Proactive network analysis system

• US 7,986,632 B2
• Filed: 08/03/2009
• Issued: 07/26/2011
• Est. Priority Date: 07/29/2004
• Status: Expired due to Fees

• Current Assignee: Solutions4networks
• Original Assignee: Solutions4networks
• Inventors: McGough, Michele R, Monaco, Jeffrey P.
• Primary Examiner(s): Yao; Kwang B
• Assistant Examiner(s): Tran; Tung Q
• Application Number:
  US12/534,431
• Publication Number:
  US 20100020715A1
• Time in Patent Office: 722 Days
• Field of Search: 370/231, 370/241, 370/247, 370/248
• US Class Current: 370/248
• CPC Class Codes: H04L 43/022 by sampling
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0888 Throughput

Abstract

A proactive network analysis system is a single unit for diagnosing network problems, measuring network performance, and monitoring network status in a comprehensive manner. The system is a compilation of individual tools including a distributed network packet capture data stream collector; a traffic analyzer; a performance graphing unit; a syslog recorder analyzer and archiving unit; a system availability monitor; a device configuration archiving unit; and a throughput measurement tool. The system can further provide an access list generator, an access list analyzer, a router DNS name generator and a service level agreement measurement device.

Claims

1. A proactive network analysis system providing an integrated compilation of network tools for diagnosing network problems, measuring network performance, and monitoring network status, the system comprising:

a distributed network packet capture data stream collector providing selective recordings of network traffic;

a traffic analyzer providing selected samples of specified end-to-end paths, wherein the sampling is at one of the network layer, the IP layer, OS layer, or application layer;

a syslog recorder analyzer and archiving unit to collect and summarize log events from the network; and

a remote access server identification tool to identify Remote Access Servers on the network, wherein the tool uses the following process;

a. Check each known Layer 3 switch,

b. On the router, get an ARP cache,

c. Find any MAC address that has multiple IP addresses associated with it,

d. Ignore known MAC addresses or vendor IDs,

e. Ping the IP addresses, and check the time-to-live value, known as TTL, on the resultant response, wherein a primary server will have an TTL that is greater than remotely attached devices and based on the differing values of the TTL field, a RAS server is identified.

2. The integrated proactive network analysis system of claim 1 wherein the system supports a patch mechanism, wherein the patch mechanism allows users to backup their settings, migrate their setting to other similar network management systems and import their settings from other similar network management systems.

3. The integrated proactive network analysis system of claim 1 further including a service level agreement tool that tracks the level of service provided by a network provider and compares the result to the promises of the service level agreement.

4. The integrated proactive network analysis system of claim 1 further including a DNS name generator tool that takes, as input, a router configuration file and outputs a meaningful name for each of the IP addresses in the configuration file.

5. The integrated proactive network analysis system of claim 1 further including a Generating Access List tool that generates the correct Access List entries to implement the desired policies and provides reports that can be presented to the Security Audit staff for their review and approval of those policies.

6. The integrated proactive network analysis system of claim 1 further including a Bandwidth estimation tool.