Method and system for passive quality of service monitoring of a network

• US 6,785,237 B1
• Filed: 03/31/2000
• Issued: 08/31/2004
• Est. Priority Date: 03/31/2000
• Status: Expired due to Term

• Current Assignee: Network General Technology
• Original Assignee: Networks Associates Technology, Inc. (McAfee, LLC)
• Inventors: Sufleta, Zbigniew
• Primary Examiner(s): HSU, ALPUS
• Application Number:
  US09/539,838
• Time in Patent Office: 1,614 Days
• Field of Search: 370/230, 370/231, 370/235, 370/236, 370/241, 370/252, 370/253, 370/254, 370/389, 370/395.1, 370/395.2, 370/395.21, 709/220, 709/224, 709/228
• US Class Current: 370/236
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0858 One way delays
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps
• CPC Class Codes: H04L 43/12 Network monitoring probes

Abstract

A method and system for passive quality of service monitoring of a network are described. In one embodiment, a number of signatures are extracted from a number of network packets at a number of monitoring points. In addition, at least one quality of service parameter is generated based upon the signatures.

Claims

1. A method for passive quality of service monitoring of a network, the method comprising:

creating a plurality of signatures from a plurality of network packets transmitted through the network at a plurality of monitoring points, each signature comprising at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp; and

generating at least one quality of service parameter for the network based upon the plurality of signatures.

2. The method of claim 1 wherein, for each of the plurality of signatures, the constant content in a corresponding network packet comprises one of a header and the payload for the corresponding network packet.

3. The method of claim 1 wherein generating at least one quality of service parameter is performed on a per-packet basis.

4. The method of claim 1 wherein generating at least one quality of service parameter does not introduce additional network packets between nodes of the network.

5. The method of claim 1 wherein each of the plurality of signatures for a frame network further comprises a total frame length, and a traffic class identifier, and the constant content comprises frame header information.

6. The method of claim 1 wherein creating the plurality of signatures further comprises:

time-stamping the plurality of network packets at each of the plurality of monitoring points.

7. The method of claim 1 wherein generating at least one quality of service parameter further comprises:

matching at least one signature from an first monitoring point of the plurality of monitoring points with at least one signature from a second monitoring point of the plurality of monitoring points; and

computing a one-way packet travel time.

8. The method of claim 1 wherein generating at least one quality of service parameter further comprises:

matching at least one signature from an first monitoring point of the plurality of monitoring points with at least one signature from a second monitoring point of the plurality of monitoring points; and

computing a lost packet percentage.

9. A method for passive quality of service monitoring of a network, the method comprising:

creating a plurality of ingress signatures from a plurality of network packets entering the network at an ingress point;

creating a plurality of egress signatures from the plurality of network packets at an egress point, the plurality of network packets having traversed the network from the ingress point to the egress point; and

generating at least one quality of service parameters for the network based upon the plurality of ingress signatures and the plurality of egress signatures, wherein each signature comprises at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp.

10. The method of claim 9 wherein generating at least one quality of service parameter is performed on a per-packet basis.

11. The method of claim 9 wherein generating at least one quality of service parameter does not introduce additional network packets between nodes of the network.

12. The method of claim 9 wherein, for each of the plurality of ingress signatures, the constant content in a corresponding network packet comprises one of a header and the payload for the corresponding network packet.

13. The method of claim 9 wherein for each of the plurality of egress signatures, the constant content in a corresponding network packet comprises one of a header and the payload for the corresponding network packet.

14. The method of claim 9 wherein creating the plurality of ingress signatures further comprises:

time-stamping the plurality of network packets at the ingress point.

15. The method of claim 9 wherein creating the plurality of egress signatures further comprises:

time-stamping the plurality of network packets at the egress point.

16. The method of claim 9 wherein generating at least one quality of service parameter further comprises:

matching at least one ingress signature with at least one egress signature; and

computing a one-way packet travel time.

17. The method of claim 9 wherein generating at least one quality of service parameter further comprises:

matching at least one ingress signature with at least one egress signature; and

computing a lost packet percentage.

18. The method of claim 9 wherein each of the plurality of ingress signatures for a frame network comprises a total frame length, and a traffic class identifier, and the constant content comprises frame header information.

19. The method of claim 9 wherein each of the plurality of egress signatures for a frame network comprises a total frame length, and a traffic class identifier, and the constant content comprises frame header information.

20. An article of manufacture including one or more computer-readable media with executable instructions therein, which when executed by a processing device causes the processing device to:

create a plurality of signatures from a plurality of network packets transmitted through the network at a plurality of monitoring points, each signature comprising at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp; and

generate at least one quality of service parameters for the network based upon the plurality of signatures.

21. An article of manufacture including one or more computer-readable media with executable instructions therein, which when executed by a processing device causes the processing device to:

create a plurality of ingress signatures from a plurality of network packets entering the network at an ingress point;

create a plurality of egress signatures from the plurality of network packets at an egress point, the plurality of network packets having traversed the network from the ingress point to the egress point; and

generate at least one quality of service parameters for the network based upon the plurality of ingress signatures and the plurality of egress signatures, wherein each signature comprises at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp.

22. A system for passive quality of service monitoring of a network, the system comprising:

means for creating a plurality of signatures from a plurality of network packets transmitted through the network at a plurality of monitoring points, each signature comprising at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp; and

means for generating at least one quality of service parameters for the network based upon the plurality of signatures.

23. A system for passive quality of service monitoring of a network, the system comprising:

means for creating a plurality of ingress signatures from a plurality of network packets entering the network at an ingress point;

means for creating a plurality of egress signatures from the plurality of network packets at an egress point, the plurality of network packets having traversed the network from the ingress point to the egress point; and

means for generating at least one quality of service parameters for the network based upon the plurality of ingress signatures and the plurality of egress signatures, wherein each signature comprises at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp.

24. A system for passive quality of service monitoring of a network, the system comprising:

a plurality of probes to create a plurality of signatures from a plurality of network packets transmitted through the network at a plurality of monitoring points, each signature comprising at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet, and a time-stamp; and

a correlation device to generate at least one quality of service parameter for the network based upon the plurality of signatures.

25. The system of claim 24 wherein, for each of the plurality of signatures, the constant content in a corresponding network packet comprises one of a header and the payload for the corresponding network packet.

26. The system of claim 24 wherein the correlation device generates the at least one quality of service parameter on a per-packet basis.

27. The system of claim 24 wherein the correlation device generates the at least one quality of service parameter without introducing additional network packets between nodes of the network.

28. The system of claim 24 wherein each of the plurality of signatures for a frame network comprises a total frame length, and a traffic class identifier, and the constant content comprises frame header information.

29. The system of claim 24 wherein the plurality of probes time-stamp the plurality of network packets at each of the plurality of monitoring points.

30. The system of claim 24 wherein the correlation device further matches at least one signature from an first monitoring point of the plurality of monitoring points with at least one signature from a second monitoring point of the plurality of monitoring points, and computes a one-way packet travel time.

31. A system for passive quality of service monitoring of a network comprising:

a first probe to create a plurality of ingress signatures from a plurality of network packets entering the network at an ingress point;

a second probe to create a plurality of egress signatures from the plurality of network packets at an egress point, the plurality of network packets having traversed the network from the ingress point to the egress point; and

a correlation device to generate at least one quality of service parameters for the network based upon the plurality of ingress signatures and the plurality of egress signatures, wherein each signature comprises at least a portion of constant content in a corresponding packet, a checksum calculated from a payload in the corresponding packet and a time-stamp.

32. The system of claim 31 wherein the correlation device generates the at least one quality of service parameter on a per-packet basis.

33. The system of claim 31 wherein the correlation device generates the at least one quality of service parameter without introducing additional network packets between nodes of the network.

34. The system of claim 31 wherein, for each of the plurality of ingress signatures, the constant content in a corresponding network packet comprises one of a header and the payload for the corresponding network packet.

35. The system of claim 31 wherein, for each of the plurality of egress signatures, the constant content in a corresponding network packet comprises one of a header and the payload for the corresponding network packet.

36. The system of claim 31 wherein the first probe time-stamps the plurality of network packets at the ingress point.

37. The system of claim 31 wherein the second probe time-stamps the plurality of network packets at the egress point.

38. The system of claim 31 wherein the correlation device further matches at least one ingress signature with at least one egress signature, and computes a one-way packet travel time.

39. The system of claim 31 wherein the correlation device further matches at least one ingress signature with at least one egress signature, and computes a lost packet percentage.

40. The system of claim 31 wherein each of the plurality of ingress signatures for a frame network comprises a total frame length, and a traffic class identifier, and the constant content comprises frame header information.

41. The system of claim 31 wherein each of the plurality of egress signatures for a frame network comprises a total frame length, and a traffic class identifier, and the constant content comprises frame header information.