1. In an Access Point, a method of authenticating a node prior to performing proxy registration on behalf of the node, comprising:
receiving a packet from the node, the packet including a source MAC address and a source IP address;
ascertaining whether a one-to-one mapping between the source MAC address and the source IP address exists in a mapping table; and
composing a registration request including a home address field including the source IP address and sending the registration request, thereby performing proxy registration on behalf of the node, wherein composing and sending the registration request are performed according to whether it is ascertained that the one-to-one mapping between the source MAC address and the source IP address exists in the mapping table.
2. The method as recited in claim 1, wherein composing the registration request comprises appending a MAC address extension to the registration request, the MAC address extension including the source MAC address.
3. An Access Point adapted for performing a method of authenticating a node prior to performing proxy registration on behalf of the node, comprising:
a processor; and
a memory, at least one of the processor and the memory being adapted for:
receiving a packet from the node, the packet including a source MAC address and a source IP address;
ascertaining whether a mapping between the source MAC address and the source IP address exists in a mapping table; and
composing a registration request including a home address field including the source IP address and sending the registration request, thereby performing proxy registration on behalf of the node, wherein composing and sending the registration request are performed according to whether it is ascertained that the mapping between the source MAC address and the source IP address exists in the mapping table.
4. In a Foreign Agent, a method of processing a registration request, comprising:
receiving a registration request having a home address field including a source IP address, a Home Agent field including a Home Agent address, and a MAC address extension including a source MAC address;
determining whether an entry including the source IP address and the source MAC address is in a visitor table maintained by the Foreign Agent; and
forwarding the registration request according to whether an entry in the visitor table maintained by the Foreign Agent includes the source IP address and the source MAC address.
5. The method as recited in claim 4, wherein determining whether the entry including the source IP address and the source MAC address is in the visitor table maintained by the Foreign Agent includes determining whether a one-to-one mapping exists between the source IP address and the source MAC address.
6. The method as recited in claim 5, wherein when the one-to-one mapping between the source IP address and the source MAC address does not exist in the visitor table, dropping the registration request without forwarding the registration request.
7. In a Home Agent, a method of processing a registration request, comprising:
receiving a registration request having a home address field including a source IP address, a care-of address field including a care-of address, and having a MAC address extension including a source MAC address; and
determining whether a one-to-one mapping between the source MAC address and the source IP address exists in a mobility binding table;
wherein registering the source IP address with the Home Agent, composing a registration reply and sending the registration reply to the care-of address are performed according to whether it is determined that a one-to-one mapping between the source MAC address and the source IP address exists in the mobility binding table.
8. The method as recited in claim 7, wherein composing a registration reply comprises:
composing a registration reply including a home address field including the source IP address, a care-of address field including the care-of address, and having a MAC address extension including the source MAC address.
9. In a Home Agent, a method of processing a registration request, comprising:
receiving a registration request having a home address field including a source IP address, a care-of address field including a care-of address, and having a MAC address extension including a source MAC address;
determining whether a mapping between the source MAC address and the source IP address exists in a mobility binding table;
updating the mobility binding table according to whether the mapping between the source MAC address and the source IP address exists in the mobility binding table;
composing a registration reply including a home address field including the source IP address, a care-of address field including the care-of address, and having a MAC address extension including the source MAC address; and
sending the registration reply to the care-of address.
10. The method as recited in claim 9, further comprising:
updating the mobility binding table with the mapping between the source MAC address and the source IP address such that the mapping is associated with the care-of address.
11. The method as recited in claim 10,
wherein composing and sending the registration reply to the care-of address are performed when it is determined that the mapping between the source MAC address and the source IP address exists in the mobility binding table.
12. The method as recited in claim 9, further comprising:
wherein composing and sending the registration reply to the care-of address are performed when it is determined that the mapping between the source MAC address and the source IP address exists in the mobility binding table.
13. The method as recited in claim 9, further comprising:
determining whether the source IP address matches a binding in the mobility binding table;
when the source IP address matches a binding in the mobility binding table, determining whether the binding maps the source MAC address to the source IP address; and
wherein composing and sending the registration reply to the care-of address is performed when it is determined that the binding maps the source MAC address to the source IP address.
14. The method as recited in claim 13, further comprising:
when the source IP address does not match the binding in the mobility binding table, updating the mobility binding table with a mapping between the source MAC address and the source IP address such that the mapping is associated with the care-of address.
15. In a Foreign Agent, a method of processing a registration request, comprising:
receiving a registration request having a home address field including a source IP address, a Home Agent field including a Home Agent address, and a MAC address extension including a source MAC address;
determining whether an entry including the source IP address and the source MAC address is in a visitor table maintained by the Foreign Agent; and
forwarding the registration request to the Home Agent address according to whether an entry including the source IP address and the source MAC address is determined to be in the visitor table maintained by the Foreign Agent.
16. The method as recited in claim 15, further comprising:
updating a visitor table such that the visitor table includes an entry that associates the source IP address and the source MAC address with the Home Agent address.
17. The method as recited in claim 16, wherein updating the visitor table is performed when the registration reply is received.
18. The method as recited in claim 15, further comprising:
determining whether an entry including the source IP address is in the visitor table;
when an entry including the source IP address is in the visitor table, determining whether the entry includes the source MAC address; and
when the entry is determined to include the source MAC address and the source IP address, forwarding the registration request to the Home Agent address.
19. The method as recited in claim 15, further comprising:
receiving a registration reply having a home address field including the source IP address, a Home Agent field including the Home Agent address, and a MAC address extension including the source MAC address; and
forwarding the registration reply to the source IP address.
20. The method as recited in claim 15, further comprising:
dropping the registration request when an entry including the source MAC address and the source IP address is determined not to be in the visitor table maintained by the Foreign Agent.
21. A Foreign Agent, comprising:
a processor; and
a memory, at least one of the processor and the memory being adapted for:
receiving a registration request having a home address field including a source IP address, a Home Agent field including a Home Agent address, and a MAC address extension including a source MAC address;
determining whether an entry including the source IP address and the source MAC address is in a visitor table maintained by the Foreign Agent; and
forwarding the registration request according to whether an entry in the visitor table maintained by the Foreign Agent includes the source IP address and the source MAC address.
22. A Home Agent, comprising:
a processor; and
a memory, at least one of the processor and the memory being adapted for:
receiving a registration request having a home address field including a source IP address, a care-of address field including a care-of address, and having a MAC address extension including a source MAC address; and
determining whether a one-to-one mapping between the source MAC address and the source IP address exists in a mobility binding table;
wherein registering the source IP address with the Home Agent, composing a registration reply and sending the registration reply to the care-of address are performed according to whether it is determined that a one-to-one mapping between the source MAC address and the source IP address exists in the mobility binding table.
23. The Home Agent as recited in claim 22, wherein composing a registration reply comprises:
composing a registration reply including a home address field including the source IP address, a care-of address field including the care-of address, and having a MAC address extension including the source MAC address.
24. A Home Agent, comprising:
a processor; and
a memory, at least one of the processor and the memory being adapted for:
receiving a registration request having a home address field including a source IP address, a care-of address field including a care-of address, and having a MAC address extension including a source MAC address;
determining whether a mapping between the source MAC address and the source IP address exists in a mobility binding table;
updating the mobility binding table according to whether the mapping between the source MAC address and the source IP address exists in the mobility binding table;
composing a registration reply including a home address field including the source IP address, a care-of address field including the care-of address, and having a MAC address extension including the source MAC address; and
sending the registration reply to the care-of address.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A computer-implemented method, comprising:
receiving raw data on a computing device;
dividing the raw data into a set of time stamped searchable events;
storing the set of events in an indexed data store;
applying an extraction rule to the set of events, wherein an extraction rule defines a field within an event from which to extract a value;
extracting a value from a field within an event, wherein the value is extracted using the extraction rule; and
displaying the event in a graphical interface, wherein the value extracted from the field within the event is emphasized.
2. The method of claim 1, wherein the set of events includes unstructured machine data.
3. The method of claim 1, wherein the extraction rule includes a regular expression.
4. The method of claim 1, wherein the extraction rule includes a regular expression automatically generated to extract a value selected from an event.
5. The method of claim 1, further comprising:
receiving input corresponding to a selection of the emphasized value from the displayed event; and
displaying one or more extraction rules that extract the selected emphasized value from the event when applied to the event.
6. The method of claim 1, further comprising:
receiving input corresponding to a selection of the emphasized value from the displayed event, wherein the selected emphasized value is included within a plurality of fields defined by a plurality of extraction rules, and wherein the plurality of fields at least partially overlap each other; and
displaying one or more of the plurality of extraction rules.
7. The method of claim 1, further comprising:
receiving input corresponding to a selection of the emphasized value from the displayed event; and
displaying two or more extraction rules that are associated with the selected emphasized value.
8. The method of claim 1, further comprising:
extracting an additional value from the displayed event using an additional extraction rule; and
emphasizing the additional value differently than the displayed emphasized value.
9. The method of claim 1, further comprising:
extracting an additional value in an additional filed defined by an additional extraction rule; and
determining that the field and the additional field overlap.
10. The method of claim 1, further comprising:
extracting an additional value in an additional filed defined by an additional extraction rule;
determining that the field and the additional field overlap;
receiving input corresponding to a hovering or a selection over an overlapping portion of the value and the additional value; and
concurrently displaying the value and the additional value.
11. A system, comprising:
a processor; and
a non-transitory computer-readable storage medium containing instructions configured to cause the processor to perform operations including:
receiving raw data on a computing device;
dividing the raw data into a set of time stamped searchable events;
storing the set of events in an indexed data store;
applying an extraction rule to the set of events, wherein an extraction rule defines a field within an event from which to extract a value;
extracting a value from a field within an event, wherein the value is extracted using the extraction rule; and
displaying the event in a graphical interface, wherein the value extracted from the field within the event is emphasized.
12. The system of claim 11, wherein the set of events includes unstructured machine data.
13. The system of claim 11, wherein the extraction rule includes a regular expression.
14. The system of claim 11, wherein the extraction rule includes a regular expression automatically generated to extract a value selected from an event.
15. The system of claim 11, further comprising instructions configured to cause the processor to perform operations including:
receiving input corresponding to a selection of the emphasized value from the displayed event; and
displaying one or more extraction rules that extract the selected emphasized value from the event when applied to the event.
16. The system of claim 11, further comprising instructions configured to cause the processor to perform operations including:
receiving input corresponding to a selection of the emphasized value from the displayed event, wherein the selected emphasized value is included within a plurality of fields defined by a plurality of extraction rules, and wherein the plurality of fields at least partially overlap each other; and
displaying one or more of the plurality of extraction rules.
17. The system of claim 11, further comprising instructions configured to cause the processor to perform operations including:
receiving input corresponding to a selection of the emphasized value from the displayed event; and
displaying two or more extraction rules that are associated with the selected emphasized value.
18. The system of claim 11, further comprising instructions configured to cause the processor to perform operations including:
extracting an additional value from the displayed event using an additional extraction rule; and
emphasizing the additional value differently than the displayed emphasized value.
19. The system of claim 11, further comprising instructions configured to cause the processor to perform operations including:
extracting an additional value in an additional filed defined by an additional extraction rule; and
determining that the field and the additional field overlap.
20. The system of claim 11, further comprising instructions configured to cause the processor to perform operations including:
extracting an additional value in an additional filed defined by an additional extraction rule;
determining that the field and the additional field overlap;
receiving input corresponding to a hovering or a selection over an overlapping portion of the value and the additional value; and
concurrently displaying the value and the additional value.
21. A computer-program product, tangibly embodied in a non-transitory machine-readable medium, including instructions configured to cause a data processing apparatus to:
receive raw data on a computing device;
divide the raw data into a set of time stamped searchable events;
store the set of events in an indexed data store;
apply an extraction rule to the set of events, wherein an extraction rule defines a field within an event from which to extract a value;
extract a value from a field within an event, wherein the value is extracted using the extraction rule; and
display the event in a graphical interface, wherein the value extracted from the field within the event is emphasized.
22. The computer-program product of claim 21, wherein the set of events includes unstructured machine data.
23. The computer-program product of claim 21, wherein the extraction rule includes a regular expression.
24. The computer-program product of claim 21, wherein the extraction rule includes a regular expression automatically generated to extract a value selected from an event.
25. The computer-program product of claim 21, further including instructions configured to cause the data processing apparatus to:
receive input corresponding to a selection of the emphasized value from the displayed event; and
display one or more extraction rules that extract the selected emphasized value from the event when applied to the event.
26. The computer-program product of claim 21, further including instructions configured to cause the data processing apparatus to:
receive input corresponding to a selection of the emphasized value from the displayed event, wherein the selected emphasized value is included within a plurality of fields defined by a plurality of extraction rules, and wherein the plurality of fields at least partially overlap each other; and
display one or more of the plurality of extraction rules.
27. The computer-program product of claim 21, further including instructions configured to cause the data processing apparatus to:
receive input corresponding to a selection of the emphasized value from the displayed event; and
display two or more extraction rules that are associated with the selected emphasized value.
28. The computer-program product of claim 21, further including instructions configured to cause the data processing apparatus to:
extract an additional value from the displayed event using an additional extraction rule; and
emphasize the additional value differently than the displayed emphasized value.
29. The computer-program product of claim 21, further including instructions configured to cause the data processing apparatus to:
extract an additional value in an additional filed defined by an additional extraction rule; and
determine that the field and the additional field overlap.
30. The computer-program product of claim 21, further including instructions configured to cause the data processing apparatus to:
extract an additional value in an additional filed defined by an additional extraction rule;
determine that the field and the additional field overlap;
receive input corresponding to a hovering or a selection over an overlapping portion of the value and the additional value; and
concurrently display the value and the additional value.