Ingress points localization of a flow in a network

• US 20050091371A1
• Filed: 09/29/2004
• Published: 04/28/2005
• Est. Priority Date: 09/30/2003
• Status: Abandoned Application

• Current Assignee: Alcatel SA (Nokia Corporation)
• Original Assignee: Alcatel SA (Nokia Corporation)
• Inventors: Marilly, Emmanuel, Martinot, Olivier, Betge-Brezetz, Stephane, Delegue, Gerard
• Application Number:
  US10/951,730
• Publication Number:
  US 20050091371A1
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A data flow detection device (DD), for an edge equipment element (RP) of a communication network equipped with a network management system, includes detection means (MA) tasked to compare parameters, which are contained in the headers of data packets arriving at the ingress interfaces (IE) of the edge equipment element (RP) associated respectively with interface identifiers, with at least one configuration parameter received from the network management system. In the event where a header parameter of a data packet received at one of the ingress interfaces (IE) is found to be identical with the configuration parameter, the detection means (MA) generate an alarm message, intended for the network management system, where this message includes the identifier of the ingress interface (IE) which has received the data flow and the identifier of the configuration parameter.

Claims

1. A detection device of flow of data packets (DD) for an edge equipment element (RP) of a communication network (N) equipped with a network management system (NMS), characterized in that it includes detection means (MA) arranged to compare parameters, contained in the headers of data packets arriving at the ingress interfaces (IE) of the said edge equipment element (RP), associated respectively with interface identifiers, with at least one configuration parameter received from the said network management system (NMS) and associated with a parameter identifier, and, in the event that a header parameter of a data packet received at one of the said ingress interfaces (IE) is identical to the said configuration parameter, of generating an alarm message intended for the said network management system (NMS), where this message includes the identifier of the ingress interface (IE) having received the said data flow and the said parameter identifier.

2. A device according to claim 1, characterized in that the said detection means (MA) are arranged to stop comparing the packet headers with a chosen configuration parameter in the event of receiving a message coming from the said network management system (NMS) and requiring that this comparison should be stopped.

3. A device according to claim 1, characterized in that the said configuration parameter is chosen from a group which includes at least source and destination addresses, a protocol identifier and a DSCP identifier.

4. A device according to claim 1, characterized in that it is installed in a unit capable of being connected to a network edge equipment element (RP).

5. A network edge equipment element (RP) for a communication network (N) fitted with a network management system (NMS), characterized in that it includes a detection device (DD) according to claim 1.

6. A network equipment element according to claim 5, characterized in that it is arranged in the form of an edge router.

12. A device according to claim 11, characterized in that the said graphical user interface (GUI) is coupled to a memory (MM) of the said network management system (NMS) storing the said edge equipment identifiers (RP) allowing access by the data flows to the said network (N).

7. A location management device (DG) for a network management system (NMS) of a communication network (N) which includes edge equipment elements (RP), equipped with ingress interfaces (IE) capable of receiving flows of data packets and associated respectively with interface identifiers, characterized in that it includes processing means (MT) arranged to generate configuration messages, for sending to least some of the said edge equipment (RP), where these messages include at least one configuration parameter and instructions requiring the transmission, in the event of detection, of the identifier of each ingress interface (IE) having received a data flow which includes a packet which includes, in a header, a parameter that is identical to the said configuration parameter.

8. A device according to claim 7, characterized in that it includes a graphical user interface (GUI) capable of allowing a user to communicate a configuration parameter to the said processing means (MT) with a view to the generation of a configuration message which includes the said configuration parameter.

9. A device according to claim 7, characterized in that it includes extraction means (ME) which are capable, in the event of receiving a request to obtain a configuration parameter representing a data flow received by an edge equipment element (RP) designated by an identifier, of accessing a management information base (MIB) of the said designated edge equipment element (RP), storing parameters contained in the packet headers of the data flows received, so as to extract at least one of the said parameters of the said received data flow and then transmitting it to the said processing means (MT) with a view to the generation of a configuration message which includes the said extracted parameter as a configuration parameter.

10. A device according to claim 7, characterized in that the said network management system (NMS) includes a memory (MM) which stores edge equipment identifiers (RP) allowing the data flows to enter the said network (N), where the said processing means (MT) are arranged, on receiving a configuration parameter representing a chosen data flow, to access the said memory (MM) so as to determine the identifiers of the edge equipment (RP) to which the configuration messages containing the said received configuration parameter must be transmitted, and then to transmit the said configuration message to each edge equipment element (RP) whose identifier has been determined.

11. A device according to claim 8, characterized in that the said graphical user interface (GUI) is capable of allowing a user to select, from a list of edge equipment (RP), each edge equipment element required to perform a detection process, and then to communicate each selected edge equipment element identifier to the said processing means (MT) with a view to the generation of a configuration message that includes the said configuration parameter.

13. A device according to claim 7, characterized in that it includes collection means (MC) which are capable, in the event of receiving an alarm message coming from an edge equipment element (RP) and which includes an ingress interface identifier (IE) and a configuration parameter identifier, of ordering the said processing means (MT) to generate a message, intended for the said edge equipment element (RP), requiring that detection of the data flows which includes the said received configuration parameter should be stopped.

14. A device according to claim 13, characterized in that it includes timing means (T) arranged, in the event of receipt by the said processing means (MT) of a request for the generation of a stop message, to start the countdown of a chosen time period, and then at the end of the timed period, to authorize the said processing means (MT) to transmit the said stop message intended for the said edge equipment element (RP) concerned.

15. A device according to claim 7, characterized in that the said configuration parameter is chosen from a group which includes at least source and destination addresses, a protocol identifier and a DSCP identifier.

16. A location management process for a communication network (N) which includes edge equipment (RP), equipped with ingress interfaces (IE) capable of receiving flows of data packets and associated respectively with interface identifiers, characterized in that it consists of:

determining at least one configuration parameter representing a data flow to be detected and associated with a parameter identifier,

configuring chosen edge equipment (RP) in the said network (N) so that they compare parameters, contained in the headers of data packets arriving at their ingress interfaces (IE), with the said configuration parameter, and so that, in the event of a header parameter of a data packet received at one of their ingress interfaces (IE) being identical to the said configuration parameter, they generate an alarm message, intended for a management system of the said network (NMS), where this message includes the identifier of the ingress interface (IE) having received the said data flow and the said parameter identifier, and

in the event of receiving an alarm message coming from an edge equipment element (RP) and which includes an ingress interface identifier (IE) and a configuration parameter identifier, of transmitting a message to the edge equipment (RP) concerned requiring that detection of the data flows which includes the said configuration parameter should be stopped.