Network management system using model-based intelligence

• US 5,504,921 A
• Filed: 05/16/1994
• Issued: 04/02/1996
• Est. Priority Date: 09/17/1990
• Status: Expired due to Term

• Current Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Original Assignee: Cabletron Systems Incorporated (Extreme Networks, Inc.)
• Inventors: Gray, Eric W., Dev, Roger H., Brown, Howard M., Scott, Walter P., Emery, Dale H., Rustici, Eric S., Wiggin, Dwayne S.
• Primary Examiner(s): Bowler, Alyssa H.
• Assistant Examiner(s): Nguyen, Dzung C.
• Application Number:
  US08/243,642
• Time in Patent Office: 687 Days
• Field of Search: 395/800, 395/200, 395/161, 395/155, 395/140, 395/200.1, 395/200.11, 395/200.2, 395/600, 364/DIG. 1
• US Class Current: 709/223
• CPC Class Codes: B63B 5/06 Decks; Shells
• CPC Class Codes: G06F 11/2257 using expert systems
• CPC Class Codes: G06F 11/3006 where the computing system is distributed, e.g. networked systems, clusters, multiprocessor systems multiprogramming arrangements G06F9/46; allocation of resources G06F9/50
• CPC Class Codes: G06F 11/3041 where the computing system component is an input/output interface interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units G06F13/00
• CPC Class Codes: G06F 11/3048 where the topology of the computing system or computing system component explicitly influences the monitoring activity, e.g. serial, hierarchical systems
• CPC Class Codes: G06F 11/3055 Monitoring arrangements for monitoring the status of the computing system or of the computing system component, e.g. monitoring if the computing system is on, off, available, not available error or fault processing without redundancy G06F11/0703; error detection or correction by redundancy in data representation G06F11/08; error detection or correction by redundancy in operation G06F11/14; error detection or correction by redundancy in hardware G06F11/16
• CPC Class Codes: G06F 11/3096 wherein the means or processing minimize the use of computing system or of computing system component resources, e.g. non-intrusive monitoring which minimizes the probe effect: sniffing, intercepting, indirectly deriving the monitored data from other directly available data
• CPC Class Codes: G06F 11/32 with visual or acoustical indication of the functioning of the machine
• CPC Class Codes: G06F 11/3447 Performance evaluation by modeling
• CPC Class Codes: G06F 2201/865 Monitoring of software
• CPC Class Codes: G06F 2201/88 Monitoring involving counting
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time
• CPC Class Codes: H04L 41/0609 based on severity or priority
• CPC Class Codes: H04L 41/0659 by isolating or reconfiguring faulty entities
• CPC Class Codes: H04L 41/0677 Localisation of faults
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data
• CPC Class Codes: H04L 41/069 using logs of notifications; Post-processing of notifications
• CPC Class Codes: H04L 41/0695 the faulty arrangement being the maintenance, administration or management system
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/40 : using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/00 : Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/065 : related to network devices
• CPC Class Codes: H04L 43/0811 : by checking connectivity
• CPC Class Codes: H04L 43/0817 : by checking functioning
• CPC Class Codes: H04L 43/0829 : Packet loss
• CPC Class Codes: H04L 43/10 : Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/103 : with adaptive polling, i.e. dynamically adapting the polling rate
• CPC Class Codes: H04L 43/16 : Threshold monitoring
• CPC Class Codes: Y10S 706/916 : Electronic or computer, internal or network, circuit

Abstract

A network management system includes a user interface, a virtual network and a device communication manager. The virtual network includes models which represent network entities and model relations which represent relations between network entities. Each model includes network data relating to a corresponding network entity and one or more inference handlers for processing the network data to provide user information. The system performs a fault isolation technique wherein the fault status of a network device is suppressed when it is determined that the device is not defective. User displays include hierarchical location views and topological views of the network configuration. Network devices are represented on the displays by multifunction icons which permit the user to select additional displays showing detailed information regarding different aspects of the corresponding network device.

Claims

1. A system for maintaining and processing information pertaining to a condition of a computer network and providing the information to a user, the computer network including a plurality of network entities such as computer devices and software applications being executed on such devices, the system comprising:

a virtual network machine comprising interrelated, intelligent models of network entities and relations between network entities, the virtual network machine including;

means for acquiring network information pertaining to the condition of a network entity from the corresponding network entity;

means for maintaining objects repesenting network entities and relations between network entities, each of the objects including;

one or more attributes comprising network data relating to a corresponding network entity and derived from the acquired network information, and

one or more inference handlers for processing the network data, the inference handlers being responsive to changes occurring in one or more objects and including means for watching an attribute, means for generating a trigger in response to a change in the watched attribute, and means responsive to the trigger for producing a response in an object, wherein a first object has a first inference handler with a first means for watching an attribute in a second object and a first responsive means responsive to a change in the watched attribute of the second object; and

means for transferring the network data to a user interface; and

a user interface coupled to the virtual network machine for supplying the network data to a user.

2. The system of claim 1, wherein the first object has a second inference handler and a second responsive means, the second means being responsive to changes in an attribute of the first object.

3. The system of claim 1 wherein the network data in one object is inferred from the network data in another object.

4. The system of claim 1, wherein the network data includes hierarchial relations between network entities.

5. The system of claim 1, wherein the network data includes geographical locations of network entities.

6. The system of claim 1, wherein the network data includes topological groupings of network entities.

7. The system of claim 1, wherein the virtual network machine comprises a programmed digital computer.

8. The system of claim 1, wherein the virtual network machine is implemented using an object-oriented programming language selected from the group consisting of C++, Eiffel, Smalltalk, and ADA.

9. The system of claim 1, wherein the virtual network machine comprises part of a network management system.

10. The system of claim 1, wherein the acquiring means includes means for polling the network entities.

11. The system of claim 1, wherein the acquiring means automatically receives network information from network entities.

12. The system of claim 1, wherein the network data includes at least one of configuration data, an event log, statistics, history and current state information.

13. The system of claim 1, wherein the network data includes at least one of:

a model name, a model type name, a model type handle, a polling interval, a next-time-to-poll, a retry count, a contact status, an activation status, a time of last poll, and statistics pertaining to the network entity being modeled.

14. The system of claim 1, wherein the inference handler is responsive to changes including at least one of:

a creation or destruction of an object, activation or initialization of an object, change of network data in the same object, change of network data in another object, addition or removal of a relation, occurrence of a specified event, and a user specified action.

15. The system of claim 1, wherein the inference handler generates an alarm when the network data satisfies a predetermined criteria.

16. The system of claim 1, wherein the inference handler generates an output which includes at least one of a change in network data, the creation or destruction of an object, and an alarm.

17. The system of claim 1, wherein the watching means in a first object watches an attribute in a second object and the responsive means produces a change in an attribute of the first object.

18. The system of claim 1, wherein the inference handler includes means for isolating network faults.

19. The system of claim 1, wherein the user interface includes a display screen for displaying the network data.

20. The system of claim 1, wherein the user interface includes a view manager allowing the user to select different views.

21. The system of claim 1, wherein the network data provided to the user includes at least one of events, alarms, and statistical information.

22. The system of claim 1, wherein the user interface includes a display and an icon manager for controlling at least some part of the display, and wherein the icon manager receives network data from the virtual network machine for display on the user interface.

23. The system of claim 1, wherein the network data includes a model handle for an icon manager, and the user interface includes an icon manager having the associated model handle.

24. The system of claim 1, including a memory for storing network data, and wherein the objects include a memory flag indicating that network data is stored in the memory.

25. The system of claim 1, including a database for storing network data, and wherein the object include a database flag indicating that the network data is stored in the database.

26. The system of claim 1, wherein the network data is stored in the network entity being modeled, and the objects include an external flag indicating that the network data is maintained in the network entity.

27. The system of claim 1, including a device communication manager connected to the network and to the virtual network machine for handling the transfer of network information between the network entities and the virtual network machine.

28. The system of claim 27, wherein the acquiring means generates requests for network information and the device communication manager converts the request to a network management protocol for communicating with the corresponding network device.

29. The system of claim 27, including a protocol module connected to the device communication manager containing a collection of modules which permit network entities to communicate using a network management protocol.

30. The system of claim 1, including a view module connected to the user interface containing a collection of data modules which permit the user interface to provide different views of the network.

31. The system of claim 1, including a device module connected to the virtual network machine containing a collection of modules which permit network entities to be configured and managed by a network management system.

32. The system of any one of claims 30 to 31, wherein the modules can be modified to permit reconfiguration of the network without changing the virtual network machine.

33. A method for maintaining and processing information pertaining to the condition of a computer network and providing the same to a user, the network including a plurality of network entities such as computer devices and software applications being executed on such devices, the method comprising the steps of:

acquiring network information pertaining to the condition of a network entity from the corresponding network entity;

maintaining a virtual network of interrelated intelligent models comprising objects representing network entities and relations between network entities, each of the objects including;

one or more attributes comprising network data relating to a corresponding network entity and derived from the acquired network information, and

one or more inference handlers for processing the network data, the inference handlers being responsive to changes occurring in one or more objects by watching an attribute, generating a trigger in response to a change in the watched attribute, and responsive to the trigger, producing a response in an object, wherein a first object watches an attribute in a second object and a change in the attribute of the second object triggers the response;

transferring the network data to a user interface; and

displaying the network data on a user interface.

34. The method of claim 33, wherein a change in an attribute of the first object triggers a change in the first object.

35. The method of claim 33, including providing a protocol module connected to the virtual network machine and containing a collection of modules which permit network entities to communicate using a network management protocol.

36. The method of claim 33, wherein the first object and the second object have a connection relation and a change in an attribute in the first object triggers an inference handler in the second object.

37. The method of claim 33, wherein the first object and the second object have a contains relation and a change in an attribute in the first object triggers an inference handler in the second object.

38. The method of claim 33, wherein the first object and the second object have an executes relation and a change in an attribute in the first object triggers an inference handler in the second object.

39. The method of claim 33, wherein the first object and the second object have an "is part of" relation and a change in an attribute in the first object triggers an inference handler in the second object.

40. The method of claim 33, wherein the responsive means modifies an existing object.

41. The method of claim 33, wherein the responsive means creates a new object.

42. The method of claim 33, wherein the responsive means initiates a fault isolation process.

43. The method of claim 33, wherein the responsive means initiates an alarm notification process.

44. The method of claim 33, wherein the responsive means initiates a transfer of network data to the user interface.

45. The method of claim 33, wherein the responsive means controls an icon manager object for controlling an icon on the user interface.

46. The method of claim 33, wherein the responsive means control a view manager object for controlling a view on the user interface.

47. The method of claim 33, wherein the watched attribute is a condition attribute representative of the status of the corresponding network entity.

48. The method of claim 33, wherein the network information is automatically acquired from the network entities.

49. The method of claim 33, including providing a view module connected to the user interface and containing a collection of data modules which permit the user interface to provide different views of the network.

50. The method of claim 33, including providing a device module connected to the virtual network machine and containing a collection of modules which permit network entities to be configured and managed by a network management system.

51. The method of any one of claim 48 to 50, wherein the modules allow reconfiguration of the network without changing the virtual network machine.

52. The method of claim 33, wherein the network data in one object is inferred from the network data in another object.

53. The method of claim 52, wherein the objects include objects representing a location or topology and the network data in a location or topology object is inferred from the network data in objects which acquire network information from the corresponding network entities.