System, method, and computer program product for determining a hop count between network devices utilizing a binary search

• US 8,411,684 B1
• Filed: 10/26/2009
• Issued: 04/02/2013
• Est. Priority Date: 10/26/2009
• Status: Active Grant

• Current Assignee: Musarubra US LLC (Musarubra US SellCo LLC)
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Paranjape, Sameer Shashikant, Das, Sudeep, Chakravarthy, Anil Z.
• Primary Examiner(s): Kizou, Hassan
• Assistant Examiner(s): MAGLO, EMMANUEL K
• Application Number:
  US12/605,695
• Time in Patent Office: 1,254 Days
• Field of Search: 370/395.53, 370/390, 370/351, 370/389, 370/392, 709/232, 709/223
• US Class Current: 370/392
• CPC Class Codes: H04L 45/20 Hop count for routing purposes, e.g. TTL
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system, method, and computer program product are provided for determining a hop count between network devices utilizing a binary search. In use, a hop count range is identified based on a maximum hop count value. Furthermore, a plurality of packets are sent from a source device to a destination device for determining a hop count between the source device and the destination device, each of the packets having a different hop count threshold configured based on a binary search applied to the hop count range.

Claims

1. A computer program product embodied on a non-transitory computer readable medium for performing operations, comprising:

identifying a hop count range based on a maximum hop count value;

sending a plurality of packets from a source device to each of a plurality of destination devices for determining a hop count between the source device and each destination device, each of the packets sent to each destination device having a different hop count threshold configured based on a binary search applied to the hop count range; and

receiving a security update at the source device from a designated destination device, wherein the designated destination device is automatically designated from among the plurality of destination devices for sending the security update based, at least, on hop data stored as a result of the binary search and on a lowest hop count between itself and the source device from among the hop counts of the plurality of destination devices, the security update configured for updating anti-malware signatures used for malware detection by the source device.

2. The computer program product of claim 1, wherein the computer program product is operable such that the maximum hop count value is pre-configured by a user.

3. The computer program product of claim 1, wherein the computer program product is operable such that the hop count range is identified by determining a range between a hop count value of zero and the maximum hop count value.

4. The computer program product of claim 1, wherein each of the packets is a ping message.

5. The computer program product of claim 1, wherein the hop count threshold includes a number of hops over which the packet is allowed to be communicated.

6. The computer program product of claim 1, wherein the computer program product is operable such that a first one of the packets sent from the source device to the destination device has a hop count threshold equal to the maximum hop count value.

7. The computer program product of claim 1, wherein the computer program product is operable such that the binary search configures the hop count threshold based on a determination of whether a response packet was received at the source device from the destination device, the response packet including an acknowledgement or receipt of a last one of the packets sent from the source device to the destination device.

8. The computer program product of claim 1, wherein the hop count between the source device and the destination device includes a number of network devices between the source device and the destination device through which one of the packets must be sent for receipt by the destination device.

9. The computer program product of claim 1, the operations further comprising determining, for each of the plurality of destination devices, the hop count between the source device and the destination device, utilizing the binary search.

10. The computer program product of claim 4, wherein the ping message includes a field with a value of the hop count threshold.

11. The computer program product of claim 6, wherein, in response to receipt of a response packet by the source device from the destination device acknowledging receipt of the first one of the packets, the computer program product is operable such that a second one of the packets is sent from the source device to the destination device.

12. The computer program product of claim 7, wherein the response packet includes an echo response packet.

13. The computer program product of claim 9, the operations further comprising sorting the plurality of destination devices based on the hop count determined for each of the plurality of destination devices.

14. The computer program product of claim 11, wherein the hop count threshold for the second one of the packets includes a midpoint of the hop count range.

15. The computer program product of claim 13, the operations further comprising identifying the designated destination device with the lowest hop count from the plurality of destination devices, utilizing the sorting.

16. The computer program product of claim 15, wherein each of the plurality of destination devices each include a repository storing security updates capable of being utilized to update a security system of the source device.

17. A method, comprising:

identifying a hop count range based on a maximum hop count value;

sending a plurality of packets from a source device to each of a plurality of destination devices for determining a hop count between the source device and each destination device, each of the packets sent to each destination device having a different hop count threshold configured based on a binary search applied to the hop count range; and

receiving a security update at the source device from a designated destination device, wherein the designated destination device is automatically designated from among the plurality of destination devices for sending the security update based, at least, on hop data stored as a result of the binary search and on a lowest hop count between itself and the source device from among the hop counts of the plurality of destination devices, the security update configured for updating anti-malware signatures used for malware detection by the source device.

18. A system, comprising:

a processor coupled to a memory, wherein the system is configured for;

identifying a hop count range based on a maximum hop count value;

sending a plurality of packets from a source device to each of a plurality of destination devices for determining a hop count between the source device and each destination device, each of the packets sent to each destination device having a different hop count threshold configured based on a binary search applied to the hop count range; and

receiving a security update at the source device from a designated destination device, wherein the designated destination device is automatically designated from among the plurality of destination devices for sending the security update based, at least, on hop data stored as a result of the binary search and on a lowest hop count between itself and the source device from among the hop counts of the plurality of destination devices, the security update configured for updating anti-malware signatures used for malware detection by the source device.

19. The system of claim 18, wherein the processor is coupled to the memory via a bus.