is then computed in response to the bandwidth, the number of bytes transmitted after starting the ACK timer, and the return time for an acknowledgment message. The ACK timing interval may be recomputed after every transmission of frames and receipt of a corresponding ACK message. The ACK timing interval is thereby dynamically adjusted to conditions on the intermediate link, including natural bandwidth for either a slow or fast link, congestion due to other traffic on the link, etc. The dynamic adjustment of the ACK timing interval prevents inadvertent timeouts of the ACK timer, and so prevents inadvertent breaking of the LLC type 2 reliable transport connection.

Growing community of inventors

Doral, FL, United States of America

Richard Brian Livingston