A method for synchronizing at least two environment sensors of a multi-sensor system using a central processing unit. In the method, the environment sensors acquire sensor signals that represent at least one item of environment information. The respective environment sensors generate data packets which include the respective acquired sensor signals and/or measured variables derived from the sensor signals in each case. These data packets are received by the central processing unit via a data network. Signal propagation times of the data packets for each environment sensor are ascertained using an algorithm, and a mean signal propagation time of data packets from a respective environment sensor is determined based on a content comparison of the measured variables included by the data packets with corresponding measured variables from data packets of at least one other environment sensor, and the determined mean signal propagation time is assigned to the respective environment sensor.

An industrial system for controlling backplane communication, including: a cluster manager including a primary switch linked to a primary control module, at least one Input/Output, I/O, module including a secondary switch linked to a secondary control module, a unidirectional communication line linking the cluster manager to the at least one IO module through passive base plates, wherein the cluster manager includes a transmission port and a reception port on the unidirectional communication line and the at least one Input/Output module includes a reception port on the unidirectional communication line, wherein the primary control module is configured to generate a pulse via the transmission port on the unidirectional communication line, wherein, upon reception of the pulse, the primary control module is configured to create a primary timestamp from a primary clock of the primary switch and the secondary control module is configured to create a secondary timestamp from a secondary clock of the secondary switch, wherein the primary control module is configured to send a message via the transmission port on the unidirectional communication line to the secondary control module, the message including the primary timestamp, wherein, upon reception of the message, the secondary control module is configured to synchronize the secondary clock with the primary clock based on the received primary timestamp and secondary timestamp.

A method for exchanging a clock synchronization packet performed by a network apparatus, including: exchanging a clock synchronization packet with a first clock source, where the network apparatus includes a boundary clock; determining a first time deviation of the boundary clock relative to the first clock source according to the clock synchronization packet exchanged with the first clock source, where the boundary clock avoids performing an operation of calibrating a time of a local clock of the boundary clock according to the first time deviation; and sending a clock synchronization packet to a first slave clock of the boundary clock, where the clock synchronization packet includes a first timestamp, a value of the first timestamp is equal to a first corrected value, and the first corrected value is a value obtained by the boundary clock by correcting the time of the local clock by using the first time deviation.

The disclosed computer-implemented method may include (i) assigning, by a source computing device, a timestamp to each of one or more clock synchronization protocol transactions, (ii) storing, by the source computing device, the clock synchronization protocol transactions to a high-bandwidth memory device, and (iii) synchronizing, by the source computing device, the clock synchronization protocol transactions with a destination computing device by: issuing data transport protocol packets to preserve a timing accuracy; and sending the clock synchronization protocol transactions to a destination computing device. Various other methods, systems, and computer-readable media are also disclosed.

A method includes capturing first data associated with a first packet flow originating from a first host using a first capture agent deployed at the first host to yield first flow data, capturing second data associated with a second packet flow originating from the first host from a second capture agent deployed outside of the first host to yield second flow data and comparing the first flow data and the second flow data to yield a difference. When the difference is above a threshold value, the method includes determining that a hidden process exists and corrective action can be taken.

The present application discloses a method for determining time information, including: detecting a signal of a periodic block, and recording a timestamp of the periodic block; and determining a time at which a time information message to be sent according to the timestamp of the periodic block matched with the time information message, and generating a timestamp of the time information message. The present application further discloses an apparatus and device for determining time information, and a storage medium.

A method for measuring asynchronous timestamp requests includes receiving a timestamp (“TS”) request from a client device during a first interval of a time of day (“TOD”) clock, and calculating, using the TOD clock, at a next interval of the TOD clock, a TS correction of the TS request relative to a reference point of the first TOD clock interval. The method further includes adding the TS correction to the reference point of the first interval of the TOD clock, and outputting the corrected TS to the client device.

Systems, methods, and computer-readable media for managing compromised sensors in multi-tiered virtualized environments. In some embodiments, a system can receive, from a first capturing agent deployed in a virtualization layer of a first device, data reports generated based on traffic captured by the first capturing agent. The system can also receive, from a second capturing agent deployed in a hardware layer of a second device, data reports generated based on traffic captured by the second capturing agent. Based on the data reports, the system can determine characteristics of the traffic captured by the first capturing agent and the second capturing agent. The system can then compare the characteristics to determine a multi-layer difference in traffic characteristics. Based on the multi-layer difference in traffic characteristics, the system can determine that the first capturing agent or the second capturing agent is in a faulty state.

A system includes a first module with a first clock; a second module with a second clock; and an Ethernet network interconnecting the first module and the second module by N Ethernet paths, N≥2; wherein the first module is configured to provide timestamps encapsulated in replicated Ethernet packets to the second module over each of the N Ethernet paths for redundancy. The first module can be configured to obtain timestamps from a first clock with each timestamp having a sequence identifier, replicate each timestamp and its sequence identifier, and encapsulate each replicated timestamp and its sequence identifier in an Ethernet packet and transmit each Ethernet packet over one of the N Ethernet paths. The second module can be configured to receive Ethernet packets over the N Ethernet paths; and utilize a first Ethernet packet with a given sequence identifier for synchronization of the second clock with the first clock.

A method at a first device for synchronising a first clock of the first device to a second clock of a second device, includes receiving a first message comprising an identifier from a third device; generating a first timestamp in dependence on the time at which the first message is received at the first device according to the first clock; receiving a second message from the second device comprising the identifier and a second timestamp, the second timestamp having been generated in dependence on the time at which the second device received the first message from the third device according to the second clock; and adjusting the first clock in dependence on a time difference between a time indicated by the first timestamp and a time indicated by the second timestamp.