Various embodiments of a method and system for detecting unauthorized signatures to or from a local network. Multiple sensors are connected at an internetworking device, which can be a router or a switch. The sensors operate in parallel and each receives a portion of traffic through the internetworking device, at a session-based level or at a lower (packet-based) level. Depending on the type of internetworking device (router or switch) the load balancing mechanism that distributes the packets can be internal or external to the internetworking device. Also depending on the level of packet distribution (session-based or packet-based), the sensors share a network analyzer (if session-based) or both a network analyzer and a session analyzer (if packet-based).

Parallel intrusion detection sensors with load balancing for high speed networks

A method and apparatus is provided for automatic protection switching in a ring network by creating a protection domain having a control vlan and protected data vlans and designating a master node and transit nodes connected by a primary port and a secondary port. The master node blocks the secondary port for data vlan traffic until it detects a fault either by notice from a transit node or by polling. When a fault is detected, the master node unblocks the secondary port for data vlan traffic. When the fault is restored, the transit node temporarily blocks the restored port to data vlan traffic thereby preventing a loop. Each time the secondary port is blocked and unblocked, the forwarding databases on all the nodes are flushed.

Ethernet automatic protection switching

Setting of a bypass path upon occurrence of transmission failure, is applicable for large scale network. A system includes signaling means which makes judgment whether bypassing process is performed by an own node by a bypassing process judgement means when a release message issued upon occurrence of failure, is received. Upon judgment to perform bypassing process, computation of bypass path is requested by the path computing means. On the basis of result of computation, bypass path is established and switched. In the bypassing process judgment means, judgment is made whether bypassing process is performed by the signaling means or not depending upon the relationship of positions of the faulty portion and the own node.

Fault recovery system and transmission path autonomic switching system

In order to solve problems arising when a communication system such as a wireless LAN is constructed as a decentralized distributed type network without a relationship of control station and controlled stations such as a master station and slave stations, in a wireless communication system composed of a plurality of communication stations without a relationship of control station and controlled stations, respective communication stations transmit beacons with information concerning a network written thereon with each other to construct the network, and it becomes possible to make sophisticated judgment such as communication states of other communication stations by those beacons.

Wireless communication system, wireless communication apparatus and wireless communication method and computer program

In accordance with the present invention, there is provided a client application for enabling access to an online service and displaying advertisements while the user is accessing the online service. The client application receives play lists from the online service provider. The play lists include information about advertisements to be played and the order of play. In conjunction with the client application displaying advertisements, the client application and an online service provider server also track and record the occurrence of hardware and software errors and malfunctions that occur in relation to the provision of the online service. The types of errors may include errors in a communication channel from a local device to an online service provider server, data access errors, and any other errors that may occur in the operation of software and hardware, such as software crashes and the incorrect display of advertisements.

Internet service error tracking

A system and method for restoring communication between at least one pair of nodes in a network (100). Distributed intelligence is provided by messaging between adjacent nodes (712, 720) in the network (100). The messages in combination with User-configurable timers (102) and rules provide fault isolation, forward flooding (714), reverse linking and connection.

Implementation protocol for SHN-based algorithm restoration platform

To estimate an optimal amount of spare capacity for a network so that efficient distributed restoration of the network can take place in the event of a network failure, parameter assumptions and network design guidelines are provided to a network modeling tool to generate a desirable amount of spare links for the network. The spare links are allocated to the different nodes of the network. After a failure in the network, the result of the restoration of the network due to the failure is reported to the controller of the system. If necessary, the parameter assumptions and network design guidelines are updated and fed back to the network modeling tool for further refining the spare capacity of the network. An optimal amount of spare capacity is thus achieved by a continuous redeployment of the spare capacity output provided by the network modeling tool. Simulated failures and subsequent restorations of the network are provided to an exerciser periodically. Results from the exerciser further enhance the operations of the network modeling tool to provide an optimal amount of spare capacity for the telecommunications network.

System and method therefor of estimating optimal spare capacity for a distributed restoration scheme

To verify that a communications path restored in response to a failure to a telecommunications network is a validly restored path, each of the end nodes terminating the restored communications path sends out a message containing data that identifies that node and the ID of the access/egress port to which the STS-1 circuit forming the communications path is connected. Once the respective path verification messages are exchanged between the two end nodes of the communications path, the Operations Support System (OSS) that oversees the topology of the network retrieves those messages and compares the data contained therein with the data of the same type of messages from the same ends nodes that were stored just prior to the occurrence of the disruption to the communications path. The restored communications path is deemed to be verified if there are no differences between the path verification messages retrieved after the failure event and the path verification messages stored just prior to the failure event.

Automated path verification for shin-based restoration

The present invention provides to a distributed restoration scheme a set of timers so that multiple senders and choosers can more fairly contend for the spare capacity of a telecommunications network. In particular, a preactivation timer would force a sender that had reserved excess spare capacity of the network for restoring its own failed links to release any unused spare capacity prior to the time that it terminates its operation, provided that it has found an alt-route or alt-routes for its failed link. An alarm validation timer and a hold off timer in the invention scheme further provide for respective validation and detection that a detected fault is not transient or intermittent in nature and that a restoration process is needed to find the alt-routes.

Method and system for resolving contention of spare capacity circuits of a telecommunications network

To revert the topology of a network to its original state after a malfunctioned link (34) has been repaired, an Operation Support System (OSS) (22) sends to each of the custodial nodes (4, 8) and the tandem nodes (14, 16, 18) that form the alternate route respective commands to revert the operation that each node had performed during restoration. The OSS (22) identifies the custodial nodes (4, 8) by the fact that those nodes perform more operations than the tandem nodes (14, 16, 18). The operations that were performed during restoration were recorded. Upon receipt from different nodes that the malfunctioned link (34) has been repaired, the OSS (22) sends to each of the nodes (4, 8, 14, 16, 18) a specific command to perform the inverse of the operations that the node had performed during restoration. The custodial nodes (4, 8) are ordered to perform their inverse operations first so that the repaired link (34) once again connects the custodial nodes (4, 8). A path verification process is next performed to ensure the integrity of the repaired link (34).

Will Russ

Papers

Implementation protocol for SHN-based algorithm restoration platform

System and method therefor of estimating optimal spare capacity for a distributed restoration scheme

Automated path verification for shin-based restoration

Method and system for resolving contention of spare capacity circuits of a telecommunications network

System and method for reconfiguring a telecommunications network to its normal state after repair of fault