System and method for analyzing message information from diverse network devices

• US 20060087408A1
• Filed: 10/25/2004
• Published: 04/27/2006
• Est. Priority Date: 10/25/2004
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Electronic Data Systems, LLC
• Inventors: Korzeniowski, Richard W.
• Granted Patent: US 7,408,440 B2
• Time in Patent Office: Days
• US Class Current: 340/286.20
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 69/28 Timers or timing mechanisms used in protocols

Abstract

A system for analyzing information relating to network devices comprises a computer readable storage medium and computer software stored on the computer readable storage medium. The computer software reviews message information generated by a plurality of network devices, stores event records associating events from the message information with the plurality of network devices, determines whether two or more duplicate events are within a time window, assigns a weighting value to at least some of the events, excluding at least some of the duplicate events in response to determining that the duplicate events are within the time window, calculates a total value for one of the plurality of network devices using the weighting values, and generates a report according to the total values calculated for the network devices

Claims

1. A system for analyzing information relating to network devices, comprising

a computer readable storage medium;

computer software stored on the computer readable storage medium and operable to;

review message information generated by a plurality of network devices

store event records associating events from the message information with the plurality of network devices;

determine whether two or more duplicate events are within a time window;

assign a weighting value to at least some of the events, excluding at least some of the duplicate events in response to determining that the duplicate events are within the time window;

calculate a total value for one of the plurality of network devices using the weighting values; and

generate a report according to the total values calculated for the network devices.

2. The system of claim 1, wherein the software is further operable to:

store time window information associating each of a plurality of event types with one of a plurality of time windows; and

use the time window information to identify the time window to apply to the duplicate events according to an event type of the duplicate events.

3. The system of claim 1, wherein the software is further operable to:

to store time window information associating each of a plurality of network devices with one of a plurality of time windows; and

use the time window information to identify the time window to apply to the duplicate events according to a network device associated with the duplicate events.

4. The system of claim 1, wherein the timing window has a beginning and an end defined relative to a time of at least one of the duplicate events.

5. The system of claim 1, wherein the timing window has a beginning and an end defined independent of the duplicate events.

6. The system of claim 1, wherein the software is further operable to delete one or more of the duplicate events from the event records in response to determining that the duplicate events are within the time window.

7. The system of claim 1, wherein the software is further operable to select a subset of the duplicate events to be assigned a weighting value in response to determining that the duplicate events are within the time window.

8. The system of claim 1, wherein the software is further operable to exclude at least some of duplicate events that are later in time from being assigned a weighting value in response to determining that the duplicate events are within the time window.

9. The system of claim 1, wherein the software is further operable to calculate a total value for a location using the weighted values assigned to events associated with the location.

10. The system of claim 1, the software is further operable to receive user-reported information, correlate the user-reported information with a network device, and use the user-reported information in calculating the total values.

11. A method for analyzing information relating to network devices, comprising

reviewing message information generated by a plurality of network devices

storing event records associating events from the message information with the plurality of network devices;

determining whether two or more duplicate events are within a time window;

assigning a weighting value to at least some of the events, excluding at least some of the duplicate events in response to determining that the duplicate events are within the time window;

calculating a total value for one of the plurality of network devices using the weighting values; and

generating a report according to the total values calculated for the network devices.

12. The method of claim 11, further comprising:

storing time window information associating each of a plurality of event types with one of a plurality of time windows; and

using the time window information to identify the time window to apply to the duplicate events according to an event type of the duplicate events.

13. The method of claim 11, further comprising:

storing time window information associating each of a plurality of network devices with one of a plurality of time windows; and

using the time window information to identify the time window to apply to the duplicate events according to a network device associated with the duplicate events.

14. The method of claim 11, wherein the timing window has a beginning and an end defined relative to a time of at least one of the duplicate events.

15. The method of claim 11, wherein the timing window has a beginning and an end defined independent of the duplicate events.

16. The method of claim 11, further comprising deleting one or more of the duplicate events from the event records in response to determining that the duplicate events are within the time window.

17. The method of claim 11, further comprising selecting a subset of the duplicate events to be assigned a weighting value in response to determining that the duplicate events are within the time window.

18. The method of claim 11, further comprising excluding at least some of duplicate events that are later in time from being assigned a weighting value in response to determining that the duplicate events are within the time window.

19. The method of claim 11, further comprising calculating a total value for a location using the weighted values assigned to events associated with the location.

20. The method of claim 11, further comprising:

receiving user-reported information;

correlating the user-reported information with a network device; and

using the user-reported information in calculating the total values.