Cisco Technology, Inc.

Thomas Vegas

Anirban Karmakar

Domenico Ficara

Jerome Henry

Amine Choukir

Robert E Barton

Giacomo Trifilo

Shree N Murthy

Salvatore Valenza

Vincent Cuissard

Roberto Muccifora

Antonio Trifilo

Maria Carpen Amarie

Pedro Miguel Esteves Ramalhete

Yann Poupet

Hamsa Sankaran

The present technology pertains to identifying one or more sub-components of one or more network devices in a network environment; disaggregating the one or more sub-components from corresponding network devices of the one or more network devices; monitoring one or more functional flows across the one or more sub-components on a sub-component basis to generate functional flow data associated with the one or more sub-components; and generating analytics of the network environment on a sub-component basis from the functional flow data.

Threat detection of application traffic flows

A method is performed at a mesh access point (MAP) of a mesh network in which MAPs are configured to communicate with each other over wireless backhaul links. The method includes: receiving, from a first wireless client having a first client address, client traffic destined for a second wireless client having a second client address, the client traffic including a first source address that represents the first client address, and a first destination address that represents the second client address; generating a first obfuscated source address that differs from the first client address; replacing the first source address in the client traffic with the first obfuscated source address; and transmitting the client traffic with the first obfuscated source address in place of the first source address to a next MAP of the MAPs over a wireless backhaul link for subsequent forwarding to the second wireless client.

Client mac source address randomization by mesh nodes in wireless mesh networks

Presented herein are techniques for extending Target Wake Time (TWT) to provide for randomizing and changing media access control (MAC) address (RCM) signaling. According to certain embodiments, a client device operating in a wireless network determines a TWT for the client device. Next, the client device determines that it will change from using a first MAC address to a using second MAC address. Finally, the client device generates, for transmission to an access point device that serves wireless communication in the wireless network, a TWT signaling message. The TWT signaling message indicates the TWT for the client device and the second MAC address.

Extending target wake time for randomized and changing media access control address signaling

This disclosure describes techniques for performing a remote front-drop of data for recovery after a pipeline stall. The techniques include using a receiver-side dropping strategy that is driven from the sender-side. Components of a pipeline determine whether a pipeline is operating within specified latency constraints (e.g., experiencing a pipeline stall). Upon detecting a pipeline stall, the sending device is notified of the stall. Once the sending device is notified of the pipeline stall, the sending device can determine what action(s) to perform to address the pipeline stall. For example, the sending device may instruct one or more components of the pipeline to discard already sent data that has not been processed. This allows the older data to be dropped on the stalled pipeline while keeping the more recently sent data.

Remote front-drop for recovery after pipeline stall

Techniques are provided for read-based storage of time-series records. In one example, a server obtains at least one indication of one or more records of a plurality of records written to a record database by a producer that have been read from the record database by at least one consumer. The server stores in a time-series database the one or more records that have been read by the at least one consumer. One or more records of the plurality of records that have not been read by the at least one consumer may be pruned from storage in the time-series database.

Read-based storage of time-series records

A first access point of a wireless network minimizes Media Access Control (MAC) address collisions in the wireless network. The first access point receives an association request from a first wireless device. The association request identifies a first MAC address of the first wireless device. The first access point determines whether a second wireless device is associated with the wireless network using the first MAC address. Responsive to a determination that the second wireless device is associated with a second access point of the wireless network, the first access point obtains a virtual MAC address for the first wireless device. The first access point translates between the first MAC address and the virtual MAC address for network traffic of the first wireless device.

Wireless client media access control (MAC) address collision avoidance

The use of device context in applying security policies is provided by receiving a Domain Name Service (DNS) query for a network resource from a user device (UD) at a DNS analysis server, the DNS query including a functional label describing a context of the UD; analyzing the DNS query to determine whether the UD is permitted to access the network resource based on the functional label; and in response to the functional label indicating that the UD is not permitted to access the network resource, transmitting a block page to the UD. The functional label can be added to the DNS query by a Mobile Device Management application on the UD, a router associated with the UD, or an enterprise server. Contexts for previously blocked DNS queries can be aggregated to identify UDs sharing at least one value with the previously blocked DNS queries as security compromised devices.

Device context in network security policies

Location tracking consent management may be provided. A zone in a network may be configured with a corresponding tracking type. Next a computing device associated with the zone may be enabled to transmit an information element indicating the tracking type configured for the zone. A client device may then be allowed to disallow tracking of the client device based on the tracking type.

Growing community of inventors

Gland, Switzerland

Thomas Vegas