580 results about "Traffic characteristic" patented technology

A method and system for profiling network flows at a measurement point within a computer network is provided. The method includes measuring network flows having invariant features at a measurement point located within routing infrastructure of the computer network to obtain flow statistics. The method also includes aggregating the flow statistics to obtain a traffic profile of the network flows at the measurement point. The method and system utilize the natural hierarchy in the Internet addressing scheme to provide a means for making tractable measurements of network traffic in high-speed networks. Moreover, the method and system adapt dynamically to the changing underlying traffic characteristics to maintain a maximum memory footprint for the profiles. The method and system adapt by adjusting the level of aggregation of the traffic endpoints along a scale from Interface to fully specified network address.

Methods and systems for dynamically optimized rule-based security policy management are provided. A request is received by a network security management device to add a new traffic flow policy rule to multiple existing policy rules managed by the network security management device. Dependencies of the new traffic flow policy rule on the existing policy rules are automatically determined. An updated set of policy rules is formed by incorporating the new traffic flow policy rule within the existing policy rules based on the dependencies. The updated set of policy rules is then optimized by grouping, reordering and / or deleting a sub-set of policy rules of the updated set of policy rules based on one or more of weights assigned to particular types of traffic, preference settings, priority settings, network traffic characteristics and usage statistics for each policy rule of the updated set of policy rules.

Provided are N grouping of traffic and pattern-free Internet worm response system and method. According to the method, traffic factors generated by respective worms are grouped into N groups so that a great quantity of Information may be effectively understood and a worm generated afterward is involved with characteristics of a relevant group. Damages of a network or a system predictable through already classified N traffic characteristics are defined so that corresponding step-by-step measures are taken. Characteristics of the grouped worms are quantitatively analyzed so that a danger degree of a new worm is predicted when the new worm appears afterward and forecasting and alarming through the prediction are performed. Easiness with which a controlling operator instantly understands an accident using a visualization method having an approximate real-time characteristic is increased, so that detection efficiency for most worms not detected using a conventional rule is increased.

An apparatus and method predict and detect network attacks by using a diverse set of indicators to measure aspects of the traffic and by encoding traffic characteristics using these indicators of potential attacks or anomalous behavior. The set of indicators is analyzed by supervised learning to automatically learn a decision rule which examines the temporal patterns in the coded values of the set of indicators to accurately detect and predict network attacks. The rules automatically evolve in response to new attacks as the system updates its rules periodically by analyzing new data and feedback signals about attacks associated with that data. To assist human operators, the system also provides human interpretable explanations of detection and prediction rules by pointing to indicators whose values contribute to a decision that there is an existing network attack or an imminent network attack. When such indictors are detected, an operator can take remediation actions.

A system and method for data flow classification based on a configurable rule-engine, is presented herein. In accordance with an embodiment of the invention, the system includes a data flow managing mechanism configured to identify, track, and manage the data flows and a rule set, which includes a plurality of rules for comparing information contained within data flow with pre-specified values. The system also includes a configurable classification rule engine for classifying the data flows into one of a plurality of traffic classes based on results of the comparisons. The configurable classification rule engine is configured via a configuration file that specifies and allows for the modification and reconfiguration of the pre-specified values and information regarding the data flows, the rule set, and the traffic classes.

A system and method for scheduling data utilizes a number of queues for receiving data. A programmable criteria table comprises a number of entries each associated with one of the queues. The entries of the criteria table comprise programmable traffic parameters selected to associate the queues with particular traffic characteristics governing a flow of data through the queues. A programmable mapping table maps each of the queues to one of the criteria table entries. The criteria table is programmable independently from the mapping table. A scheduling period timer produces epoch time signals that define scheduling time periods. The scheduling of queues changes between scheduling time periods in accordance with the traffic parameters associated with the queues. The scheduling time period is dynamically programmable. The traffic parameters are dynamically programmable to alter a scheduling prioritization of the queues.

The present invention relates to distributing the load between the set routes among a plurality of routes between a communication apparatus which serves as a start point to another communication apparatus which serves as an end point. An apparatus provided in a router in a network collects traffic characteristics of transmission paths connected to the router, notifies other routers of the collected traffic characteristics, calculates load based on the collected traffic characteristics, decides based on the calculated load information whether or not a transmission path should be added or deleted, and equalizes the load among the plurality of transmission paths.

A wireless communication device is implemented to include a communication interface and a processor. The processor is configured to process communications associated with the other wireless communication devices within the wireless communication system to determine one or more traffic characteristics of those communications as well as one or more class characteristics of the other wireless communication devices. The processor is configured to classify the communications into one or more access categories based on the one or more traffic characteristics and is configured to classify the other devices into one or more device class categories based on the one or more class characteristics. The processor is then configured to generate one or more channel access control signals based on these classifications. The communication interface of the device is configured to transmit the one or more channel access control signals to one or more of the other devices.

A data delivery analysis report is generated by collecting various network performance parameters from a plurality of communication devices connected to a communication network. Logic located at a network management system collects and presents the network performance information to a network administrator in a graphical format such that the network administrator may determine whether reduced network performance is attributable to the network or to the traffic characteristics of a particular network user.

A system for increasing the safety of using cellular telephones stores the geographic coordinates of intersections and other traffic features of a local area in a server. The server is interfaced to the cellular telephone network. A programmable GPS enabled telephone handset determines its location upon start-up and transmits that location to through the cellular network to the server. The server responds by transmitting the coordinates of intersections and traffic features surrounding the present location of the telephone handset. As the handset changes location, it determines its new location and compares it to the coordinates provided by the server. If the telephone handset is within a moving vehicle (as determined by the rate of motion of the handset), an audible alarm is issued when the handset comes within a set distance of one of the intersections or traffic features. In this manner a driver speaking on the telephone is alerted before driving into an intersection or other significant traffic feature.

The invention relates to a traffic control method and system based on an intersection group.The method comprises the steps that 1, 360-degree panoramic video of intersections is dynamically collected in real time through an intelligent robot, an intersection operation model is established according to video data, and traffic characteristics of the intersection group are analyzed according to the intersection operation model; 2, intersection index evaluation and online simulation analysis are conducted according to the traffic characteristics, and the traffic operation state of the intersection group is identified; 3, supersaturation state intersection signal timing control scheme optimization is conducted on critical paths of a supersaturation state intersection group, and a supersaturation state intersection group traffic signal control strategy is adjusted; 4, the adjusted intersection group traffic signal control strategy is operated, and steady-state operation of an intersection control signal timing optimization scheme and linkage command of the intelligent robot are achieved.By means of the traffic control method and system based on the intersection group, traffic efficiency and service level of intersection single point control can be improved, and therefore the operation efficiency of an urban traffic system is greatly improved, and urban traffic jams are relieved.

The present invention provides an architecture that advantageously leverages multiple content distribution networks to provide enhanced services. In accordance with an embodiment of the present invention, a share of content requests are served by each of a plurality of content distribution networks. The fraction of content requests served by a particular content distribution network can be determined dynamically, depending on the offered load or other traffic characteristics.

The present invention relates to distributing the load between the set routes among a plurality of routes between a communication apparatus which serves as a start point to another communication apparatus which serves as an end point. An apparatus provided in a router in a network collects traffic characteristics of transmission paths connected to the router, notifies other routers of the collected traffic characteristics, calculates load based on the collected traffic characteristics, decides based on the calculated load information whether or not a transmission path should be added or deleted, and equalizes the load among the plurality of transmission paths.

The present application is directed towards policy based routing for intelligent traffic management via multiple next hops. In some embodiments, the systems and methods disclosed herein may provide management of inbound and outbound traffic across multiple network links, and may further provide reliability in case of link failure, and provide balancing of traffic, responsive to the latency and bandwidth requirements of various applications. Accordingly, these systems and methods may provide intelligent policy-based routing and network and port address translation, sensitive to application traffic types, protocols, source IP addresses and ports, destination IP addresses and ports, or any combination thereof, and can balance traffic loads among multiple available paths based on multiple traffic characteristics. The routing may performed on a packet-by-packet basis, a transaction-by-transaction basis, or a session-by-session basis, and the systems and methods may include capabilities for application-aware health monitoring of available network paths.

Disclosed is a method of detecting anomalies suspected of an attack based on time series statistics according to the present invention. The method of detecting anomalies suspected of an attack according to the present invention includes the steps of: collecting log data and traffic data in real-time and extracting at least one piece of preset traffic feature information from the collected log data and traffic data; and training through a time series analysis-based normal traffic training model using the extracted traffic feature information, and detecting abnormal network traffic according to a result of the training.

An apparatus for controlling traffic congestion includes: a transmitting processor including a packet classifying unit adapted to classify packets to be processed in a receiving processor and packets to be forwarded via the transmitting processor, the transmitting processor and the receiving processor having different traffic processing speeds; a buffer adapted to store the packets to be forwarded from the packet classifying unit to the receiving processor; and the receiving processor including a token driver adapted to output the packets stored in the buffer in accordance with a token bucket algorithm in response to an interrupt signal of the transmitting processor and to transmit the packets to a corresponding application, and a monitoring unit adapted to analyze and monitor a resource occupancy rate and a traffic characteristic used by the token driver to set an amount of tokens.

Methods and apparatus are provided for monitoring traffic characteristics using intelligent line cards. Selected flows are configured for monitoring based on characteristics such as an initiator target pairing or an initiator target and logical unit (LUN) grouping. Frames such as command frames associated with selected flows are forwarded to both an output port and a switch port analyzer (SPAN).

A method and apparatus for classifying packets, e.g., at wire speed are disclosed. The method receives a packet and processes the packet through a hardware-based packet classifier having at least one evolving rule. The method then processes the packet through a software-based packet classifier if the hardware-based packet classifier is unable to classify the packet. In one embodiment, the at least one evolving rule is continuously modified in accordance with learned traffic characteristics of the received packets

Systems, methods, and apparatuses for providing waveform adaptation are provided. In an example, a method is provided for identifying a plurality of candidate waveforms, and selecting one of the candidate waveforms for data transmission. The candidate waveforms may be identified in accordance with one or more criteria, such as a transmission capability of the transmitting device, a reception capability of the receiving device, a desired Peak-to-Average-Power-Ratio (PAPR) characteristic, adjacent channel interference (ACI) rejection requirements, spectrum localization requirements, and other criteria. The waveform selected for data transmission may be selected in accordance with one or more waveform selection criteria, such as traffic characteristic, application types, etc.

Communication traffic associated with one or more mobile terminals is monitored to efficiently manage allocated radio resources. A rate management technique dynamically adjusts allocated radio resources to increase or decrease the data rate capacity of allocated radio channels based on actual channel usage. In this manner, radio resources are more efficiently utilized because the amount of excess capacity allocated to individual subscribers is reduced. Monitoring communication traffic may also be used to determine whether additional radio channel resources are allocated to a given subscriber. For example, in a cdma2000 radio access network, subscribers are typically allocated fundamental radio channels and then assigned supplemental channels to access higher data rate services. By monitoring fundament channel traffic characteristics, such as the queue length or packet size of outgoing packet data, the radio access network can determine whether supplemental channel allocation is warranted.

This invention is a system and method for network management for data transfer which may include replication in a data storage environment. It is useful for managing network allocation of resources (e.g., bandwidth) needed for such replication of data in a data storage environment. The invention is particularly useful with a network using an internet protocol environment and allows for management of bandwidth needed for a replication process. The method includes the steps of requesting from a server for services on an internet network, a bandwidth for data transfer over the internet. The data is transferred in response to a bandwidth allocation from the server based on the request. The network traffic characteristics (e.g. packet loss or latency, and session time outs) are monitored during the data transfer. If the process lags behind more bandwidth is allocated.

A queue management method of an access network device includes receiving a packet, determining feasibility of a packet transmission within a delivery deadline allowed from a destination if the received packet is for real-time transmission, storing the packet in the transmission queue and transmitting the packet in sequential order of the storage when the packet transmission within the delivery deadline is feasible, and dropping the packet instead of storing the packet in the transmission queue when the packet transmission is determined infeasible. Accordingly, resources required for the packet transmission are saved.

The invention discloses an intersection traffic flow characteristic analysis and vehicle moving prediction method based on trajectory data, and belongs to the technical field of intelligent traffic system and traffic flow parameter acquisition. The method starts with space transient analysis of a vehicle original trajectory, and describes and analyzes trajectory local geometrical characteristics at different angles, forms a multilevel spectral clustering processing framework based on a vehicle original rough movement track, and automatically extracts and analyzes a plurality of traffic direction modes of an intersection included in the trajectory data. With the basis, the method can acquire intersection sub-phase (signal control intersection) traffic flow and travel time of vehicles in all directions passing through the intersection, and other detailed traffic characteristic parameters, as important complement of conventional traffic data. Through tracking travelling tracks of all moving vehicles at present moment, a traffic direction trajectory mode matching method is used to predict the next behavior of the vehicles, thereby being beneficial for warning safety risks which may exist on an intersection in real time.

Adaptive jitter buffer management, e.g., for playout of packetized data transmitted over a network. Playout delay is iteratively adjusted based on changing network traffic characteristics by varying the release threshold in a jitter buffer. The adjustment is carried out by evaluating three quantities: (1) average packet transit time over the network; (2) jitter of the packet transit time; and (3) additional waiting time due to the presence of out-of-sequence packets. This invention reduces negative effects of jitter and / or transmission irregularities, such as late arrival of packets and out-of-sequence packets, while maintaining relatively low playout delay and relatively high quality of service.

The present invention is a procedure that allows configuring a random access IEEE 802.11 wireless network, operating in infrastructure mode (all terminals communicate exclusively with an AP (Access Point)), in such a way that throughput is optimized when the network is saturated, satisfying traffic characteristics, in presence or absence of the hidden terminal phenomenon and the number of terminals that communicate with the AP. It may be applied to networks that run a specific application or to those that have devices that run different applications. This procedure can be translated into a program that is operated by a wireless network administrator for network configuration. This program may also be incorporated into the configuration program of an AP and devices conforming to these standards. This invention can be applied to devices that act as AP's, such as a bridge, switch or router and the configuration can be manual or automatic, static or dynamic.

The present invention discloses an express way traffic state prediction method taking spatial-temporal correlation into account at different times. The method comprises: firstly, performing analysis period dynamic division of flow, speed and time sequences through adoption of a sequential cluster, and dividing the whole day into analysis periods with different traffic characteristics without disturbing traffic parameter time sequences; and selecting multivariable vector autoregression models aiming at different periods, comprehensively considering the spatial-temporal correlation of the upstream and downstream traffic flows, and predicting the flow or the speed of target places. The dynamic period division of the express way traffic state prediction method taking spatial-temporal correlation into account at different times provides a cheap, easy and substantially improved efficiency basic method for express way traffic state short-time prediction; and compared with a traditional method without considering the upstream and downstream traffic flow influence, the express way traffic state prediction method taking spatial-temporal correlation into account at different times considers the vector autoregression model of the spatial-temporal correlation after the periods are divided, so that the prediction results are obviously improved in precision.