NETWORK MONITORING SYSTEM

• US 20140247735A1
• Filed: 02/03/2014
• Published: 09/04/2014
• Est. Priority Date: 03/04/2013
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Tanaka, Akira, Kohmura, Naoya, Mizuta, Kazuo
• Granted Patent: US 9,591,504 B2
• Time in Patent Office: Days
• US Class Current: 370/252
• CPC Class Codes: H04W 24/04 Arrangements for maintaining operational condition
• CPC Class Codes: H04W 24/10 Scheduling measurement reports ; Arrangements for measurement reports

Abstract

A monitoring apparatus includes a processor configured to capture a network transmission signal from a monitoring location in a monitoring target network; specify each of a plurality of sessions based on session specifying information contained in the captured network transmission signal; analyze, for specified each of the sessions, the network transmission signal and measure a quality index; transfer the quality index of each of the sessions, which is measured every predetermined period of time, as a quality measurement result to an aggregation apparatus until a predetermined threshold value of a processing capability is reached; and stop, when the predetermined threshold value of the processing capability is exceeded, measuring the quality index of one of the sessions in a high-load state, and in a next cycle, perform the measurement on one of the sessions in the high-load state.

Claims

1. A monitoring apparatus, comprising a processor configured to:

capture a network transmission signal from a monitoring location in a monitoring target network;

specify each of a plurality of sessions based on session specifying information contained in the captured network transmission signal;

analyze, for specified each of the sessions, the network transmission signal and measure a quality index;

transfer the quality index of each of the sessions, which is measured every predetermined period of time, as a quality measurement result to an aggregation apparatus until a predetermined threshold value of a processing capability is reached; and

stop, when the predetermined threshold value of the processing capability is exceeded, measuring the quality index of one of the sessions in a high-load state, and in a next cycle, perform the measurement on one of the sessions in the high-load state.

2. The monitoring apparatus according to claim 1, wherein:

the processor includes a session management table for storing, for each of captured network transmission signals, a transmission source address, a destination address, a throughput, and a measurement state in association with one another with use of session identification information as key information; and

the measurement state includes a not-measured state, a measurement-in-progress state, and a measurement-finished state.

3. The monitoring apparatus according to claim 2, wherein:

the processor learns the sessions existing in the monitoring target network, acquires transmission source addresses and destination addresses as the session specifying information contained in the captured network transmission signals, and stores the acquired transmission source addresses and the acquired destination addresses in advance in the session management table along with the session identification information; and

the throughput is set to an initial value and the measurement state is set to the not-measured state.

4. The monitoring apparatus according to claim 2, wherein the processor sequentially sets one of the plurality of sessions having the not-measured state as the measurement state in the session management table as a measurement target session for the quality index, and repeats the measurement of the quality index until measurement states of all measurement target sessions make a transition from the measurement-in-progress state to the measurement-finished state.

5. The monitoring apparatus according to claim 1, wherein the network transmission signal is a packet for operation extracted by a tap, which is inserted and connected between network apparatuses corresponding to a monitoring location in the monitoring target network and branches and extracts the network transmission signal in a replicated state.

6. The monitoring apparatus according to claim 1, wherein:

the quality index includes a throughput of the network transmission signal; and

when the network transmission signal is a packet, the throughput is defined by a packet transfer amount.

7. The monitoring apparatus according to claim 1, wherein:

the predetermined threshold value of the processing capability is a threshold value corresponding to an analyzable throughput of the network transmission signal; and

when the network transmission signal is a packet, the throughput is defined by a packet transfer amount.

8. A monitoring method by which a processor in a monitoring apparatus executes processing comprising:

capturing a network transmission signal from a monitoring location in a monitoring target network;

specifying each of a plurality of sessions based on session specifying information contained in the captured network transmission signal;

analyzing, for specified each of the sessions, the network transmission signal and measure a quality index;

transferring the quality index of each of the sessions, which is measured every predetermined period of time, as a quality measurement result to an aggregation apparatus until a predetermined threshold value of a processing capability is reached; and

stopping, when the predetermined threshold value of the processing capability is exceeded, measuring the quality index of one of the sessions in a high-load state, and in a next cycle, perform the measurement on one of the sessions in the high-load state.

9. A non-transitory readable medium, which is recorded with a program that causes a processor in a monitoring apparatus to execute processing comprising:

capturing a network transmission signal from a monitoring location in a monitoring target network;

specifying each of a plurality of sessions based on session specifying information contained in the captured network transmission signal;

analyzing, for specified each of the sessions, the network transmission signal and measure a quality index;

transferring the quality index of each of the sessions, which is measured every predetermined period of time, as a quality measurement result to an aggregation apparatus until a predetermined threshold value of a processing capability is reached; and

stopping, when the predetermined threshold value of the processing capability is exceeded, measuring the quality index of one of the sessions in a high-load state, and in a next cycle, perform the measurement on one of the sessions in the high-load state.