Distributed monitoring and analysis system for network traffic

• US 7,031,264 B2
• Filed: 06/12/2003
• Issued: 04/18/2006
• Est. Priority Date: 06/12/2003
• Status: Expired due to Term

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Technology Corporation Miami Lakes FLA US
• Inventors: Adhikari, Akshay, Rao, Balaji, Denby, Lorraine, Meloche, Jean, Mallows, Colin L., Sullivan, Shane M., Vardi, Yehuda, Bianco, Scott Vincent
• Primary Examiner(s): PHAM, BRENDA H
• Application Number:
  US10/459,948
• Publication Number:
  US 20040252646A1
• Time in Patent Office: 1,041 Days
• Field of Search: 370/352.1, 370/252, 370/241.1, 370/242, 370/247, 370/236.2, 370/236.1, 370/235, 370/237, 370/238, 370/248, 370/255, 370/241, 370/229, 370/231, 370/238.1, 370/253, 370/389, 370351-358, 370/393, 370/383, 370/256, 370/386, 370/408, 370/216
• US Class Current: 370/252
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0835 One way packet loss
• CPC Class Codes: H04L 43/0858 One way delays
• CPC Class Codes: H04L 43/0864 Round trip delays
• CPC Class Codes: H04L 43/087 Jitter
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps
• CPC Class Codes: H04L 43/12 Network monitoring probes

Abstract

Techniques are disclosed for improved monitoring and analysis of VoIP communications, multimedia communications or other types of network traffic in a network-based communication system. In accordance with one aspect of the invention, endpoint devices of the network-based communication system are configurable so as to collectively implement a distributed monitoring and analysis system which does not require a centralized testing server or other centralized controller. Distributed test units associated with the endpoint devices may be utilized in implementing the distributed monitoring and analysis system, and are preferably configured to support a web-based user interface providing access to measurement data. The endpoint devices may be advantageously organized into a hierarchy comprising a plurality of zones, with each of the endpoint devices belonging to at least one zone. For each zone, one of the endpoint devices may be designated as a zone leader for controlling the periodic generation of communications between selected endpoint devices that belong to subzones of that zone in the hierarchy.

Claims

1. An apparatus for use in a network-based communication system, the apparatus comprising:

a first endpoint device configurable for operation with at least a second endpoint device;

the first and second endpoint devices being part of a plurality of endpoint devices collectively implementing a distributed monitoring and analysis system

wherein the plurality of endpoint devices are organized into a hierarchy comprising a plurality of zones;

the distributed monitoring and analysis system being configured to process measurements based on communications between respective pairs of endpoints to provide summary information regarding inter-zone communication performance.

2. The apparatus of claim 1 wherein a given one of the communications is directed from one of the first and second endpoint devices to the other of the first and second endpoint devices.

3. The apparatus of claim 1 wherein each of the first and second endpoint devices has associated therewith a corresponding distributed test unit.

4. The apparatus of claim 3 wherein at least one of the distributed test units is implemented within its associated endpoint device.

5. The apparatus of claim 3 wherein at least one of the distributed test units is implemented as an external unit coupled to its associated endpoint device.

6. The apparatus of claim 3 wherein at least one of the distributed test units comprises a processor coupled to a memory.

8. The apparatus of claim 1 wherein a given one of the communications comprises a Real-Time Transport Protocol (RTP) data packet encapsulated within an Internet Protocol (IP) packet.

9. The apparatus of claim 2 wherein the communication is sent from the first endpoint device to the second endpoint device, and returned from the second endpoint device back to the first endpoint device.

10. The apparatus of claim 9 wherein the first and second endpoint devices each record timestamp information associated with sending and receiving of the communication.

11. The apparatus of claim 10 wherein each of the first and second endpoint devices is configured to record the timestamp information associated with sending and receiving of the communication at points in time corresponding substantially to times of respective transmission and reception of the communication over a connection associated with a network of the system under the control of an operating system kernel of the endpoint device.

12. The apparatus of claim 10 wherein the timestamp information is subject to a post-processing operation which determines an appropriate separation of a round trip time measurement into a pair of one-way measurements without requiring synchronization of clocks associated with the first and second endpoint devices.

13. The apparatus of claim 10 wherein the timestamp information is processed to generate estimates of offset and drift between internal clocks associated with the first and second endpoint devices.

14. The apparatus of claim 13 wherein the estimates of offset and drift are utilizable to linearly transform timestamps generated using a time scale of one of the first and second endpoint devices to a time scale of the other of the first and second endpoint devices.

15. The apparatus of claim 1 wherein at least a given one of the endpoint devices is operative to implement an address discovery process which permits that endpoint device to locate other endpoint devices configured for participation in the distributed monitoring and analysis system.

21. The apparatus of claim 1 being configured to rename one or more network interfaces based on geography, function, or other characteristic associated therewith.

23. The apparatus of claim 1 being configured to generate a display providing real-time visualization of network topology information based at least in part on the one or more measurements.

24. The apparatus of claim 1 wherein at least one of the endpoint devices comprises a terminal node of the network.

25. The apparatus of claim 1 wherein at least one of the endpoint devices comprises an internal node of the network.

7. An apparatus for use in a network-based communication system, the apparatus comprising:

a first endpoint device configurable for operation with at least a second endpoint device;

the first and second endpoint devices being two of a plurality of endpoint devices collectively implementing a distributed monitoring and analysis system in which a communication is directed to at least one of the endpoint devices and one or more measurements are made based on the communication;

wherein the distributed monitoring and analysis system does not require a centralized controller;

wherein each of the first and second endpoint devices has associated therewith a corresponding distributed test unit; and

wherein at least one of the distributed test units is configured to support a web-based user interface providing access to measurement data associated with the one or more measurements.

16. An apparatus for use in a network-based communication system, the apparatus comprising:

a first endpoint device configurable for operation with at least a second endpoint device;

the first and second endpoint devices being two of a plurality of endpoint devices collectively implementing a distributed monitoring and analysis system in which a communication is directed to at least one of the endpoint devices and one or more measurements are made based on the communication;

wherein the distributed monitoring and analysis system does not require a centralized controller;

wherein at least a given one of the endpoint devices is operative to implement an address discovery process which permits that endpoint device to locate other endpoint devices configured for participation in the distributed monitoring and analysis system; and

wherein the address discovery process is operative such that, upon identification of an additional endpoint device configured for participation in the distributed monitoring and analysis system, a remaining search space is partitioned among at least the given endpoint device and the additional endpoint device.

17. The apparatus of claim 16 wherein the search space partitioning operation is repeated each time an additional endpoint device configured for participation in the distributed monitoring and analysis system is identified.

18. An apparatus for use in a network-based communication system, the apparatus comprising:

a first endpoint device configurable for operation with at least a second endpoint device;

at least the first and second endpoint devices collectively implementing a distributed monitoring and analysis system in which a communication is directed to at least one of the endpoint devices and one or more measurements are made based on the communication;

wherein the distributed monitoring and analysis system does not require a centralized controller; and

wherein the first and second endpoint devices are part of a plurality of endpoint devices organized into a hierarchy comprising a plurality of zones, with each of the plurality of endpoint devices belonging to at least one zone.

19. The apparatus of claim 18 wherein for each of the zones at least one associated endpoint device is designated as a zone leader for controlling the periodic generation of communications between selected endpoint devices that belong to subzones of that zone in the hierarchy.

20. The apparatus of claim 19 wherein the selected endpoint devices are determined utilizing one of a random bottom up approach and a random top down approach.

22. An apparatus for use in a network-based communication system, the apparatus comprising:

a first endpoint device configurable for operation with at least a second endpoint device;

the first and second endpoint devices being two of a plurality of endpoint devices collectively implementing a distributed monitoring and analysis system in which a communication is directed to at least one of the endpoint devices and one or more measurements are made based on the communication;

wherein the distributed monitoring and analysis system does not require a centralized controller; and

wherein the distributed monitoring and analysis system supports a scripting feature which permits a user-scripted test program to be carried out by one or more of the endpoints.

26. A method for use in a network-based communication system comprising a plurality of endpoint devices which implement a distributed monitoring and analysis system, the method comprising the steps of:

organizing the plurality of endpoint devices into a hierarchy comprising a plurality of zones; and

configuring the distributed monitoring and analysis system to process measurements based on communications between respective pairs of endpoints to provide summary information regarding inter-zone communication performance.

27. An article of manufacture comprising a machine-readable storage medium containing software code for use in a network-based communication system comprising a plurality of endpoint devices which implement a distributed monitoring and analysis system, wherein the software code when executed implements the steps of:

organizing the plurality of endpoint devices into a hierarchy comprising a plurality of zones; and

configuring the distributed monitoring and analysis system to process measurements based on communications between respective pairs of endpoints to provide summary information regarding inter-zone communication performance.