Method for correlating and presenting network management data
First Claim
1. A method of correlating and presenting network data, comprising the steps of:
- retrieving a set of data from a network statistic data pool, said data pool having network traffic information for at least one of Applications, Application Protocols, Network Protocols, Hosts, and users on the network;
correlating the retrieved data into a map of traffic on said network; and
outputting said map;
wherein;
said map is output in a tree-based hierarchy in a split-window display; and
said tree-based hierarchy is switchable within the split-window display between each of,an Applications view comprising a hierarchy of network traffic flow for each application currently running on said hosts, further comprising a tree of applications protocol roots expandable to highlight network protocol branches used on the network in conjunction with the expanded application protocol root in a first window of the split-window display, and performance data as to each host pertaining to a selected application protocol and network protocol root branch pair in a second window of the split-window display,an Application Protocols view comprising a hierarchy of network traffic for each application protocol running on said hosts,a Hosts view comprising a hierarchy of network traffic for each of said hosts, anda Matrix view comprising a hierarchy of host to host network traffic on said network for each of said hosts.
7 Assignments
0 Petitions
Accused Products
Abstract
NIC collected network statistics are captured by agent devices resident on Host machines of a network. A probe (software or hardware) retrieves the collected statistics from one or more monitored hosts (each host on the network, for example) and places them in RMON MIB and RMON extension MIB formats. The MIB data is retrieved by queries from a data correlation device that then correlates the queried data into useful statistics regarding network traffic. The useful statistics include network traffic in bytes per second for each application, application protocol, hosts, user logon id, etc. for each of the monitored hosts. Different views including a host to host matrix view are provided in a split window display.
-
Citations
28 Claims
-
1. A method of correlating and presenting network data, comprising the steps of:
-
retrieving a set of data from a network statistic data pool, said data pool having network traffic information for at least one of Applications, Application Protocols, Network Protocols, Hosts, and users on the network; correlating the retrieved data into a map of traffic on said network; and outputting said map; wherein; said map is output in a tree-based hierarchy in a split-window display; and said tree-based hierarchy is switchable within the split-window display between each of, an Applications view comprising a hierarchy of network traffic flow for each application currently running on said hosts, further comprising a tree of applications protocol roots expandable to highlight network protocol branches used on the network in conjunction with the expanded application protocol root in a first window of the split-window display, and performance data as to each host pertaining to a selected application protocol and network protocol root branch pair in a second window of the split-window display, an Application Protocols view comprising a hierarchy of network traffic for each application protocol running on said hosts, a Hosts view comprising a hierarchy of network traffic for each of said hosts, and a Matrix view comprising a hierarchy of host to host network traffic on said network for each of said hosts. - View Dependent Claims (2, 3, 4)
-
-
5. A method of presenting network data, comprising the step of:
-
retrieving network data; and displaying the network data in a split-window display; wherein said step of displaying includes the steps of; displaying high level portions of the network data in a selectable format in a first window of said split-window display; and displaying details of a high level portion of network data selected in said first window in a second window of said split-window display; and the steps of displaying include displaying a Hosts view comprising a tree of host roots expandable to highlight network protocols utilized by each root host in a first window of the split-window display, and performance data as to each applications protocol operating under a selected host network protocol root branch pair in a second window of the split-window display;
wherein the steps of displaying comprise displaying an Application view comprising a tree of Application roots expandable to highlight root network protocols expandable to highlight hosts utilizing the root network protocol in conjunction with the expanded root Application in a first window of the split-window display, and performance data related to each application of a selected host, network protocol, and host combination in a second window of the split-window display. - View Dependent Claims (6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21)
-
-
22. A method of presenting network data, comprising the step of:
-
retrieving network data; displaying the network data in a split-window display; displaying a high level hierarchy of the network data in a first side of the split-window display; selecting one of the network data; and displaying performance data related to the selected network data in a second side of the split-window display. - View Dependent Claims (23, 24, 25, 26, 27, 28)
-
Specification