Gigamon Inc.

Gigamon Systems LLC

Finisar Corporation

Tom Gallatin

Patrick Pak Tak Leong

King L Won

Ted Ho

Denny K Miu

Stephen Charles Gordy

Henry David Poelstra

Robert Witherow Otis

The present invention relates to a packet switch and a packet switching method. An example embodiment of the present invention comprises at least three network ports, at least one instrument port, a mux-switch, a packet switch fabric, and an address table. The embodiment updates the address table to include the source address of each ingress packet of each network port and associate the source address with that network port. The mux-switch routes the ingress packet traffic of each network port according to the identity of the network port so that at least a copy of the packet traffic of one of the network ports is routed to an instrument port. The packet switch fabric routes the packets from the instrument ports to the network ports according the destination address of the packet and the identity of the network port that is associated with the destination address as recorded in the address table.

Packet switch methods and systems

A packet switch device for providing visibility of traffic in a network includes a housing, a processing unit located in the housing, a first network port communicatively coupled to the processing unit, wherein the first network port is configured to communicate with the network, a second network port communicatively coupled to the processing unit, wherein the second network port is configured to communicate with the network, and at least one instrument port communicatively coupled to the processing unit, the at least one instrument port configured to communicate with a first network monitoring instrument, wherein the processing unit is configured to support a movement of packets from one or both of the first and second network ports to the at least one instrument port.

Packet switch and method of use

Packet switch methods

Asymmetric packet switch and a method of use

Asymmetric packets switch and a method of use

A system and method is presented for analyzing information in a communication line for unwanted intrusions and for allowing information to be transmitted back into the communication line without disrupting the communication traffic when an intrusion is detected. The system and method includes a security tap connected to a firewall. The security tap is also connected to an intrusion detection device. The intrusion detection device analyzes the information in the communication line for indicia of attempts to compromise the network. When such indicia is detected, the intrusion detection device sends a 'kill' data packet back through the security tap and directed back to the communication line to the firewall to instruct the firewall to prevent further communications into the network by the intrusive source. An Ethernet switch or field programmable gate array (FPGA) is incorporated in the security tap to coordinate the transmission of the 'kill' data packet to avoid data collisions with data transmissions already existing in the communication line.

Network security tap for use with intrusion detection system

Growing community of inventors

San Jose, CA, United States of America

Tom Gallatin