System and method for event monitoring and error detection

• US 6,754,854 B2
• Filed: 06/04/2001
• Issued: 06/22/2004
• Est. Priority Date: 06/04/2001
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Kurrasch, Peter
• Primary Examiner(s): Beausoliel, Robert
• Assistant Examiner(s): PUENTE, EMERSON C
• Application Number:
  US09/873,489
• Publication Number:
  US 20020184568A1
• Time in Patent Office: 1,114 Days
• Field of Search: 714/4, 714/47, 709/224, 702/186
• US Class Current: 714/47.2
• CPC Class Codes: G06F 11/0748 in a remote unit communicating with a single-box computer node experiencing an error/fault remote testing G06F11/2294
• CPC Class Codes: G06F 11/076 by exceeding a count or rate limit, e.g. word- or bit count limit
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0847 Transmission error
• CPC Class Codes: H04L 43/16 Threshold monitoring

Abstract

An event monitor includes an event counter for counting one or more preselected events detected by an event counter. The events are counted for successive time periods and an indication of system stability is calculated to detect possible error conditions. The indication of system stability is calculated by taking a nonweighted or weighted sum of the total number of events counted in the current time period, the total number of events counted in all time periods monitored, and the difference between the total number of events counted in the current time period and the total number of events counted in the preceding time period. In this manner, the event monitor is able to identify possible error conditions more quickly than systems using rate thresholding so that remedial action may be initiated sooner. In a further aspect, system stability is further assessed by counting the number of time periods in which there is an indicium of stability, and is thus able to quickly identify a potential error condition that has stabilized and for which remedial action is not necessary. In further aspects, methods for event monitoring and error detection are provided.

Claims

1. An event monitor comprising:

an event counter for counting occurrences of one or more preselected types of events;

a timer coupled to the event counter for determining the beginning and ending a plurality of time periods to be monitored, each of the time periods having a preselected length of time; and

processing logic coupled to the timer and the event monitor for calculating;

a first value equal to or proportional to a total number of events counted in a current time period;

a second value equal to or proportional to a total number of events counted in all time periods monitored;

a third value equal to or proportional to the difference between a total number of events counted in a current time period and a total number of events counted in a previous time period; and

a numerical indicium of system stability, the indicium equal to a sum of said first, second, and third values.

2. The event monitor of claim 1, wherein the events are indicative of an error condition in a data communication system.

3. The event monitor of claim 1, further comprising a sensor generating an event stream coupled to the event counter.

4. The event monitor of claim 1, further including an error code generator for comparing the indicium of system stability with a preselected value and outputting a warning when the indicium of system stability exceeds said preselected value.

5. An event monitor of claim 1, further comprising a user interface for outputting the warning.

6. An event monitor of claim 5, wherein the user interface comprises a human-viewable display.

7. The event monitor of claim 5, wherein the warning includes a value of the indicium of system stability.

8. The event monitor of claim 7, further including an error code generator for comparing the rate of event occurrence with a preselected threshold value and outputting a warning when said rate of event occurrence exceeds the preselected value.

9. The event monitor of claim 1, said processing circuitry further calculating a rate of event occurrence for the current time period.

10. The event monitor of claim 1, wherein the one or more preselected events are selected from device errors, parity errors, network protocol violations, bus protocol violations, network arbitration errors, bus arbitration errors, data corruption, traffic overload, data routing errors, and network flow control errors.

11. The event monitor of claim 1, wherein the numerical indicium is an equally weighted sum of said first, second, and third values.

12. The event monitor of claim 1, wherein the numerical indicium is a weighted sum of said first, second, and third values.

13. The event monitor of claim 12, wherein the weighted sum is calculated using weighting factors input by a user.

14. The event monitor of claim 1, further comprising and error warning generator for outputting an error warning when said indicium of system stability exceeds a preselected value.

15. The event monitor of claim 14, wherein the error warning includes a numerical value of said indicium.

16. The event monitor of claim 1, the processing logic further:

calculating a rate of event occurrence for the current time period;

determining whether the rate exceeds a preselected rate threshold value; and

if the rate exceeds the preselected rate threshold value, outputting an error warning.

17. The event monitor of claim 16, the processing logic further:

for each time period, determining if the numerical indicium of system stability is the same as the numerical indicium of system stability calculated in an immediately preceding time period; and

counting a number of consecutive time periods in which the numerical indicium of system stability is the same as the numerical indicium of system stability calculated in an immediately preceding time period.

18. The event monitor of claim 17, the processing logic further:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

19. The event monitor of claim 18, wherein outputting an indication of system stability comprises withdrawing a previous error warning.

20. The event monitor of claim 16, the processing logic further:

for each time period, determining if a total number of events counted in a current time period is less than or equal to a total number of events counted in an immediately preceding time period; and

counting a number of consecutive time periods in which the total number of events counted in the current time period is less than or equal to the total number of events counted in the immediately preceding time period.

21. The event monitor of claim 20, the processing logic further:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

22. The event monitor of claim 21, wherein outputting an indication of system stability comprises withdrawing a previous error warning.

23. The event monitor of claim 1, the processing logic further:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

24. The event monitor of claim 23, the processing logic further:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

25. The event monitor of claim 24, wherein outputting an indication of system stability comprises withdrawing a previous error warning.

26. The event monitor of claim 1, the processing logic further:

for each time period, determining if a total number of events counted in a current time period is less than or equal to a total number of events counted in an immediately preceding time period; and

counting a number of consecutive time periods in which the total number of events counted in the current time period is less than or equal to the total number of events counted in the immediately preceding time period.

27. The event monitor of claim 26, the processing logic further:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

28. The event monitor of claim 27, wherein outputting an indication of system stability comprises withdrawing a previous error warning.

29. The event monitor of claim 1, further comprising one or more additional like event monitors cascaded such that an output of each monitor is coupled to the event counter of another.

30. A computer-implemented method for monitoring an event stream, comprising:

counting the occurrence of one or more preselected events for a plurality of successive time periods; and

calculating a numerical indicium of system stability, the indicium of system stability comprising a sum of;

a first value equal to or proportional to a total number of events counted in a current time period;

a second value equal to or proportional to a total number of events counted in all time periods monitored; and

a third value equal to or proportional to the difference between a total number of events counted in a current time period and a total number of events counted in a previous time period.

31. The method of claim 30, wherein said first, second, and third values are calculated at the end of each time period.

32. The method of claim 30, wherein said first, second, and third values are calculated each time an event is counted.

33. The method of claim 30, wherein at least one of said first, second, and third values are calculated each time an event is counted and wherein at least one of said first, second, and third values are calculated at the end of each time period.

34. The method of claim 30, wherein the event stream is generated by a sensor.

35. The method of claim 30, wherein the event stream is generated within a data communication system.

36. The method of claim 30, further comprising:

determining whether said indicium of system stability exceeds a preselected value; and

if said indicium of system stability exceeds the preselected value, outputting an error warning.

37. The method of claim 36, wherein the step of outputting an error warning includes outputting a numerical value of said indicium.

38. The method of claim 36, further comprising:

if said indicium of system stability exceeds the preselected value, initiating corrective action in response to an error warning.

39. The method of claim 38, wherein the corrective action includes shutting down one or more components of the data communication link.

40. The method of claim 30, further including

calculating a rate of event occurrence for the current time period;

determining whether the rate exceeds a preselected rate threshold value; and

if the rate exceeds the preselected rate threshold value, outputting an error warning.

41. The method of claim 40, further comprising:

for each time period, determining if the numerical indicium of system stability is the same as the numerical indicium of system stability calculated in an immediately preceding time period; and

counting a number of consecutive time periods in which the numerical indicium of system stability is the same as the numerical indicium of system stability calculated in an immediately preceding time period.

42. The method of claim 41, further comprising:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

43. The method of claim 30, further comprising:

for each time period, determining if the numerical indicium of system stability is the same as the numerical indicium of system stability calculated in an immediately preceding time period; and

counting a number of consecutive time periods in which the numerical indicium of system stability is the same as the numerical indicium of system stability calculated in an immediately preceding time period.

44. The method of claim 43, further comprising:

determining whether said number of consecutive time periods is greater than or equal to a preselected threshold value; and

if the number of consecutive time periods exceeds the preselected threshold value, outputting an indication of system stability.

45. The method of claim 44, wherein outputting an indication of system stability comprises withdrawing a previous error warning.

46. The method of claim 30, wherein the one or more preselected events are selected from device errors, parity errors, network protocol violations, bus protocol violations, network arbitration errors, bus arbitration errors, data corruption, traffic overload, data routing errors, and network flow control errors.

47. The method of claim 30, wherein the numerical indicium is an equally weighted sum of said first, second, and third values.

48. The method of claim 30, wherein the numerical indicium is a weighted sum of said first, second, and third values.

49. The method of claim 30, wherein the weighted sum is calculated using weighting factors input by a user.

50. An information handling system comprising:

a processor for executing a program of instructions on the information handling system;

a memory coupled to the processor for storing the program of instructions executable by the processor;

a data communication system coupled to the processor; and

an event monitor, wherein the program of instructions configures the information handling system to count the occurrence of one or more preselected events for a plurality of successive time periods and to calculate a numerical indicium of system stability, the indicium of system stability comprising a sum of;

a first value equal to or proportional to a total number of events counted in a current time period;

a second value equal to or proportional to a total number of events counted in all time periods monitored; and

a third value equal to or proportional to the difference between a total number of events counted in a current time period and a total number of events counted in a previous time period.

51. The information handling system of claim 50, comprising an embedded computer system containing said program of instructions.

52. A network management system for controlling communications over a network, the network management system comprising an event monitor an event monitor for detecting an error condition on the network, comprising:

a sensor coupled to a network component for detecting the occurrence of one or more preselected events;

an event counter coupled to the sensor for counting the number of events detected by the sensor;

a timer coupled to the event counter for determining the beginning and ending a plurality of time periods to be monitored, each of the time periods having a preselected length of time; and

processing logic coupled to the timer for calculating a numerical indicium of system stability, said indicium of system stability comprising a sum of;

a first value equal to or proportional to a total number of events counted in a current time period;

a second value equal to or proportional to a total number of events counted in all time periods monitored; and

a third value equal to or proportional to the difference between a total number of events counted in a current time period and a total number of events counted in a previous time period.

53. The network management system of claim 52, which is compatible with a promulgated network management protocol.

54. The network management system of claim 52, which is compatible with a Simple Network Management Protocol (SNMP) network management protocol.

55. The network management system of claim 52, wherein the network is a cellular communication system.

56. A computer readable medium having contents for causing a computer-based information handling system to perform steps for detecting an error condition in a data communication system, the steps comprising:

counting the occurrence of one or more preselected events for a plurality of successive time periods; and

calculating a numerical indicium of system stability, the indicium of system stability comprising a sum of;

a first value equal to or proportional to a total number of events counted in a current time period;

a second value equal to or proportional to a total number of events counted in all time periods monitored; and

a third value equal to or proportional to the difference between a total number of events counted in a current time period and a total number of events counted in a previous time period.