Cisco Technology, Inc.

Srinivas Subramanian

Balaji Venkat Venkataswami

Randall R Stewart

Amol Khare

Daniel A Alvarez

Mitesh Dalal

Johnson Leong

Vineet Dixit

Lev Shvarts

Balaji Venkat

Rituparna Agrawal

Anand Jayaraman

Venkat Ramani

Shankar Raman

According to one example embodiment, an EID-NOTIFY packet is defined for use with the Location/Identifier Separation Protocol (LISP). A first-hop network element may send EID-NOTIFY responsive to decoding a data packet from a previously undetected host on its subnetwork. A site network element may receive EID-NOTIFY, and send a MAP-REGISTER message to a mapping system. EID-NOTIFY may have substantially the same format as MAP-NOTIFY. This may enable the site network element to be removed more than one hop from the subnetwork.

Network device mobility

A method for addressing attacks on a computer connected to a network includes receiving at a router a TCP SYN request to be screened. The method also includes comparing the received TCP SYN request to be screened to at least one stored tuple representative of one or more SYN requests previously received at the router and determining that the received TCP SYN request to be screened matches the stored tuple. In response to determining that the received TCP SYN request to be screened matches the stored tuple, the TCP SYN+ACK response is prevented from being sent by the router in response to the TCP SYN request to be screened.

Method and system for addressing attacks on a computer connected to a network

A network element implementing a method for determining an optimal maximum transmission unit (MTU) value on a path between two nodes in a network is described. A sending node interested in learning the optimal MTU path value allows fragmentation of datagrams sent on the path, selects an initial MTU, and sends one or more data packets to a receiving node. Upon receiving the data the receiver determines if fragmentation occurred. If no fragmentation occurred then the MTU path selected is the optimal MTU for the given path between the nodes. If fragmentation did occur then the sender is notified that the selected MTU was not the optimal MTU for the path. Either the receiver proposes a new MTU for the path, or the sender selects a new, smaller MTU. The process repeats until the receiver detects no fragmentation.

Method of determining a maximum transmission unit value of a network path using transport layer feedback

A method and system for determining path maximum transfer unit (PMTU) in an Internet Protocol (IP) multicast is described. If a packet of a size greater than the MTU of any link of a path, with its Don't Fragment (DF) bit set, is sent by the source, the packet is dropped and an ICMP message, stating 'Destination unreachable, DF bit set', is sent to the source. The rate of messages to the source is controlled to avoid implosion of traffic. In response to the messages, the source sends multicast probe packets of multiple sizes to multicast distribution tree to determine its PMTU.

Method and system for determining path maximum transfer unit for IP multicast

A method and system for filtering traffic in a multicast network are disclosed. Multicast packets are received at a network device which has a multicast routing table and a list containing nodes or interfaces authorized for transmitting multicast traffic into the network at the network device. The method includes determining if the network device is directly connected to a source of the multicast packet and only if the network device is directly connected to the source of the multicast packet, checking the list to determine if the source is an authorized source and dropping or blocking multicast packets from the source if the source is not an authorized source. The method further includes processing multicast packets from the source according to the multicast routing table.

Method and system for filtering traffic from unauthorized sources in a multicast network

Growing community of inventors

San Jose, CA, United States of America

Srinivas Subramanian