Cisco Technology, Inc.

Richard Gray

Louis F Menditto

Mark Albert

Chris O'Rourke

Tzu-Ming Tsang

Robert Michael Batz

Michael Sutton

Pranav Kumar Tiwari

Gaurang Shah

Sean W Hull

Jayaraman R Iyer

Robert A Mackie

Bhaskar Bhupalam

Biswaranjan Panda

Walter Glenn Dixon

Pranav Tiwari

Kenneth W Davidson

Jacob Mark McGuire

Humberto M Tavares

Wai-tak Siu

Techniques for separately accounting for multiple transactions in the same data packets communicated over a network using Transport Control Protocol (TCP) include receiving an Internet Protocol (IP) data packet that includes Transport Control Protocol (TCP) payload data. The TCP payload is parsed to determine boundary data that indicates a byte location on a boundary between a first transaction and a second transaction. A byte count that indicates a number of bytes in the TCP payload associated with the first transaction is determined based on the boundary data. Accounting data for the first transaction is determined based at least in part on the byte count. These techniques allow a service gateway to bill separately for different requests and responses carried in TCP data packets, such as those for Hypertext Transfer Protocol (HTTP) and Real Time Streaming Protocol (RTSP).

Techniques for accounting for multiple transactions in a transport control protocol (TCP) payload

In one embodiment, at least one portion of a request for an electronic advertisement is received. The request includes an indicator indicative of one of a plurality of demographic servers. The at least one portion is analyzed. The at least one portion includes data of a user. Demographic information is identified as a function of the user data. A request for a selection of the electronic advertisement as a function of the demographic information is transmitted.

Electronic advertising using distributed demographics

In one embodiment, a method includes receiving a packet at a network processor, and determining the packet is to be directed to a selected one of a plurality of traffic processors if a tunnel endpoint identifier of the packet is associated with a subscriber terminal. The method further includes determining that the packet is to be directed to the selected one of the plurality of traffic processors if a destination address of the packet is associated with the subscriber terminal. The method still further includes distributing the packet to the selected one of the plurality of traffic processors.

System and method for providing single IP tunnel

In accordance with one embodiment, a method includes creating a first session object by a first traffic processor of a first network element operating in an active mode, the first session object being associated with a communication session between an end user terminal and an information provider. The method further includes sending a state synchronization message associated with the first session object from the first traffic processor. The state synchronization message includes a transport layer address associated with a second traffic processor of a second network element operating in a standby mode. The state synchronization message is adapted to be received by the second traffic processor and cause the second traffic processor to create a second session object, the second session object tracking the communication session between the end user terminal and the information provider.

System and method for providing unified IP presence

Resolving a Layer 3 address includes maintaining an address resolution table at each slave processor of a number of slave processors. The slave processors have a master processor, and the master processor and the slave processors are associated with a unified address. An address resolution table includes one or more Layer 2-Layer 3 address mappings. An address resolution request requesting a Layer 2 address corresponding to a Layer 3 address is sent from a slave processor. The address resolution request uses the unified address. An address resolution response comprising the Layer 2 address is received at the master processor. The master processor sends the response to the slaves.

Resolving a layer 3 address in a processor system with a unified IP presence

A method for protecting firewall load balancers from a denial of service attack is provided. Packets are received by the firewall load balancer. Each packet has a source and a destination. The firewall load balancer is equipped with a connection database that can contain entries about the packets. Upon receipt of a packet, the connection database is queried to determine whether or not there is an entry for the received packet. If an entry is found in the database, the packet is forwarded to its destination. Otherwise, if the packet was received from a firewall, then a new connection entry for the packet is built and is saved to the connection database and the packet is forwarded on to its destination. If the packet does not have an entry (match) in the connection database and the packet was not received from a firewall, then the packet is forwarded to a firewall.

Method for protecting a firewall load balancer from a denial of service attack

A network is disclosed that includes a first tier of forwarding agents connected to a first tier of network devices. A second tier of forwarding agents is connected to a second tier of network devices. A service manager is configured to receive a packet from one of the forwarding agents; determine the tier of the forwarding agent; and send an instruction to the forwarding agent directing the forwarding agent to forward the packet to a network device connected to the tier of forwarding agents that includes the forwarding agent.

Distributing packets among multiple tiers of network appliances

Growing community of inventors

Cary, NC, United States of America

Richard Gray