An operation method of a first communication node among a plurality of communication nodes included in an Ethernet-based vehicle network includes: receiving a first message indicating an operation of a first function of a vehicle from a second communication node among the plurality of communication nodes; determining a third communication node performing a second function corresponding to the first function among the plurality of communication nodes; determining at least one communication node providing data related to the second function among the plurality of communication nodes; and configuring port mirroring for the first function such that a second message received from the at least one communication node is mirrored to the third communication node.

A satellite user terminal gateway which performs transmission control protocol acceleration to enhance communication speed between a satellite user terminal and a satellite communication network. The satellite user terminal gateway includes a transceiver configured to communicate with a satellite communication network to receive data packets from the satellite communication network, and a controller configured to control the transceiver. The satellite user terminal gateway further includes a processor configured to identify transmission control protocol data packets among the received data packets to mirror the transmission control protocol data packets to the controller while routing the received data packets through the satellite user terminal gateway.

A non-transitory computer-readable storage medium storing a program that causes a computer to execute a process, the process including writing, to a memory, a packet obtained by copying a packet being transmitted, reading, from the memory, the packet to be transferred to a device that diagnoses a communication state, selecting, from packets stored in the memory, one or more packets subjected to at least one of a connection procedure and a disconnection procedure in a predetermined protocol, and discarding, from the memory, one or more packets other than the one or more selected packets.

A method including providing a network switch, including switching circuitry, packet drop decision circuitry, packet duplication circuitry, and packet exporting circuitry, and performing the following in the network switch: switching packets in the switching circuitry, identifying a packet that is to be dropped in the packet drop decision circuitry, duplicating the packet that is to be dropped in the packet duplication circuitry, producing a first packet and a second packet, exporting the first packet to a tail-drop packet buffer in the packet exporting circuitry, and exporting the second packet to a cyclic packet buffer in the packet exporting circuitry. Related apparatus and methods are also provided. The abstract is not intended to be limiting.

Some embodiments provide a network forwarding element with a data-plane forwarding circuit that has a parameter collecting circuit to store and distribute parameter values computed by several machines in a network. In some embodiments, the machines perform distributed computing operations, and the parameter values that compute are parameter values associated with the distributed computing operations. The parameter collecting circuit of the data-plane forwarding circuit (data plane) in some embodiments (1) stores a set of parameter values computed and sent by a first set of machines, and (2) distributes the collected parameter values to a second set of machines once it has collected the set of parameter values from all the machines in the first set. The first and second sets of machines are the same set of machines in some embodiments, while they are different sets of machines (e.g., one set has at least one machine that is not in the other set) in other embodiments. In some embodiments, the parameter collecting circuit performs computations on the parameter values that it collects and distributes the result of the computations once it has processed all the parameter values distributed by the first set of machines. The computations are aggregating operations (e.g., adding, averaging, etc.) that combine corresponding subset of parameter values distributed by the first set of machines.

The network switch architecture permits modifications to the network topology in real time without the need for manual intervention. In this architecture, a switching core is capable of switching data paths directly from the ingress or egress of the switching core to alternate destination ports in real time, either under software or hardware control.

A network switch device includes an L1 switch having a first set of external ports and a first set of internal ports. The network switch device further includes an L2+L3 switch having a second set of internal ports, the L2+L3 switch operatively coupled to the L1 switch via the first set of internal ports and the second set of internal ports.

The present invention relates to a switch including a plurality of input ports, a plurality of output ports, at least one output port, called observation port, being connected to an observation module able to analyze the traffic of the frames passing through via the switch, and a conveying component configured to convey each frame.

The switch is configured to transmit, to the observation modules via the observation port, only frames according to a first observation condition and a second observation condition, The compliance of a frame with the first observation condition is determined as a function of an observation field and the compliance with the second observation condition is determined as a function of the identifier and/or of an input and/or output port associated with this frame.

Example methods are provided for port mirroring based on remote direct memory access (RDMA) in a software-defined networking (SDN) environment. One example method may comprise obtaining configuration information associated with a port mirroring session between a source logical port supported by a source host and a destination logical port supported by a destination host, and establishing an RDMA-based connection between the source and destination hosts. The method may also comprise: in response to detecting a packet passing through the source logical port, generating a mirrored packet based on the detected packet, and storing, in source memory associated with the source host, the mirrored packet in association with destination information identifying the destination logical port or destination host. The method may further comprise transferring the mirrored packet from the source memory to destination memory associated with the destination host via the RDMA-based connection.

A packet relay apparatus, which is configured to transmit from a mirror port a mirror packet copied from one of a packet to be received and a packet to be transmitted, the packet relay apparatus comprising: a packet receiving module configured to receive a packet from an input port; a security judgment module configured to judge whether or not the packet is possibly one of an attack and an attack sign; a mirror processing module configured to generate, when it is judged that the packet is possibly one of an attack and an attack sign, a replica of the packet as the mirror packet; and a transmitting module configured to transmit the mirror packet from the mirror port.