公开(公告)号：US11316750B1

公开(公告)日：2022-04-26

申请号：US17077073

申请日：2020-10-22

Applicant: Cisco Technology, Inc.

Inventor： Qihong Shao ,  David John Zacks ,  Xinjun Zhang

IPC: G06F15/173 ,  H04L41/14 ,  H04L41/12 ,  H04L41/147 ,  H04L43/0817 ,  H04L41/5067 ,  H04L43/045 ,  H04L43/06 ,  H04L43/55

Abstract: A method, computer system, and computer program product are provided for peer risk benchmarking. Customer data for a first network is obtained, wherein the customer data comprises a role of one or more network devices in the first network and a plurality of risk reports corresponding to the one or more network devices, and wherein each risk report is associated with a particular dimension of a plurality of dimensions of risk for the one or more network devices. A network profile image is generated by processing the plurality of risk reports. A generative adversarial network generates a synthetic network profile image from the network profile image, wherein the synthetic network profile image does not include the customer data. A second network is evaluated using the synthetic network profile image to identify differences between the first network and the second network.

公开(公告)号：US20210144075A1

公开(公告)日：2021-05-13

申请号：US17155312

申请日：2021-01-22

Applicant: Cisco Technology, Inc.

Inventor： Atri Indiresan ,  Linda Tin-Wen Cheng ,  Melvin Tsai ,  Peter Geoffrey Jones ,  Da-Yuan Tung ,  David John Zacks

IPC: H04L12/26 ,  H04L12/741 ,  H04L29/06

Abstract: Presented herein is an exemplified system and method that provides visibility, for traffic analytics, into secured encapsulated packet (e.g., secure VXLAN-GPE packet, a secure metadata-GPE packet or other GPE standards). The exemplified system and method facilitate encryption of traffic in a granular manner that also facilitate the monitoring of said secure traffic in a fabric network in an end-to-end manner throughout the network. Such monitoring can be beneficially used for analytics, performance analysis, and network debugging/troubleshooting.

公开(公告)号：US10999173B2

公开(公告)日：2021-05-04

申请号：US16390695

申请日：2019-04-22

Applicant: Cisco Technology, Inc.

Inventor： David John Zacks ,  Vikram Vikas Pendharkar ,  Peter Geoffrey Jones ,  Thomas Szigeti ,  Praveen T. Chandra

IPC: H04L12/26 ,  H04L12/801 ,  H01L29/06 ,  H04L29/06

Abstract: Systems, methods, and computer-readable media for monitoring traffic in a network include receiving, at an analytics platform connected to the network, one or more encapsulated packet headers from one or more network nodes of the network. From the one or more encapsulated packet headers, at least one or more source addresses of the one or more network nodes which transmitted the encapsulated packet headers, and one or more timestamps at which the one or more encapsulated packet headers were transmitted from the one or more network nodes may be determined. From at least the one or more source addresses and timestamps, network traffic information such as one or more of latency or jitter of data packets transiting through the one or more network nodes may be determined, wherein the one or more encapsulated packet headers may correspond to the data packets transiting through the one or more network nodes.

公开(公告)号：US20210083960A1

公开(公告)日：2021-03-18

申请号：US16575015

申请日：2019-09-18

Applicant: Cisco Technology, Inc.

Inventor： David John Zacks ,  Thomas Szigeti ,  Hanoch Haim ,  Anoop Vetteth

IPC: H04L12/26 ,  H04L12/947

Abstract: A method relates to providing arbitrary and custom application traffic generation on network devices. The method includes identifying, via a network controller, an application associated with a network to yield an identified application, spinning up, by the network controller, a traffic generator in a container on a network device, wherein the traffic generator is configured to emulate traffic associated with the network device and the identified application and monitoring performance of at least one of the identified application in the network and the traffic generator on the network device.

公开(公告)号：US20210058306A1

公开(公告)日：2021-02-25

申请号：US16549407

申请日：2019-08-23

Applicant: Cisco Technology, Inc.

Inventor： Thomas Szigeti ,  David John Zacks ,  Mark Montanez ,  Prakash Kaligotla

IPC: H04L12/26 ,  H04L12/24

Abstract: Systems, methods, and computer-readable for determining performance metrics of a network include obtaining, from a network assurance system, one or more network performance metrics, the network performance metrics corresponding to execution of one or more applications in a network domain. An Application Performance Management (APM) system provides one or more applications performance metrics, the applications performance metrics corresponding to execution of the one or more applications in an applications domain. The one or more network performance metrics are integrated with the one or more applications performance metrics to determine integrated performance metrics for the one or more applications across the network domain and the applications domain.

公开(公告)号：US20210036916A1

公开(公告)日：2021-02-04

申请号：US17021265

申请日：2020-09-15

Applicant: Cisco Technology, Inc.

Inventor： Thomas Szigeti ,  David John Zacks ,  Peter Geoffrey Jones

IPC: H04L12/24 ,  H04L12/947

Abstract: Systems and methods provide for performing performance analytics processing of network traffic by copying packets of network traffic to a switch CPU based on a flag. The systems and methods disclosing receiving network traffic comprising one or more packet, generating a network traffic flow record associated with the received network traffic, the network traffic flow record including a copy-to-CPU bit and one or more function flag bits, setting the copy-to-CPU bit to an on configuration, processing the one or more packets by one or more functions to generate network flow analytics, wherein the one or more function flag bits are set in response to the one or more functions generating network flow analytics, and setting the copy-to-CPU bit to an off configuration.

公开(公告)号：US10911341B2

公开(公告)日：2021-02-02

申请号：US16547002

申请日：2019-08-21

Applicant: Cisco Technology, Inc.

Inventor： David John Zacks ,  Vikram Vikas Pendharkar ,  Shawn Michael Wargo ,  Thomas Szigeti

IPC: G06F15/16 ,  H04L12/26 ,  H04L12/721

Abstract: Systems and methods provide for monitoring a state of a network fabric utilizing user traffic. A fabric node (e.g., switch, router, or other network device) can receive user traffic from a node (e.g., network device, network appliance, or endpoint). The fabric node can match the user traffic to a tuple stored in a hardware counter matrix of the fabric node, the tuple corresponding to a count in the hardware counter matrix. The fabric node can increment the count. The fabric node can transmit an active probe to the node in response to the count not incrementing within a first time. The fabric node can transmit to a network management system data indicative of a disconnection between the fabric node and the node in response to the fabric node not receiving a response to the active probe within a second time.

公开(公告)号：US20200162355A1

公开(公告)日：2020-05-21

申请号：US16547002

申请日：2019-08-21

Applicant: Cisco Technology, Inc.

Inventor： David John Zacks ,  Vikram Vikas Pendharkar ,  Shawn Michael Wargo ,  Thomas Szigeti

IPC: H04L12/26 ,  H04L12/721

Abstract: Systems and methods provide for monitoring a state of a network fabric utilizing user traffic. A fabric node (e.g., switch, router, or other network device) can receive user traffic from a node (e.g., network device, network appliance, or endpoint). The fabric node can match the user traffic to a tuple stored in a hardware counter matrix of the fabric node, the tuple corresponding to a count in the hardware counter matrix. The fabric node can increment the count. The fabric node can transmit an active probe to the node in response to the count not incrementing within a first time. The fabric node can transmit to a network management system data indicative of a disconnection between the fabric node and the node in response to the fabric node not receiving a response to the active probe within a second time.

公开(公告)号：US12284105B2

公开(公告)日：2025-04-22

申请号：US18215508

申请日：2023-06-28

Applicant: Cisco Technology, Inc.

Inventor： Walter Theodore Hulick, Jr. ,  David John Zacks ,  Thomas Szigeti

IPC: G06F15/173 ,  H04L43/065 ,  H04L43/50

Abstract: In one embodiment, a device obtains testing parameters used by a plurality of agents in a network to perform testing with respect to an online application. The device identifies overlapping parameters among the testing parameters and generates a consolidated set of testing parameters for the overlapping parameters. The device configures the plurality of agents such that a singular testing agent performs testing with respect to the online application using the consolidated set of testing parameters instead of multiple testing agents performing testing with respect to the online application using the overlapping parameters.

公开(公告)号：US12255869B2

公开(公告)日：2025-03-18

申请号：US17897745

申请日：2022-08-29

Applicant: Cisco Technology, Inc.

Inventor： Nagendra Kumar Nainar ,  Carlos M. Pignataro ,  David John Zacks ,  Thomas Szigeti

IPC: H04L61/4511 ,  H04L61/2514 ,  H04L61/3015 ,  H04L67/1036

Abstract: Methods are provided to perform a name resolution triggered monitoring agent selection for full stack observability. The methods involve obtaining a name resolution request for an enterprise service to be accessed by an endpoint device. A plurality of service instances are configured to provide the enterprise service. The methods further involve determining, based on the name resolution request, a monitoring agent from a plurality of monitoring agents of a monitoring service that monitors performance of the enterprise service and selecting a service instance, from the plurality of service instances, that is associated with the monitoring agent in a name resolution record. The methods further involve providing, to the endpoint device, location information for accessing the service instance and provisioning the monitoring agent to monitor the performance of the enterprise service executed by the service instance for the endpoint device.