IP subnet discovery with ranked results
First Claim
1. A method of determining a probable IP subnet of a network, the method comprising:
- maintaining a table of possible networks in a memory of a computer system, wherein entries of the table of possible networks comprise respective network addresses, respective subnet masks and respective scores;
observing a packet received by the computer system;
determining an IP address of the packet;
comparing the IP address of the packet with the respective network addresses of the entries of the table of possible networks; and
provided the IP address of the packet falls under the respective network address of a particular entry, adjusting the respective score of the particular entry;
provided the IP address of the packet does not fall under the respective network addresses of the entries of the table of possible networks, creating a new entry in the table of possible networks corresponding to the IP address of the packet; and
ranking the entries of the table of possible networks based on their respective score.
1 Assignment
0 Petitions
Accused Products
Abstract
An embodiment of the present invention is directed to a method of determining a probable IP subnet of a network. The method includes maintaining a table of possible networks. The entries of the table include respective network addresses, respective subnet masks, and respective scores. The method also includes observing a packet, determining an IP address of the packet, and comparing the IP address of the packet with the respective network addresses of the entries of the table of possible networks. If the IP address of the packet falls under the respective network address of a particular entry, the respective score of the particular entry is adjusted. Otherwise, a new entry is created in the table of possible networks corresponding to the IP address of the packet. The method also includes ranking the entries of the table of possible networks based on their respective scores.
33 Citations
44 Claims
-
1. A method of determining a probable IP subnet of a network, the method comprising:
-
maintaining a table of possible networks in a memory of a computer system, wherein entries of the table of possible networks comprise respective network addresses, respective subnet masks and respective scores; observing a packet received by the computer system; determining an IP address of the packet; comparing the IP address of the packet with the respective network addresses of the entries of the table of possible networks; and provided the IP address of the packet falls under the respective network address of a particular entry, adjusting the respective score of the particular entry; provided the IP address of the packet does not fall under the respective network addresses of the entries of the table of possible networks, creating a new entry in the table of possible networks corresponding to the IP address of the packet; and ranking the entries of the table of possible networks based on their respective score. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13)
-
-
14. A system for determining a probable IP subnet of a network, the system comprising:
-
a network interface for sending and receiving a packet; a memory for storing a table of possible networks, wherein entries of the table of possible networks comprise respective network addresses, respective subnet masks, and respective scores; and a discovery port communicatively coupled with the network interface and the memory, the discovery port for observing the packet, for determining the IP address of the packet, for comparing the IP address of the packet with the respective network addresses of the entries of the table of possible networks, for adjusting the respective score of a particular entry provided the IP address of the packet falls under the respective network address of the particular entry, for creating a new entry in the table of possible networks corresponding to the IP address of the packet provided the IP address of the packet does not fall under the respective network addresses of the entries of the table of possible networks, and for ranking the entries of the table of possible networks based on their respective scores. - View Dependent Claims (15, 16, 17, 18, 19, 20, 21)
-
-
22. A non-transitory computer-readable storage medium having computer-readable program code stored thereon for causing a computer system to execute a method of determining a probable IP subnet of a network, the method comprising:
-
maintaining a table of possible networks in a memory of the computer system, wherein entries of the table of networks comprise respective network addresses, respective subnet masks and respective scores; observing a packet received by the computer system; determining an IP address of the packet; comparing the IP address of the packet with the respective network addresses of the entries of the table of possible networks; and provided the IP address of the packet does not fall under the respective network addresses of the entries of the table of possible networks, creating a new entry in the table of possible networks corresponding to the IP address of the packet; and maintaining a table of possible networks, wherein entries of the table of networks comprise respective network addresses, respective subnet masks and respective scores; provided the IP address of the packet falls under the respective network address of a particular entry, adjusting the respective score of the particular entry; ranking the entries of the table of possible networks based on their respective scores. - View Dependent Claims (23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34)
-
-
35. A computer system for determining a probable IP subnet of a first network, the system comprising:
-
a hardware layer comprising; a first network interface card (NIC) coupled with the first network; and a memory; a Virtual Machine layer comprising; a virtual NIC for sending and receiving a packet; a virtual memory for storing a table of possible networks, wherein entries of the table of possible networks comprise respective network addresses, respective subnet masks, and respective scores; and a discovery module communicatively coupled with the virtual NIC and the virtual memory, the discovery module for observing the packet, for determining the IP address of the packet, for comparing the IP address of the packet with the respective network addresses of the entries of the table of possible networks, for adjusting the respective score of a particular entry provided the IP address of the packet falls under the respective network address of the particular entry, for creating a new entry in the table of possible networks corresponding to the IP address of the packet provided the IP address of the packet does not fall under the respective network addresses of the entries of the table of possible networks, and for ranking the entries of the table of possible networks based on their respective scores; and a virtualization layer for interfacing between the hardware layer and the Virtual Machine layer. - View Dependent Claims (36, 37, 38, 39, 40, 41, 42, 43, 44)
-
Specification