9 results about "Packet payload" patented technology

Aspects of the subject disclosure may include, for example, identifying a flow of data packets between first and second network addresses of a network, with each packet including respective header and payload portions. The identified flow of data packets is monitored over a number of sample periods to obtain a number of monitored results. A data-flow activity record is generated, having a number of symbols corresponding to the number of monitored results, the symbols including an active symbol value indicative of a presence of an exchange of data and an idle symbol value indicative of an absence of an exchange of data. A suitability of the identified data flow is inferred for estimating a throughput of the network according to the data-flow activity record without interpreting contents of each respective packet payload portion. Other embodiments are disclosed.

The application discloses a data link layer switching method, system, device and medium, and relates to the technical field of communication; the method comprises the following steps: in an error correction coding system of a given channel error probability, a wireless channel state is monitored, and an optimal packet length corresponding to a maximum wireless channel throughput is calculated; a data frame of a fiber channel is split based on the optimal packet length, and a wireless data packet payload is obtained; the wireless data packet payload is reconstructed, and a data frame meeting a wireless channel transmission standard is obtained. The application aims to provide a data link layer switching method, system, device and medium, adopts a "direct splitting-repackaging" conversion mode, and effectively improves the switching efficiency of a special network communication data link layer channel.

This application provides a method and apparatus for characterizing encrypted malicious traffic based on statistical behavior sequences. The method includes: acquiring and preprocessing a network traffic capture file containing encrypted malicious traffic to obtain an encrypted bidirectional stream with an unparseable payload and anomaly-removed data; extracting flow-level statistical features based on the stream, constructing a standardized behavior sequence through channel clustering and sequence length standardization; performing self-supervised joint training on the encoding and decoding models, optimizing the parameters, and then determining the encoding model as the feature extraction model; constructing the standardized behavior sequence of the traffic to be detected, inputting it into the model to output a behavior representation vector, then inputting it into a machine learning model to output the identification result representing the malicious attributes, category, or abnormal state of the traffic to be detected. This method eliminates the need to parse the packet payload, accurately characterizes the overall behavior pattern of encrypted traffic, improves the stability and generalization of the representation vector, reduces sample labeling dependence, and efficiently adapts to downstream encrypted traffic analysis and detection tasks.

A stacked memory such as a high bandwidth memory (HBM) with a wide data path is used by a streaming pipeline in a network interface controller to buffer segments of a data packet to allow the network interface controller to perform operations on the packet payload. The headers and packet payload can be scanned and classified concurrently with the buffered payload parsed in parallel.

An artificial intelligence ensemble has been developed for XSS detection with high accuracy. The artificial intelligence ensemble is created with a deep learning model and a machine learning model, each trained on different perspectives of token sequences extracted from packet payloads. Pre-processing of the raw data (i.e., the packet payload) generates a sequence of tokens that represents the payload and then generates a sequence of abstract tokens from the sequence of tokens. The deep learning model is trained on abstract token sequences to detect XSS from the perspective of patterns of token sequences. The other model is trained on pattern-based features extracted from the sequence of tokens to detect XSS from the perspective of features corresponding to characteristics of tokens sequences corresponding to heuristics gleaned for XSS. After each model is trained, the models are combined and deployed for inline detection of XSS in payload traffic from the different perspectives.

Zero-trust network access (ZTNA) with user datagram protocol (UDP) message forwarding is disclosed. A forwarding rule is determined based on a destination address associated with a received data traffic packet formatted according to a first protocol (e.g., UDP). A bi-directional tunnel is created to forward the traffic based on the determined forwarding rule. A request is generated over a stream having a corresponding stream identifier within the bi-directional tunnel to establish a connection with a proxy device. The traffic packet payload formatted according to the first protocol is wrapped with at least the stream identifier. The wrapped data traffic packet is forwarded to a client device based on the determined forwarding rule to a destination device corresponding to the stream identifier.

This invention belongs to the field of automotive testing technology and discloses a multifunctional automotive TSN testing device and its testing method. The testing method includes: enabling all test ports to share the same time base; generating inbound and outbound timestamps for all incoming and outbound frames in a unified time domain; forming a port-level time-aware scheduling matrix; deeply binding the Layer 3 packet payload to a designated physical port and outputting test traffic through the timestamp injection unit of each port; recording the inbound and outbound timestamps of abnormal frames under the same time base; generating TSN consistency verification results based on the inbound and outbound timestamps; and performing cross-protocol delay consistency verification between automotive Ethernet and CAN / LIN. This invention achieves TSN function verification and cross-protocol delay consistency testing under a unified time base, improving the overall testing accuracy and consistency analysis capability in a multi-protocol automotive network environment.

This invention discloses a network congestion control method and system based on TCP packet payload truncation. The method includes: a sending end sending an original TCP packet to a network device; when the network device detects impending congestion, it truncates the payload, retaining only the IP header and TCP header, setting a pre-defined bit in the first field to a truncation flag, and encoding the total length information of the original TCP packet; the network device modifies the Total Length field of the IP header of the TCP packet to the current actual length, calculates and updates the IP checksum, keeps the TCP header and its checksum unchanged, obtains a Cut packet, and sends it to the receiving end; after receiving the TCP packet, the receiving end, when checking that the pre-defined bit in the first field is a truncation flag, ignores TCP checksum errors, extracts the total length information of the original TCP packet, and constructs an ACK acknowledgment packet based on the total length information; after receiving the ACK acknowledgment packet, the sending end retransmits data of the corresponding length according to the total length information. This invention enables rapid congestion recovery of TCP packets.

Examples described herein relate to a network interface device. The network interface device can include circuitry that is to: receive a first packet comprising a first packet header and a first packet payload; receive multiple subsequent packets comprising multiple packet headers for respective multiple subsequent packets; update at least one of the multiple packet headers; and construct egress packets. In some examples, the egress packets include respective one of the multiple packet headers and the first packet payload.