Method and apparatus for aggregating alarms and faults of a communications network

• US 7,313,736 B2
• Filed: 06/14/2004
• Issued: 12/25/2007
• Est. Priority Date: 06/16/2000
• Status: Expired due to Term

• Current Assignee: Ciena Corporation
• Original Assignee: Ciena Corporation
• Inventors: Hebbar, Srinivasa, Dunbar, Martha, Scrandis, Clark, Kapur, Rajan, Peters-Rodbell, Michael B.
• Primary Examiner(s): DUNCAN, MARC M
• Application Number:
  US10/865,958
• Publication Number:
  US 20040223461A1
• Time in Patent Office: 1,289 Days
• Field of Search: None
• US Class Current: 714/47.3
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0811 by checking connectivity
• CPC Class Codes: H04L 43/0817 by checking functioning

Abstract

A distributed method and system of controlling a communications network having a plurality of spans of interconnected network elements some of which include a network element processor distributes network topology information to respective span databases; stores original fault objects in the respective span databases; advertises fault objects to other network element processors in a local span when the original fault affects network elements other than a network element in which the fault occurred; advertises alarm objects to other network element processors that are respectively associated with a circuit affected by the original faults; stores the advertised fault and alarm objects in the respective span databases; and performs distributed processing of the advertised fault and alarm objects with the other network element processors and the respective span databases. Aggregation of other faults and alarms that may be occurring on the communications network due to other faults other than the received fault aids in determining causality of the fault. Causality may be determined by correlating other faults and alarms with the received fault. If not a root cause of another fault or alarm, the received fault is sympathetic to another fault or alarm. Sympathetic faults are suppressed while root cause faults are promoted to an alarm and reported to affected network elements. The number of alarms viewed by a network manager as well as the reporting of alarms and underlying faults are reduced by performing such distributed alarm correlation and fault reporting suppression.

Claims

1. A method of performing distributed management of a communications network having at least one span, comprising:

receiving a fault;

aggregating other faults and one or more alarms that may be occurring on the communications network; and

correlating the other faults and the one or more alarms with the received fault to determine if the received fault is sympathetic to at least one of the alarms or the other faults;

wherein said reciving, aggregating, and correlating steps are performed in a distributed manner by multiple network element processors in the communications network.

2. The method of performing distributed management of a communications network having at least one span according to claim 1,

said aggregating step aggregating alarms and other faults by delaying operation of said correlating step.

3. The method of performing distributed management of a communications network according to claim 1, further comprising:

suppressing reporting of the received fault to a network monitoring interface if said correlating step determines that the received fault is sympathetic to at least one of the alarms or at least one of the other faults.

4. The method of performing distributed management of a communications network according to claim 1,

wherein the communications network includes multiple spans,

said correlating step including:

multispan aggregating one or more multispan alarms that may be occurring on the communications network;

multispan correlating the one or more multispan alarms with the received fault to determine if the received fault is sympathetic to at least one of the other faults or at least one of the multispan alarms.

5. The method of performing distributed management of a communications network according to claim 4,

said multispan aggregating step aggregating the multispan alarms by delaying operation of said multispan correlating step.

6. The method of performing distributed management of a communications network according to claim 4, further comprising:

suppressing reporting of the received fault if said correlating step determines that the received fault is sympathetic to at least one of the multispan alarms or at least one of the other faults.

7. A network element of a communications network having at least one span, comprising:

a span database; and

a controller operatively connected to said span database and to other network elements of the communications network,

said span database receiving a fault;

said controller aggregating other faults and one or more alarms that may be occurring on the communications network in said span database; and

said controller correlating the other faults and the one or more alarms with the received fault to determine if the received fault is sympathetic to at least one of the alarms or the other faults;

wherein said span database is configured to receive faults from a plurality of controllers located in the communications network;

wherein said plurality of controllers are configured to aggregate other faults and one or more alarms that may be occurring on the communications networks in said span database and correlate the other faults and the one or more alarms with the received fault to determine if the received fault is sympathetic to at least one of the alarms or the other faults.

8. The network element of a communications network having at least one span according to claim 7,

said controller aggregating alarms and other faults by delaying execution of said correlating step.

9. The network element of a communications network having at least one span according to claim 8,

said controller delaying correlating by a delay related to a number of other network elements in the communications network.

10. The network element of a communications network having at least one span according to claim 7,

said controller suppressing reporting of the received fault to a network monitoring interface if said controller determines that the received fault is sympathetic to at least one of the alarms or at least one of the other faults.

11. The network element of a communications network having at least one span according to claim 7,

wherein the communications network includes multiple spans,

said controller multispan aggregating one or more multispan alarms that may be occurring on the communications network due to the other faults;

said controller multispan correlating the one or more multispan alarms with the received fault to determine if the received fault is sympathetic to at least one of the other faults or at least one of the multispan alarms.

12. The network element of a communications network having multiple spans according to claim 11,

said controller multispan aggregating the multispan alarms by delaying execution of multispan correlating.

13. The network element of a communications network having multiple spans according to claim 12,

said controller delaying multispan correlating by a delay related to a number of other network elements in the communications network.

14. The network element of a communications network having at least one span according to claim 11,

said controller suppressing reporting of the received fault if said controller determines that the received fault is sympathetic to at least one of the multispan alarms or at least one of the other faults.

15. A system of network elements of a communications network wherein at least two network elements are configured according to claim 7.