Measure and recording of traffic parameters in data transmission networks
First Claim
1. A sampling circuit for the measurement and recording of traffic parameters as system activity counts at a node in a data transmission network comprising:
- a plurality of addressable registers forming a time counter and at least one system counter;
a multiplexor connected to each counter;
a global multiplexor connected to each per-counter multiplexor;
a control register connected to each multiplexor the control register being programmed to configure each node multiplexor to handle the bits at each counter in accordance with a pre-set count condition and to assert an inhibit and reset-signal for transmission to each counter on sensing the pre-set count condition;
the control register being programmed to configure the global multiplexor to combine the outputs of node multiplexors to assert the inhibit and re-set signal;
circuit counting means for the individual system activity counts in circuit counting means for the individual system activity counts in real time; and
a buffer having a plurality of addressable data fields, each of the data fields configured to be populated from at least one counter, sequential data fields of the buffer storing data representative of the individual system activity at sequential periods of time, such that analysis of the plurality of data fields of the buffer provides an historical analysis of the system activity.
1 Assignment
0 Petitions
Accused Products
Abstract
A method and apparatus for measuring and recording traffic at nodes in a data transmission network is described. In particular, a method of accurately counting individual activities of traffic at individual nodes. The invention uses a counter or number of counters which count individual activities of traffic on a preset activity condition being sensed at a node. The data output from the counter is then fed to a buffer so as to provide an historical overview of the traffic may be provided. The invention has the advantage that accurate measurement of traffic at a node is achieved.
21 Citations
20 Claims
-
1. A sampling circuit for the measurement and recording of traffic parameters as system activity counts at a node in a data transmission network comprising:
-
a plurality of addressable registers forming a time counter and at least one system counter;
a multiplexor connected to each counter;
a global multiplexor connected to each per-counter multiplexor;
a control register connected to each multiplexor the control register being programmed to configure each node multiplexor to handle the bits at each counter in accordance with a pre-set count condition and to assert an inhibit and reset-signal for transmission to each counter on sensing the pre-set count condition;
the control register being programmed to configure the global multiplexor to combine the outputs of node multiplexors to assert the inhibit and re-set signal;
circuit counting means for the individual system activity counts in circuit counting means for the individual system activity counts in real time; and
a buffer having a plurality of addressable data fields, each of the data fields configured to be populated from at least one counter, sequential data fields of the buffer storing data representative of the individual system activity at sequential periods of time, such that analysis of the plurality of data fields of the buffer provides an historical analysis of the system activity. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A sampling circuit for the measurement and recording of traffic parameters as system activity counts at a node in a data transmission network comprising
a plurality of addressable registers forming a time counter and at least one system counter; -
a multiplexor coupled to each counter;
a global multiplexor coupled to each per-counter multiplexor;
a control register coupled to each multiplexor the control register being programmed to configure each node multiplexor to handle the bits at each counter in accordance with a pre-set count condition and to assert an inhibit and reset-signal for transmission to each counter on sensing the pre-set count condition, the control register being programmed to configure the global multiplexor to combine the outputs of node multiplexors to assert the inhibit and re-set signal;
a circuit counter for maintaining the individual system activity counts in real time; and
a buffer having a plurality of addressable data fields, each of the data fields being configured to populate from at least one counter, sequential data fields of the buffer storing data representative of the individual system activity at sequential periods of time, such that analysis of the plurality of data fields of the buffer provides an historical analysis of the system activity. - View Dependent Claims (10, 11)
-
-
12. A sampling circuit for the measurement and recording of traffic parameters as system activity counts at a node in a data transmission network comprising:
-
a plurality of addressable registers forming a time counter and at least one system counter;
a plurality of node multiplexors, each node multiplexor coupled to one of the at least one system counter and/or the time counter;
a global multiplexor coupled to the plurality of node multiplexors;
a control register coupled to the global multiplexor and to each of the plurality of node multiplexors, the control register being programmed to configure each node multiplexor to handle the bits at each counter in accordance with a count condition, and configure the global multiplexor to combine the outputs of node multiplexors to assert an inhibit and reset-signal for transmission to each counter upon sensing the count condition;
a circuit counter for counting the individual system activity counts in real time; and
a buffer having a plurality of addressable data fields, each of the data fields being populated from at least one counter, sequential data fields of the buffer storing data representative of the individual system activity at sequential periods of time, such that analysis of the plurality of data fields of the first buffer provides an historical analysis of the system activity. - View Dependent Claims (13, 14)
-
-
15. A network security tool configured to identify anomalies in traffic within a network, the tool including:
-
a sampling circuit for the measurement and recording of traffic parameters as system activity counts at a node in a data transmission network comprising a plurality of addressable registers forming a time counter and at least one system counter;
a multiplexor coupled to each counter;
a global multiplexor coupled to each per-counter multiplexor;
a control register coupled to each multiplexor the control register being programmed to configure each node multiplexor to handle the bits at each counter in accordance with a pre-set count condition and to assert an inhibit and reset-signal for transmission to each counter on sensing the pre-set count condition, the control register being programmed to configure the global multiplexor to combine the outputs of node multiplexors to assert the inhibit and re-set signal;
a circuit counter for maintaining the individual system activity counts in real time;
a buffer having a plurality of addressable data fields, each of the data fields being configured to be populated from at least one counter, sequential data fields of the buffer storing data representative of the individual system activity at sequential periods of time, such that analysis of the plurality of data fields of the buffer provides an historical trend of the system activity;
an accumulator coupled to the sampling circuit, the accumulator having a second plurality of second addressable data fields, the second fields being configured to be populated upon addition of new data to the buffer, each of the addressable data fields in the accumulator providing a data value indicative of system activity over a predefined sample window; and
interrogatory means coupled to the accumulator, the interrogatory means being configured to identify within the sample windows provided by the accumulator, trends of the system activity and to use these trends to identify anomalous activity within the network, the anomalous activity being defined by system activity which deviates from the historical trend by a predetermined factor. - View Dependent Claims (16)
-
-
17. A network management tool to manage the traffic within a network, the traffic being processed within the network in accordance with defined network control parameters, the tool comprising:
-
a sampling circuit for the measurement and recording of traffic parameters as system activity counts at a node in a data transmission network, the sampling circuit having;
a plurality of addressable registers forming a time counter and at least one system counter, a multiplexor coupled to each counter, a global multiplexor coupled to each per-counter multiplexor, a control register coupled to each multiplexor the control register being programmed to configure each node multiplexor to handle the bits at each counter in accordance with a pre-set count condition and to assert an inhibit and reset-signal for transmission to each counter on sensing the pre-set count condition, the control register being programmed to configure the global multiplexor to combine the outputs of node multiplexors to assert the inhibit and re-set signal;
a circuit counter for maintaining the individual system activity counts in real time, a buffer having a plurality of addressable data fields, each of the data fields being populated from at least one counter, sequential data fields of the buffer storing data representative of the individual system activity at sequential periods of time, such that analysis of the plurality of data fields of the buffer provides an historical trend of the system activity; and
an accumulator coupled to the buffer, the accumulator including a second plurality of second addressable data fields, the second fields being populated on addition of new data to the buffer, each of the second addressable data fields in the accumulator providing a data value indicative of system activity over a predefined sample window, and interrogatory means coupled to the accumulator and being configured to identify within the sample windows provided by the accumulator trends whether the system activity meets predefined target values and to redefine the network control parameters when the system activity does not meet the predefined target values. - View Dependent Claims (18, 19, 20)
-
Specification