Accelerating device, connection and service discovery

• US 10,033,583 B2
• Filed: 04/22/2014
• Issued: 07/24/2018
• Est. Priority Date: 04/22/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Farrell, Craig A., Martin, Daniel J., Sarwal, Piyush
• Primary Examiner(s): Nguyen, Thuong
• Application Number:
  US14/258,262
• Publication Number:
  US 20150304167A1
• Time in Patent Office: 1,554 Days
• Field of Search: 709221, 709223, 370331, 726 1, 726 4
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history

Abstract

There are provided a system, a method and a computer program product for managing one or more network devices. The one or more network devices are connected indirectly or directly to one or more networks and communicate each other by exchanging one or more messages. A classifier intercepts the one or more messages associated with one or more network devices. The classifier classifies each of the intercepted messages into a layer. A discovery system receives the each classified message and detecting, based on the each received classified message, a new network device added to the one or more networks and detecting one or more configuration changes made on the one or more network devices.

Claims

1. A computer-implemented apparatus for managing one or more network devices in one or more networks, comprising:

a memory device storing program instructions; and

two or more processors coupled with the memory device, a first processor of the two or more processors configured to run the program instructions to perform;

intercept at least one message;

parse the intercepted at least one message;

determine, based on a result of parsing the intercepted at least one message;

a network domain where the intercepted at least one message is processed; and

determine at least one network device of the one or more network devices with which the intercepted at least one message is associated;

send the intercepted at least one message to one or more second processors at the network domain determined based on the intercepted at least one message, the one or more second processors being included in the two or more processors and configured to;

parse the intercepted at least one message sent from the first processor;

determine, based on a result of parsing the intercepted at least one message sent from the first processor, the intercepted at least one message as corresponding to one of a plurality of message groups, the plurality of message groups including;

a message group associated with messages for adding a new entity to the one or more networks; and

a message group associated with messages for changing a configuration of the at least one network device;

add the new entity to the one or more networks or change the configuration of the at least one network device based on the determined message group to which the intercepted at least one message corresponds;

generate and send a query signal to the at least one network device; and

evaluate an accuracy of the determined message group based on a response to the query signal received from the at least one network device by performing at least;

retrieving a previous configuration information stored in a database associated with the at least one network device using the query signal;

comparing a current configuration information in the intercepted at least one message with the retrieved previous configuration information;

determining that the new entity is added to the one or more networks based on a comparison result of the current configuration information and the retrieved previous configuration information,

wherein the comparison result includes identifying a new IP address added to the current configuration information; and

determining that the changing of the configuration is made on the at least one network device based on the comparison result of the current configuration information and the retrieved previous configuration information.

2. The apparatus according to claim 1, wherein the at least one network device includes one or more of:

a server device connected to the one or more networks;

a virtual machine running on the server device;

a data storage device connected to the server device; and

one or more communication paths in the one or more networks.

3. The apparatus according to claim 2, wherein the data storage device stores the at least one message according to corresponding message groups.

4. The apparatus according to claim 1, wherein the intercepted at least one message includes:

one or more configuration message associated with the at least one network device;

one or more configuration files associated with the at least one network device;

one or more messages that indicates a creation of one or more virtual machines on the at least one network device;

a trap message that reinitializes the at least one network device and notifies whether the configuration of the at least one network device is altered or not;

log files echoed from the at least one network device; and

service catalogs associated with the at least one network device.

5. The apparatus according to claim 1, wherein the first processor is further configured to:

identify one or more layers of;

a layer corresponding to an operating system of the at least one network device;

a layer corresponding to a physical link in the one or more networks; and

a layer corresponding to each of the one or more networks.

6. The apparatus according to claim 5, wherein to determine the network domain and the at least one network device message, the first processor is further configured to:

determine a sender, a receiver and a content of the intercepted at least one message.

7. The apparatus according to claim 6, wherein to determine the network domain and the at least one network device, the first processor is further configured to:

evaluate whether each of the sender, the receiver and the content of the at least one message matches with a corresponding one of a sender'"'"'s identification (ID) of a senders'"'"' address list, a receiver'"'"'s ID of a receivers'"'"' address list, and a keyword of one or more predetermined keywords, wherein the senders'"'"' address list, the receivers'"'"' address list, and the one or more predetermined keywords are stored in one or more storage devices; and

upon determining that each of the sender, the receiver and the content of the at least one message matches with the corresponding one of the sender'"'"'s ID, the receiver'"'"'s ID, the keyword of the one or more predetermined keywords, send the at least one message to the second processor at the network domain.

8. The apparatus according to claim 6, wherein to determine the network domain and the at least one network device, the first processor is further configured to:

evaluate whether each of the sender and the receiver of the at least one message matches with a corresponding one of a sender'"'"'s identification (ID) of a senders'"'"' address list and a receiver'"'"'s ID of a receivers'"'"' address list, wherein the senders'"'"' address list and the receivers'"'"' address list are stored in one or more storage devices; and

upon determining that each of the sender and the receiver of the at least one message matches with the corresponding one of the sender'"'"'s ID and the receiver'"'"'s ID, send the at least one message to the second processor at the network domain.

9. The apparatus according to claim 6, wherein to determine the network domain and the at least one network device, the first processor is further configured to:

evaluate whether each of the content of the at least one message matches with a keyword of the one or more predetermined keywords stored in one or more storage devices; and

upon determining that the content of the at least one message matches with the keyword of the one or more predetermined keywords, send the at least one message to the second processor at the network domain.

10. The apparatus according to claim 6, wherein to determine the network domain and the at least one network device, the first processor is further configured to:

evaluate whether each of the sender, the receiver or the content of the at least one message matches with a corresponding one of a sender'"'"'s identification (ID) of a senders'"'"' address list, a receiver'"'"'s ID of a receivers'"'"' address list, or a keyword of one or more predetermined keywords;

upon determining that there is no layer including a sender'"'"'s identification (ID) of a senders'"'"' address list, a receiver'"'"'s ID of a receivers'"'"' address list, and a keyword of one or more predetermined keywords, each of which is matched with a corresponding one of the sender, the receiver and the content of the at least one message, insert a time stamp, which indicates a time period taken to process the at least one message by the first processor, into the at least one message; and

place the at least one message with the inserted time stamp in a pending table.

11. The apparatus according to claim 10, wherein to determine the network domain and the at least one network device, the first processor is further configured to:

search the pending table in order to find a match between the time stamp and a pre-determined elapsed time set in a pending table entry;

upon finding the match, send the at least one message to a router that forwards the at least one message to the network domain that corresponds to the found match; and

upon finding no match, create an entry, in the pending table, which represents the at least one message and delete the at least one message.

12. The apparatus according to claim 1, wherein a third processor of the two or more processors is further configured to:

determine a relationship between the at least one message including a first message and a second message both indicating a same sender and a same receiver and having different header information; and

create, based on the determined relationship, a network topology graph of the at least one network device and of the one or more networks.

13. The apparatus according to claim 1, wherein the plurality of message groups further includes a message group associated with messages for adding a new service to the at least one network device, and

wherein the adding a new service includes installing a new software application, and the adding the new entity to the one or more network devices includes creating a virtual machine on the at least one network device.

14. The apparatus according to claim 1, wherein the one or more second processors are further configured to:

determine that the changing of the configuration of the at least one network is not made on the at least one network device, upon receiving no echoed response from the at least one network device during a predetermined time period.

15. A method for managing one or more network devices in one or more networks, the method comprising:

exchanging, by a first processor, at least one message between the at least one network device;

intercepting, by the first processor, the at least one message;

parsing, by the first processor, the intercepted at least one message;

determining, by the first processor, based on a result of parsing the intercepted at least one message;

a network domain where the intercepted at least one message is processed; and

determining at least one network device of the one or more network devices with which the intercepted at least one message is associated;

sending, by the first processor, the intercepted at least one message to one or more second processors at the network domain determined based on the intercepted at least one message;

parsing, by the one or more second processors, the intercepted at least one message sent from the first processor;

determining, by the one or more second processors, based on a result of parsing the intercepted at least one message sent from the first processor, the intercepted at least one message as corresponding to one of a plurality of message groups, the plurality of message groups including;

a message group associated with messages for adding a new entity to the one or more networks; and

a message group associated with messages for changing a configuration of the at least one network device;

adding, by the one or more second processors, the new entity to the one or more networks or changing the configuration of the at least one network device based on the determined message group to which the intercepted at least one message corresponds;

generating and sending, by the one or more second processors, a query signal to the at least one network device; and

evaluating, by the one or more second processors, an accuracy of the determined message group based on a response to the query signal received from the at least one network device by performing at least;

retrieving a previous configuration information stored in a database associated with the at least one network device using the query signal;

comparing a current configuration information in the intercepted at least one message with the retrieved previous configuration information;

determining that the new entity is added to the one or more networks based on a comparison result of the current configuration information and the retrieved previous configuration information, wherein the comparison result includes identifying a new IP address added to the current configuration information; and

determining that the changing of the configuration is made on the at least one network device, based on the comparison result of the current configuration information with the retrieved previous configuration information.

16. The method according to claim 15, wherein the intercepted at least one message includes:

one or more configuration message associated with the at least one network device;

one or more configuration files associated with the at least one network device;

one or more messages that indicates a creation of one or more virtual machines on the at least one network device;

a trap message that reinitializes the at least one network device and notifies whether the configuration of the at least one network device is altered or not;

log files echoed from the at least one network device; and

service catalogs associated with the at least one network device.

17. The method according to claim 15, wherein the plurality of message groups further includes a message group associated with messages for adding a new service to the at least one network device, and

wherein the adding a new service includes installing a new software application, and the adding the new entity to the one or more network devices includes creating a virtual machine on the at least one network device.

18. A computer program product for managing one or more network devices, the computer program product comprising a computer readable non-transitory storage medium, the computer readable storage medium readable by two or more processors and storing instructions run by the two or more processors for performing a method, said method comprising

exchanging by a first processor of the two or more processors, at least one message between the at least one network device;

intercepting, by the first processor, the at least one message;

parsing, by the first processor, the intercepted at least one message;

determining, by the first processor, based on a result of parsing the intercepted at least one message;

a network domain where the intercepted at least one message is processed; and

determining at least one network device of the one or more network devices with which the intercepted at least one message is associated;

sending, by the first processor, the intercepted at least one message to one or more second processors of the two or more processors at the network domain determined based on the intercepted at least one message;

parsing, by the one or more second processors, the intercepted at least one message sent from the first processor;

determining, by the one or more second processors, based on a result of parsing the intercepted at least one message sent from the first processor, the intercepted at least one message as corresponding to one of a plurality of message groups, the plurality of message groups including;

a message group associated with messages for adding a new entity to the one or more networks; and

a message group associated with messages for changing a configuration of the at least one network device;

adding, by the one or more second processors, the new entity to the one or more networks or changing the configuration of the at least one network device based on the determined message group to which the intercepted at least one message corresponds;

generating and sending, by the one or more second processors, a query signal to the at least one network device; and

evaluating, by the one or more second processors, an accuracy of the determined message group based on a response to the query signal received from the at least one network device by performing at least;

retrieving a previous configuration information stored in a database associated with the at least one network device using the query signal;

comparing a current configuration information in the intercepted at least one message with the retrieved previous configuration information;

determining that the new entity is added to the one or more networks based on a comparison result of the current configuration information and the retrieved previous configuration information, wherein the comparison result includes identifying a new IP address added to the current configuration information; and

determining that the changing of the configuration is made on the at least one network device based on the comparison result of the current configuration information and the retrieved previous configuration information.

19. The computer program product according to claim 18, wherein the plurality of message groups further includes a message group associated with messages for adding a new service to the at least one network device, and

wherein the adding a new service includes installing a new software application, and the adding the new entity to the one or more network devices includes creating a virtual machine on the at least one network device.