Finisar Corporation

Other

Jds Uniphase Corporation

Robert Witherow Otis

Henry David Poelstra

Stephen Charles Gordy

Thomas L Gallatin

Tom Gallatin

Steven Ronald Klotz

Lawrence Michael Bain

Jason David Mann

Kenneth R Hornyak

A network monitoring architecture and methodology enabling performance detection and diagnostics in storage area networks or other networks. The network monitoring is performed using a three-tiered distributed computing system architecture, including a data source tier, a portal tier and a client tier. The data source tier monitors the physical data on the network medium using multiple data collection sources, or data probes, connected to the network. The probes analyze network data and generate metrics that describe attributes of the network data. The metrics are synchronized in time by virtue of time stamps associated with the data monitored by the data probes. The time-synchronized metrics are used by the data portal tier, which is the second tier of the system. The portal tier encapsulates the metrics into data containers. The data containers may be requested by the client tier, which is the third tier in the network monitoring system. The client tier provides a user interface for displaying various types of network information derived from the contents of data containers.

System and method for network traffic and I/O transaction monitoring of a high speed communications network

A network tap for enabling attached devices, such as an intrusion detection system, to transmit information into a communication line of the network without disrupting the network traffic on the communication line. When the attached device is an intrusion detection device, the network tap is connected to a firewall. An Ethernet switch or field programmable gate array (FPGA) is incorporated in the network tap to coordinate the transmission of device data to avoid data collisions with data transmissions already existing in the communication line. The network tap may be operated in various modes to accommodate different capabilities of attached devices. In addition, the network tap has various port configurations to allow a user to connect various attached devices through a single cable or dual cables.

Network tap with interchangeable ports

A system and method is presented for a network tap having integrated circuitry therein for obtaining statistics about a communication line. The network tap also has a routing node for allowing information to be transmitted back into the communication line from an attached device without disrupting the communication traffic. The routing node coordinates the transmission of device data from an attached device to avoid data collisions with data transmissions already existing in the communication line. The routing node may be an Ethernet switch or field programmable gate array (FPGA). The integrated circuit may be a microprocessor or FPGA. The integrated circuit also controls other components of the network tap. The integrated circuit may also be programmed or upgraded to provide other functions.

Network tap with integrated circuitry

A system and method is presented for analyzing information in a communication line for unwanted intrusions and for allowing information to be transmitted back into the communication line without disrupting the communication traffic when an intrusion is detected. The system and method includes a security tap connected to a firewall. The security tap is also connected to an intrusion detection device. The intrusion detection device analyzes the information in the communication line for indicia of attempts to compromise the network. When such indicia is detected, the intrusion detection device sends a 'kill' data packet back through the security tap and directed back to the communication line to the firewall to instruct the firewall to prevent further communications into the network by the intrusive source. An Ethernet switch or field programmable gate array (FPGA) is incorporated in the security tap to coordinate the transmission of the 'kill' data packet to avoid data collisions with data transmissions already existing in the communication line.

Network security tap for use with intrusion detection system

Growing community of inventors

San Jose, CA, United States of America

Robert Witherow Otis