System and method for automatically diagnosing protocol errors from packet traces

• US 7,249,286 B1
• Filed: 03/24/2003
• Issued: 07/24/2007
• Est. Priority Date: 03/24/2003
• Status: Expired due to Fees

• Current Assignee: NetApp, Inc.
• Original Assignee: Network Appliance Incorporated (NetApp, Inc.)
• Inventors: Krishnan, Prabhakar
• Primary Examiner(s): Bonzo; Bryce P
• Application Number:
  US10/395,405
• Time in Patent Office: 1,583 Days
• Field of Search: 714/27, 714/39, 714/45
• US Class Current: 714/39
• CPC Class Codes: H04L 41/0663 Performing the actions predefined by failover planning, e.g. switching to standby network elements
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 49/555 Error detection

Abstract

A system and method for automatically diagnosing protocol errors from packet traces is provided. The system and method performs an automatic trace analysis on a packet trace to generate an analysis that is then fed into a diagnosis/resolution module. The diagnosis/resolution compares the trace analysis with the database of known problems to identify the protocol error and a suggested solution. The suggested solution then may be implemented, either by a user or by the DR module, to correct the protocol error.

Claims

1. A method for automatically diagnosing a protocol error, comprising of:

analyzing a packet trace to generate a trace analysis; and

comparing the generated trace analysis with entries in a signature database to identify the protocol error, wherein the signature database further comprises entries identifying a trace signature, a known protocol error and a solution, wherein the suggested solution is selected from a group consisting of installing a patch, upgrading software, and no error.

2. A method for automatically diagnosing an error, comprising:

maintaining a signature database having trace signature entries, each of the trace signature entries identifying a protocol error;

generating a trace file;

performing an automatic trace analysis of the trace file to generate an error trace signature;

comparing the error trace signature with the trace signature entries in the signature database to arrive at a diagnosis in response to a match between the error trace signature and a trace signature entry; and

generating a proposed solution to the protocol error in response to the diagnosis.

3. The method of claim 2 further comprising:

transferring the trace file to a customer service computer; and

performing the trace analysis on the customer service computer.

4. The method of claim 2 further comprising alerting a customer of the diagnosis and proposed solution.

5. The method of claim 2 wherein the signature database further comprises entries identifying trace signatures, diagnoses and solutions.

6. The method of claim 2 wherein the step of generating a trace file further comprises storing copies of detected packets in the trace file.

7. A system for automatically diagnosing an error, the system comprising:

a signature database having trace signature entries, each of the trace signature entries identifying a protocol error;

an automatic trace analysis module to perform an automatic trace analysis of a trace file to generate an error trace signature; and

a diagnosis/resolution module to compare the error trace signature with the trace signature entries in the signature database to arrive at a diagnosis in response to a match between the error trace signature and a trace signature entry, to generate a proposed solution to the protocol error in response to the diagnosis.

8. The system of claim 7 wherein the signature database includes entries identifying known protocol errors, trace signatures associated with the known protocol errors and suggested solutions for each of the known protocol errors.

9. The system of claim 7 further comprising a trace capture utility, the trace capture utility adapted to generate a trace file for input to the automatic trace analysis module.

10. The system of claim 7 wherein the automatic trace analysis module and the diagnosis/resolution module are located at a customer service site.

11. The system of claim 7 wherein the automatic trace analysis module and the diagnosis/resolution generation module are located on a customer site.