System and method for automatically diagnosing protocol errors from packet traces

• US 7,836,341 B1
• Filed: 05/23/2007
• Issued: 11/16/2010
• Est. Priority Date: 03/24/2003
• Status: Active Grant

• Current Assignee: NetApp, Inc.
• Original Assignee: NetApp, Inc.
• Inventors: Krishnan, Prabhakar
• Primary Examiner(s): Bonzo; Bryce P
• Application Number:
  US11/752,379
• Time in Patent Office: 1,273 Days
• Field of Search: 714/43, 714/26
• US Class Current: 714/26
• CPC Class Codes: H04L 41/0663 Performing the actions predefined by failover planning, e.g. switching to standby network elements
• CPC Class Codes: H04L 41/16 using machine learning or artificial intelligence
• CPC Class Codes: H04L 49/555 Error detection

Abstract

A system and method for automatically diagnosing protocol errors from packet traces is provided. The system and method performs an automatic trace analysis on a packet trace to generate an analysis that is then fed into a diagnosis/resolution module. The diagnosis/resolution compares the trace analysis with the database of known problems to identify the protocol error and a suggested solution. The suggested solution then may be implemented, either by a user or by the DR module, to correct the protocol error.

Claims

1. A method for automatically diagnosing a protocol error from a packet trace, comprising:

maintaining, on a computer, a signature database having trace signature entries, each of the trace signature entries identifying a protocol error;

generating, by a first processor, a trace file;

performing, by a second processor, an automatic trace analysis of the trace file to generate a trace signature associated with an error in protocol;

comparing, by the second processor, the trace signature with entries in the signature database to identify a known protocol error and a solution associated with said protocol error by automatically matching the trace signature with one of the trace signature entries in the signature database, wherein comparing the is trace signature with entries in the signature database provides a diagnosis for the protocol error associated with the trace signature; and

generating a proposed solution to the protocol error based on the diagnosis.

2. The method of claim 1 further comprising:

alerting, by a second computer, a customer of the diagnosis and solution.

3. The method of claim 2 wherein alerting further comprises:

displaying a dialog box to a user.

4. The method of claim 1 further comprising:

alerting, by a diagnosis module, a customer of the diagnosis and the solution.

5. The method of claim 4 wherein alerting further comprises:

sending an email to the customer.

6. The method of claim 1 wherein generating the trace file further comprises:

storing copies of detected packets in the trace file.

7. A system for diagnosing protocol errors from a packet trace, the system comprising:

a signature database having trace signature entries, each of the trace signature entries identifying a known protocol error, a trace signature and a solution;

an automatic trace analysis module configured to analyze a trace file to generate a trace signature associated with an error in protocol; and

a diagnosis/resolution module configured to accept, as an input, a trace analysis file and identify one or more protocol errors from the associated trace signature by comparing the trace signature with entries in the signature database to identify a known protocol error and a solution associated with said protocol error by automatically matching the trace signature with one of the trace signature entries in the signature database, wherein comparing the trace signature with entries in the signature database provides a diagnosis for the protocol error associated with the trace signature.

8. The system of claim 7 further comprising a trace capture utility, the trace capture utility configured to generate the trace file for input to the automatic trace analysis module.

9. The system of claim 7 wherein the automatic trace analysis module and the diagnosis/resolution module are located at customer service site.

10. The system of claim 7 wherein the automatic trace analysis module and the diagnosis/resolution generation module are located on a customer site.

11. A method for automatically diagnosing a protocol error, comprising:

maintaining, on a computer, a signature database having trace signature entries, each of the trace signature entries identifying a protocol error;

analyzing, by a processor, a packet trace to generate a trace signature associated with an error in protocol; and

comparing, by the processor, the generated trace signature with entries in the signature database to identify a known protocol error and a solution associated with said protocol error by automatically matching the trace signature with one of the trace signature entries in the signature database, wherein comparing the trace signature with entries in the signature database provides a diagnosis for the protocol error associated with the trace signature.

12. The method of claim 11 wherein the packet traces are generated by a packet trace capture utility.

13. The method of claim 11 further comprising:

utilizing the diagnosis to generate a proposed solution to the protocol error.

14. The method of claim 13 further comprising:

alerting customer service of the proposed solution.

15. The method of claim 13 further comprising:

alerting a user of the proposed solution.

16. The method of claim 13 further comprising:

performing the proposed solution to correct the protocol error.

17. A computer readable medium containing executable program instructions executed by a processor, comprising:

program instructions that maintain a signature database on a computer, the signature database having trace signature entries, each of the trace signature entries identifying a protocol error;

program instructions that analyze, by the processor, a packet trace to generate a trace signature associated with an error in protocol; and

program instructions that compare, by the processor, the generated trace signature with entries in the signature database to identify a known protocol error and a solution associated with said protocol error by automatically matching the trace signature with one of the trace signature entries in the signature database, wherein comparing the trace signature with entries in the signature database provides a diagnosis for the protocol error associated with the trace signature.

18. A diagnosis and resolution module for automatically diagnosing a protocol error from a packet trace, the diagnosis and resolution module comprising:

means for maintaining a signature database on a computer, the signature database having trace signature entries, each of the trace signature entries identifying a protocol error;

means for accepting a trace signature associated with an error in protocol from an automatic trace analysis module; and

means for comparing the trace signature generated by the automatic trace analysis with entries in the signature database to identify a known protocol error and a solution associated with said protocol error by automatically matching the trace signature with one of the trace signature entries in the signature database, wherein comparing the trace signature with entries in the signature database provides a diagnosis for the protocol error associated with the trace signature.