Juniper Networks, Inc.

Saravanan Deenadayalan

Manoj Apte

Sandeep Jain

Yulianto Ko

Fritz Budiyanto

Senthil Kumar Duraiswamy

Szelap Philip Chang

Swamy Sadashivaiah Renu Kananda

Vikram Rautela

Shivayogi Ugaji

Robin N Maleche

Nishant Sharma

Venkata Srikanth Gandiboyina

In some implementations, a first packet forwarding device (PFD) may obtain a probe packet. The first PFD may replicate the probe packet forming multiple copies of the probe packet. The first PFD may transmit, to the first PFD and to multiple other PFDs, the multiple copies of the probe packet. The first PFD may receive a first copy of the probe packet and multiple response packets, with the first copy of the probe packet originating at the first PFD, and with each of the multiple response packets originating at a respective one of the multiple other PFDs based on the respective one of the multiple other PFDs receiving one of the multiple copies of the probe packet. The first PFD may determine, based on the first copy of the probe packet and the multiple response packets, a status of multiple links associated with the first PFD.

Multicast liveness detection

A network device includes match filters to be applied to packets transiting two or more network interfaces. In one example, a network device includes a filtering unit configured to apply one or more filters to a first packet transiting a first network interface to determine a first rule the first packet matches, send the first packet and data representing the first network interface to a first accounting filter associated with the first rule, apply the filters to a second packet transiting a second network interface to determine a second rule that the second packet matches, the second packet being different than the first packet, and the second network interface being different than the first network interface, and send the second packet and second data representing the second network interface to a second accounting filter associated with the second rule.

Sharing matching filters among interfaces of a network device

A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the CSs. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow CSs to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.

Network device having service card for intercept and monitoring of packet flows

A network device comprises a service card (e.g., a dynamic flow capture (DFC) service card) executing a communication protocol to receive, from one or more control sources, flow capture information specifying at least one destination and criteria for matching one or more packet flows. The network device includes a network interface card to receive a packet from a network, a packet replication module to replicate the packet, and a control unit to provide the replicated packet from the interface card to the DFC service card. The network device includes a filter cache that caches flow capture information recently received from the control sources. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow control sources to tap packet flows with little delay after specifying flow capture information, e.g., within 50 milliseconds, even under high-volume networks.

Network device having service card for dynamic flow capture and monitoring of packet flows

A network device comprises a service card (e.g., a lawful intercept (LI) service card) executing a communication protocol to receive, from one or more sources (e.g., law enforcement agents), intercept information specifying at least one destination and criteria for matching one or more packet flows. The network device further includes a network interface card to receive a packet from a network, and a control unit to provide the packet from the interface card to the LI service card. The LI service card executes a flow match detection module that, when the packet matches the criteria of the intercept information, forwards the packet to the destination specified by the intercept information. The network device may provide real-time intercept and relaying of specified network-based communications. Moreover, the techniques described herein allow LEAs to tap packet flows with little delay after specifying intercept information, e.g., within 50 milliseconds, even under high-volume networks.

Network device having service card for lawful intercept and monitoring of packet flows

Techniques are described for managing timeouts of filter criteria in a packet flow capture applications. The techniques allow for handling large amounts of timeouts used when monitoring a high volume of packet flows, without placing extreme demands on the operating system for managing the timeouts. The timeout data structure may be a circular array having a plurality of elements. The timeout array represents a span of time and the elements represent sequential units of time. Each element contains one or more pointers. The pointer may point to an entry in the filter table, or may be a null pointer. A timer thread periodically checks the timeout array to determine whether any timeouts occur at the current time. The timer thread checks the element of the array corresponding to the current time by computing an index into the array based on the current time.

Growing community of inventors

San Jose, CA, United States of America

Saravanan Deenadayalan