H04L69/22

METHOD FOR DETECTING SYSTEMATIC COMMUNICATIONS IN A COMMUNICATIONS NETWORK, CORRESPONDING DEVICE, AND COMPUTER PROGRAM PRODUCT

Described herein is a method for detecting systematic communications in a communications network (10, 30). The method comprises repeating the following steps for each data packet (DP) of a sequence of a plurality of data packets (DP) sent through the communication network (10, 30) from a respective source to a respective destination:

obtaining (1002, 1004) metadata (MD) of the data packet (DP), wherein the metadata (MD) include both data that identify the source and/or the destination and data that identify a sending time (t) when the data packet (DP) has been sent;

verifying (1022) whether the data packet (DP) belongs to a specific type of communication by checking whether the metadata (MD) indicate the fact that the data packet (DP) has been sent by a given source and/or received by a given destination, and in the case where the metadata (MD) indicate that the data packet (DP) has been sent by a given source and/or is received by a given destination, computing (1024) a value of variance for the given type of communication; and

comparing (1012) the value of variance with a threshold (TH), and in the case where the value of variance is less than the threshold, generating (1014) a notification that indicates the fact that the given type of communication is systematic.

In particular, the value of variance is calculated by means of an iterative procedure.

Packet Processing Method, Device, and System
20230091414 · 2023-03-23 ·

This application provides a packet processing method, a device, and a system. The method includes a second network device receives an IPv6 packet sent by a first network device, where the IPv6 packet includes an IPv6 header and a first IPv6 extension header, and the first IPv6 extension header indicates that a network device receiving the IPv6 packet is to perform an action in the first IPv6 extension header on a data plane. The second network device performs the action in the first IPv6 extension header on the data plane of the second network device based on the IPv6 header and the first IPv6 extension header. This ensures that the network device receiving the IPv6 packet can normally forward the IPv6 packet.

Packet Processing Method, Device, and System
20230091414 · 2023-03-23 ·

This application provides a packet processing method, a device, and a system. The method includes a second network device receives an IPv6 packet sent by a first network device, where the IPv6 packet includes an IPv6 header and a first IPv6 extension header, and the first IPv6 extension header indicates that a network device receiving the IPv6 packet is to perform an action in the first IPv6 extension header on a data plane. The second network device performs the action in the first IPv6 extension header on the data plane of the second network device based on the IPv6 header and the first IPv6 extension header. This ensures that the network device receiving the IPv6 packet can normally forward the IPv6 packet.

PROCESSING DEVICE, COMMUNICATION DEVICE, COMMUNICATION SYSTEM, CONTROL CIRCUIT, STORAGE MEDIUM, AND INFORMATION SHARING METHOD

A processing device that is an edge computer connected to a base station communicatable with a vehicle in a service area includes: a request generation unit generating a first request including location information and a range from the location information specifying a region in which information sharing is requested, and an identifier from which a demander that requests the information sharing is identifiable; an accepted request holding unit holding a second request based on an information sharing demand from another processing device when shared information regarding the region is sendable in response to the second request; and a request location information inquiry unit generating the shared information including a cognitive event and the identifier held in the accepted request holding unit when location information indicating a cognitive event occurrence point acquired from the vehicle via the base station is included in a region specified by the second request information.

PROCESSING DEVICE, COMMUNICATION DEVICE, COMMUNICATION SYSTEM, CONTROL CIRCUIT, STORAGE MEDIUM, AND INFORMATION SHARING METHOD

A processing device that is an edge computer connected to a base station communicatable with a vehicle in a service area includes: a request generation unit generating a first request including location information and a range from the location information specifying a region in which information sharing is requested, and an identifier from which a demander that requests the information sharing is identifiable; an accepted request holding unit holding a second request based on an information sharing demand from another processing device when shared information regarding the region is sendable in response to the second request; and a request location information inquiry unit generating the shared information including a cognitive event and the identifier held in the accepted request holding unit when location information indicating a cognitive event occurrence point acquired from the vehicle via the base station is included in a region specified by the second request information.

ENHANCED DOCSIS PACKET CLASSIFICATION FOR TUNNELED TRAFFIC HAVING IPV4 AND IPV6 RULES MIXED IN A SINGLE UPSTREAM (US) AND/OR DOWNSTREAM (DS) TRAFFIC CLASSIFIER
20220353352 · 2022-11-03 ·

A network device includes a memory and a processor. The processor implements at least one classifier to provide classification for tunneled IPinIP traffic based on classification parameters provided by Internet Protocol Version 6 (IPv6) classification encoding, Internet Protocol Version 4 (IPv4) classification encoding, and Transport Control Protocol/User Datagram Protocol (TCP/UDP) classification encodings, wherein one of the IPv6 classification encoding and the IPv4 classification encoding is provided by extension information to provide extended classification capabilities. The processor uses the at least one classifier to compare the classification parameters provided by the IPv6 classification encoding, the IPv4 classification encoding, and the TCP/UDP classification encodings to fields in an IPv6 header, an IPv4 header, and a TCP/UDP header of the IPinIP packet. Based on the comparison, the processor maps the IPinIP packet to a service flow identified by the classification parameters.

ENHANCED DOCSIS PACKET CLASSIFICATION FOR TUNNELED TRAFFIC HAVING IPV4 AND IPV6 RULES MIXED IN A SINGLE UPSTREAM (US) AND/OR DOWNSTREAM (DS) TRAFFIC CLASSIFIER
20220353352 · 2022-11-03 ·

A network device includes a memory and a processor. The processor implements at least one classifier to provide classification for tunneled IPinIP traffic based on classification parameters provided by Internet Protocol Version 6 (IPv6) classification encoding, Internet Protocol Version 4 (IPv4) classification encoding, and Transport Control Protocol/User Datagram Protocol (TCP/UDP) classification encodings, wherein one of the IPv6 classification encoding and the IPv4 classification encoding is provided by extension information to provide extended classification capabilities. The processor uses the at least one classifier to compare the classification parameters provided by the IPv6 classification encoding, the IPv4 classification encoding, and the TCP/UDP classification encodings to fields in an IPv6 header, an IPv4 header, and a TCP/UDP header of the IPinIP packet. Based on the comparison, the processor maps the IPinIP packet to a service flow identified by the classification parameters.

FLOW OFFLOADING METHOD FOR A PROGRAMMABLE NETWORK INTERFACE CONTROLLER (NIC)
20230091195 · 2023-03-23 ·

Examples described herein relate to a driver that is to: determine a configuration of a packet processing pipeline of a network interface device to perform an instruction set written in a domain specific language (DSL) for the packet processing pipeline based on emulation or analysis of a parser of the packet processing pipeline and provide the configuration to the packet processing pipeline of the network interface device to specify operations of the packet processing pipeline of the network interface device.

FLOW OFFLOADING METHOD FOR A PROGRAMMABLE NETWORK INTERFACE CONTROLLER (NIC)
20230091195 · 2023-03-23 ·

Examples described herein relate to a driver that is to: determine a configuration of a packet processing pipeline of a network interface device to perform an instruction set written in a domain specific language (DSL) for the packet processing pipeline based on emulation or analysis of a parser of the packet processing pipeline and provide the configuration to the packet processing pipeline of the network interface device to specify operations of the packet processing pipeline of the network interface device.

TAGGING PACKETS FOR MONITORING AND ANALYSIS

Some embodiments provide a method for performing data traffic monitoring. The method processes a packet through a packet processing pipeline that includes multiple stages. At a filtering stage, the method tags the packet with a set of monitoring actions for subsequent stages to perform on the packet based on a determination that the packet matches a particular filter. For each stage of a set of packet processing stages subsequent to the filtering stage, the method (i) executes any monitoring actions specified for the stage to perform on the packet and (ii) sends the packet to a next stage in the packet processing pipeline.