Methods, Devices and Computer Program Products For Capturing Events Associated Network Anomalies

• US 20090274053A1
• Filed: 05/05/2008
• Published: 11/05/2009
• Est. Priority Date: 05/05/2008
• Status: Active Grant

• Current Assignee: Eaton Intelligent Power Limited (Eaton Corporation PLC.)
• Original Assignee: Eaton Corp. (Wisconsin) (Eaton Corporation PLC.)
• Inventors: Thompson, James Gordon
• Granted Patent: US 8,279,768 B2
• Time in Patent Office: Days
• US Class Current: 370/242
• CPC Class Codes: G06F 11/3419 by assessing time
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/86 Event-based monitoring
• CPC Class Codes: H04L 41/064 involving time analysis
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps

Abstract

Methods, devices and computer program products are provided for capturing information associated with a triggering event at a network-enabled device. A triggering event is detected at a first network-enabled device. A message is transmitted to at least one other network-enabled device responsive to the detected triggering event. The message includes an indication of a time period associated with the triggering event and a request that the at least one other network-enabled device mark information associated with the at least one other network-enabled device during the associated time period as having significance, such that this information is retained rather than discarded.

Claims

1. A method for capturing information associated with a triggering event at a network-enabled device, the method comprising:

detecting a triggering event at a first network-enabled device; and

transmitting a message to at least one other network-enabled device responsive to the detected triggering event, the message including an indication of a time period associated with the triggering event and a request that the at least one other network-enabled device mark information associated with the at least one other network-enabled device during the associated time period as having significance.

2. The method of claim 1, wherein the indication of a time period comprises a timing signal indicating the time period associated with the triggering event.

3. The method of claim 2, wherein the timing signal comprises a nearest second at which the triggering event occurred at the first network-enabled device and a number of microseconds from the nearest second at which the triggering event occurred.

4. The method of claim 2, further comprising:

determining at the at least one other network-enabled device if the at least one other network-enabled device has information that pertains to the time period; and

marking the information pertaining to the time period at the at least one other network-enabled device as having significance if determined to be present such that the information will not be discarded at the at least one other network enabled device.

5. The method of claim 4, further comprising marking the information with a tag indicating an identity of the first network-enabled device.

6. The method of claim 1, wherein transmitting comprises broadcasting the message to all other network-enabled devices or transmitting the message to a select group of network-enabled devices.

7. The method of claim 1, wherein the information marked at the at least one other network-enabled device comprises monitoring parameters and/or telemetry data associated with the at least one other network-enabled device during the time period in the message.

8. The method of claim 1, wherein the triggering event comprises a detected deviation from normal functionality.

9. A method for capturing information associated with a triggering event at a network-enabled device, the method comprising:

receiving a message at least one network-enabled device from a requesting device, the message including an indication of a time period associated with a triggering event and a request that the at least one network enabled device mark information associated with the at least one network-enabled device during the associated time period as having significance;

determining at the at least one network-enabled device if the at least one network-enabled device has information that pertains to the time period; and

marking the information pertaining to the time period at the at least one network-enabled device as having a significance if determined to be present such that the information will not be discarded at the at least one network enabled device.

10. The method of claim 9, wherein the indication of a time period comprises a timing signal indicating the time period associated with the triggering event.

11. The method of claim 10, wherein the timing signal comprises a nearest second at which the triggering event occurred at the first network-enabled device and a number of microseconds from the nearest second at which the triggering event occurred.

12. The method of claim 10, further comprising marking the information with an associated tag indicating an identity of the requesting network-enabled device.

13. The method of claim 10, wherein the marked information at the at least one network-enabled device comprises monitoring parameters and/or telemetry data associated with the at least one network-enabled device during the time period in the message.

14. A network-enabled device configured to capture information associated with a triggering event, the device comprising:

a detection module configured to detect a triggering event; and

a requesting module configured to transmit a message to at least one other network-enabled device responsive to the detected triggering event, the message including an indication of a time period associated with the triggering event and a request that the at least one other network-enabled device mark information associated with the at least one other network-enabled device during the associated time period as having significance.

15. The device of claim 14, wherein the indication of a time period comprises a timing signal indicating the time period associated with the triggering event.

16. The device of claim 15, wherein the timing signal comprises a nearest second at which the triggering event occurred at the first network-enabled device and a number of microseconds from the nearest second at which the triggering event occurred.

17. The device of claim 15, further comprising:

a determination module configured to receive the message and determine if the network-enabled device has information that pertains to the time period; and

a marking module configured to mark the information pertaining to the time period at the network-enabled device if determined to be present such that the marked information is not discarded at the network enabled device.

18. The device of claim 17, wherein the marking module is further configured to store an associated tag indicating an identity of the network-enabled device.

19. The device of claim 14, wherein the device comprises an uninterruptible power supply (UPS), electricity meter, feeder protector, software program, network attached storage or any network-enabled device.

20. A computer program product for capturing information associated with a triggering event at a network-enabled device, the computer program product comprising:

computer readable storage medium having computer readable program code embodied in said medium, the computer readable program code comprising;

computer readable program code configured to detect a triggering event at a first network-enabled device; and

computer readable program code configured to transmit a message to at least one other network-enabled device responsive to the detected triggering event, the message including an indication of a time period associated with the triggering event and a request that the at least one other network-enabled device mark information associated with the at least one other network-enabled device during the associated time period as having significance.

21. The computer program product of claim 20, wherein the indication of a time period comprises a timing signal indicating the time period associated with the triggering event.

22. The computer program product of claim 21, wherein the timing signal comprises a nearest second at which the triggering event occurred at the first network-enabled device and a number of microseconds from the nearest second at which the triggering event occurred.

23. The computer program product of claim 21, further comprising:

computer readable program code configured to determine at the at least one other network-enabled device if the at least one other network-enabled device has information that pertains to the time period; and

computer readable program code configures to mark the information pertaining to the time period at the at least one other network-enabled device as having significance if determined to be present such that the marked information is not discarded.

24. The computer program product of claim 23, further comprising computer readable program code configured to mark the information with an associated tag indicating an identity of the first network-enabled device.

25. A computer program product for capturing information associated with a triggering event at a network-enabled device, the computer program product comprising:

computer readable storage medium having computer readable program code embodied in said medium, the computer readable program code comprising

computer readable program code configured to receive a message at least one network-enabled device from a requesting device, the message including an indication of a time period associated with a triggering event and a request that the at least one network-enabled device mark information associated with the at least one network-enabled device during the associated time period;

computer readable program code configured to determine at the at least one network-enabled device if the at least one network-enabled device has information that pertains to the time period; and

computer readable program code configured to mark the information pertaining to the time period at the at least one network-enabled device if determined to be present.