A network traffic device comprising: at least one network device adapted to receive network data packets; wherein said at least one network device filters network data packets to locate at least one identifying packet, and samples said network data packets to select at least one sample packet. The at least one network device may transfer said at least one identifying packet and said at least one sample packet to an analyser. A predetermined sample rate may determine the number of sample packets selected by said at least one network device.

Embodiments of this application describe a retransmission timeout (RTO) determining method and a related apparatus. The method includes a transmission device sending, to a network analyzer, a network throughput at which communication is performed through a first communication connection, where the network throughput is used by the network analyzer to determine an RTO corresponding to the first communication connection. The network analyzer obtains a first network throughput at which the transmission device performs communication through the first communication connection. The network analyzer calculates, based on the first network throughput, a first RTO corresponding to the first communication connection. The network analyzer sends the first RTO to the transmission device. The transmission device receives the first RTO sent by the network analyzer. The embodiments of this application help improve efficiency of retransmitting a lost data packet.

A test device for performing a bling scan includes a digital blind scan circuit. The blind scan circuit includes digital detectors for multiple cellular technologies that simultaneously perform correlation in a baseband frequency range to detect whether received RF signals include a channel of the technologies. The test device launches, responsive to detecting a channel from the blind scan, a signal analysis or a spectrum analysis application for the channel according to a carrier frequency and a technology identified for the channel by the blind scan.

A device may receive a hash table that includes lists of protocol detectors, wherein the hash table is generated based on historical process data identifying potential process variables associated with an industrial control system. The device may receive a packet identifying potential process variables associated with the industrial control system, and may extract, from the packet, packet data identifying a source address, a destination address, a port, and a transport protocol. The device may compare the packet data with data in the hash table to identify a set of lists of protocol detectors, and may process the packet data, with the set of lists of protocol detectors, to determine a matching protocol, no matching protocol, or a potential matching protocol for the packet. The device may perform one or more actions based on determining the matching protocol, no matching protocol, or the potential matching protocol for the packet.

A device may receive a hash table that includes lists of protocol detectors, wherein the hash table is generated based on historical process data identifying potential process variables associated with an industrial control system. The device may receive a packet identifying potential process variables associated with the industrial control system, and may extract, from the packet, packet data identifying a source address, a destination address, a port, and a transport protocol. The device may compare the packet data with data in the hash table to identify a set of lists of protocol detectors, and may process the packet data, with the set of lists of protocol detectors, to determine a matching protocol, no matching protocol, or a potential matching protocol for the packet. The device may perform one or more actions based on determining the matching protocol, no matching protocol, or the potential matching protocol for the packet.

A conversion device (10) includes a separation unit (11) that separates an inputted encapsulated packet into flow information and sampled headers including outer headers and inner headers, a decapsulation unit (12) that separates the outer headers from the sampled headers, and a conversion unit (13) that obtains statistics about the inner headers on the basis of the sampled headers separated from the outer headers, generates an xFlow packet including at least statistical information indicating the statistics about the inner headers, and outputs the generated xFlow packet to an external device.

There is provided a method for generating network optimizing information including the steps of identifying system devices that are comprised in a network, collecting metrics from the identified system devices, including collecting at least one metric relating to the operation, status, capability, limitations, expandability, scalability, or performance of the system devices, assessing the collected metrics according to a predetermined assessment protocol, generating a roster of metrics of interest, such metrics of interest being a group of the collected metrics that meet a selection criteria and not including other collected metrics that do not meet the selection criteria, and presenting each of the metrics of interest in a format suitable for a network operator to take corrective actions with regard to the identified non-compliant metrics or to capitalize on the identified optimization opportunities with respect to the network.

A multi-member Bluetooth device for communicating data with a remote Bluetooth device is disclosed including: a main Bluetooth circuit and an auxiliary Bluetooth circuit. In the period during which the auxiliary Bluetooth circuit operates at a sniffing mode, the auxiliary Bluetooth circuit sniffs packets transmitted from the remote Bluetooth device while the main Bluetooth circuit receives packets issued from the remote Bluetooth device, and the auxiliary Bluetooth circuit switches from the sniffing mode to a relay mode if the throughput of packets sniffed by the auxiliary Bluetooth circuit is lower than a predetermined threshold. In the period during which the auxiliary Bluetooth circuit operates at the relay mode, the main Bluetooth circuit receives packets transmitted from the remote Bluetooth device and forwards the received packets to the auxiliary Bluetooth circuit, and the auxiliary Bluetooth circuit does not sniff packets issued from the remote Bluetooth device.

A multi-member Bluetooth device for communicating data with a remote Bluetooth device is disclosed including: a main Bluetooth circuit and an auxiliary Bluetooth circuit. In the period during which the auxiliary Bluetooth circuit operates at a sniffing mode, the auxiliary Bluetooth circuit sniffs packets transmitted from the remote Bluetooth device while the main Bluetooth circuit receives packets issued from the remote Bluetooth device, and the auxiliary Bluetooth circuit switches from the sniffing mode to a relay mode if the throughput of packets sniffed by the auxiliary Bluetooth circuit is lower than a predetermined threshold. In the period during which the auxiliary Bluetooth circuit operates at the relay mode, the main Bluetooth circuit receives packets transmitted from the remote Bluetooth device and forwards the received packets to the auxiliary Bluetooth circuit, and the auxiliary Bluetooth circuit does not sniff packets issued from the remote Bluetooth device.

A network communication device includes a plurality of ports, a memory, and a processor. The plurality of ports is configured to receive a packet. A memory is configured to store a first lookup table and a second lookup table. An entry of the first lookup table includes a flag field. An entry of the second lookup table includes an entry address of the first lookup table. The processor is coupled to the memory and the plurality of ports. The network communication device is configured to: analyze the packet by a software or hardware to obtain a source Media Access Control (MAC) address; obtain, according to the source MAC address of the packet, the entry of the first lookup table; read the flag field of the entry; and determine, according to the flag field, whether the entry is referred by the second lookup table.