Routing monitoring

• US 7,710,885 B2
• Filed: 08/29/2003
• Issued: 05/04/2010
• Est. Priority Date: 08/29/2003
• Status: Active Grant

• Current Assignee: Viavi Solutions, Inc. (Lumentum Holdings Inc.)
• Original Assignee: Agilent Technologies, Inc.
• Inventors: Tatman, Lance A., Tudor, Alexander L., Ilnicki, Slawomir K.
• Primary Examiner(s): Pérez-Gutiérrez; Rafael
• Assistant Examiner(s): Di Prisco; German Viana
• Application Number:
  US10/652,286
• Publication Number:
  US 20050047413A1
• Time in Patent Office: 2,440 Days
• Field of Search: 370/392
• US Class Current: 370/241
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 45/42 Centralised routing

Abstract

A routing monitor is disclosed comprising at least one communication tap, wherein each of the at least one communication taps is positioned in a line of communication between two routers and a protocol emulator for reassembling routing protocol messages captured by the at least one communication tap and opening a routing protocol connection with a network device using the reassembled routing protocol messages in response to a request for connection received from the network device.

Claims

1. A routing monitor comprising:

at least one communication tap, wherein each of said at least one communication taps is positioned in a line of communication between two routers;

a protocol emulator for reassembling routing protocol messages captured by said at least one communication tap and establishing a routing protocol session with a network monitoring device using said reassembled routing protocol messages; and

a transport protocol module in communication with said at least one communication tap,

wherein said transport protocol module reassembles transport protocol messages captured by said at least one communication tap, and

wherein said protocol emulator opens a transport protocol connection and establishes the routing protocol session with said network monitoring device using said reassembled transport protocol messages.

2. The routing monitor of claim 1 further comprising:

a Web server, wherein said Web server converts said reassembled routing protocol messages into a Web accessible format; and

a Web interface for displaying said reassembled routing protocol messages in said Web accessible format.

3. The routing monitor of claim 1 wherein said at least one communication tap comprises one of:

a mirroring port on at least one of said two routers; and

a line tap device.

4. The routing monitor of claim 1 wherein said at least one communication tap comprises:

a line tap device; and

a tap interface module (TIM) between said line tap device and said protocol emulator, wherein said TIM filters messages intercepted by the line tap device according to filter attributes.

5. The routing monitor of claim 4 wherein said filter attributes comprise one or more of:

Internet Protocol (IP) addresses;

protocol identification; and

destination port.

6. The routing monitor of claim 1 further comprising:

a routing reconstruction module for building a routing information base (RIB) using said reassembled routing protocol messages.

7. The routing monitor of claim 1 further comprising:

a table reconstruction module for building a routing table using said reassembled routing protocol messages.

8. The routing monitor of claim 6 further comprising:

a Web server, wherein said Web server converts said RIB into a Web accessible format; and

a Web interface for displaying said RIB in said Web accessible format.

9. The routing monitor of claim 1 wherein said protocol emulator comprises:

a routing protocol reconstruction module for reassembling said captured routing protocol messages; and

a protocol session emulator for establishing the routing protocol session to said network monitoring device and by transmitting appropriate ones of said reassembled routing protocol messages to said network monitoring device.

10. The routing monitor of claim 1 wherein said protocol emulator and said network monitoring device are located in a single device.

11. The routing monitor of claim 2 wherein said protocol emulator, said network monitoring device, and said Web server are located in a single device.

12. The routing monitor of claim 1 wherein said routing protocol comprises one of:

Border Gateway Protocol (BGP);

Routing Information Protocol (RIP);

Open Shortest Path First Protocol (OSPF); and

Intermediate System to Intermediate System (ISIS) protocol.

24. The routing monitor of claim 1, wherein the routing protocol messages are captured by said at least one communication tap without establishing any session between the routing monitor and either of the two routers.

13. A method for monitoring routing information in a network comprising:

tapping into a communication line between two network routers;

replicating packets transmitted on said communication line between said two network routers;

transmitting said replicated packets to a session emulator;

reconstructing routing protocol messages from said replicated packets with a protocol emulator; and

establishing a routing protocol session with a network monitoring device.

14. The method of claim 13 further comprising:

converting said reconstructed routing protocol messages into a Web compatible format; and

displaying said converted routing protocol messages on a Web interface.

15. The method of claim 13 further comprising:

filtering said replicated packets according to one or more of;

Internet Protocol (IP) addresses;

protocol identification; and

destination port.

16. The method of claim 13 further comprising:

reconstructing transport protocol messages from said replicated packets; and

establishing a transport protocol session with said network monitoring device.

17. The method of claim 13 further comprising:

constructing a routing information base (RIB) using said reconstructed routing protocol messages;

converting said RIB into a Web compatible format; and

displaying said converted RIB on a Web interface.

18. The method of claim 13 further comprising:

constructing a routing table using said reconstructed routing protocol messages.

25. The method of claim 13, wherein the method does not establish any session with either of the two routers.

19. A computer program product having a computer readable medium with computer program logic recorded thereon, said computer program product comprising:

code for communicating with an eavesdropping device between two routers and for re-assembling routing protocol messages received from the eavesdropping device; and

code for opening a transport protocol connection and emulating a routing protocol session with a network monitoring device using the re-assembled transport protocol messages.

20. The computer program product of claim 19 further comprising:

code for displaying said re-assembled routing protocol messages on a Web interface.

21. The computer program product of claim 19 further comprising:

code for constructing a routing table using said re-assembled routing protocol messages.

22. The computer program product of claim 19 further comprising:

code within said eavesdropping device for filtering said routing protocol messages are filtered according to one or more of;

Internet Protocol (IP) addresses;

protocol identification; and

destination port.

23. The computer program product of claim 19 further comprising:

code for reconstructing transport protocol messages received from said eavesdropping device between said two routers; and

code for emulating a transport protocol session with said network monitoring device.

26. The computer program product of claim 19, wherein the computer program product does not include any code for establishing any session with either of the two routers.