System and method for modeling interdependencies in a network datacenter
First Claim
1. A system for modeling interdependencies in a network datacenter, comprising:
- a machine-readable storage medium;
one or more physical processors;
a resource inventory comprising information describing a plurality of resources in an information technology datacenter and a plurality of open communication ports on the plurality of resources described in the resource inventory;
one or more listeners configured to observe one or more network conversations that occur in the datacenter, the one or more network conversations involving the plurality of open communication ports on the plurality of resources described in the resource inventory; and
a correlation engine that analyzes at least one observed network conversation of the one or more network conversations observed by the one or more listeners for modeling interdependencies in the network datacenter, wherein the correlation engine causes the one or more physical processors to;
drop the at least one observed network conversation in response to a determination that the at least one observed network conversation fails to correlate with any of the plurality of open communication ports on the plurality of resources described in the resource inventory and further in response to a determination that the at least one observed network conversation comprises a network conversation between one of the resources in the information technology datacenter and a resource outside the information technology datacenter; and
model a relationship between two of the plurality of resources described in the resource inventory in response to a determination that the at least one observed network conversation correlates with open communication ports on the two resources,wherein the correlation engine drops the at least one observed network conversation by no longer observing the network conversation for modeling interdependencies in the network datacenter.
16 Assignments
0 Petitions
Accused Products
Abstract
The system and method described herein may include a discovery engine that scans a network datacenter to inventory resources in the datacenter and populate a configuration management database with the resource inventory. One or more destination listeners created from the resource inventory may then selectively sample monitored flows in the datacenter to model interdependencies between the inventoried resources. For example, any monitored flows originating outside the datacenter or failing to correlate with the inventoried resources may be dropped, whereby the interdependencies may be modeled from a deliberately reduced sample of the monitored flows that have information relevant to modeling relationships between resources within the datacenter. Furthermore, directionalities for the monitored flows may be determined, wherein the directionalities provide further information relevant to modeling the relationships between the resources within the datacenter.
176 Citations
20 Claims
-
1. A system for modeling interdependencies in a network datacenter, comprising:
-
a machine-readable storage medium; one or more physical processors; a resource inventory comprising information describing a plurality of resources in an information technology datacenter and a plurality of open communication ports on the plurality of resources described in the resource inventory; one or more listeners configured to observe one or more network conversations that occur in the datacenter, the one or more network conversations involving the plurality of open communication ports on the plurality of resources described in the resource inventory; and a correlation engine that analyzes at least one observed network conversation of the one or more network conversations observed by the one or more listeners for modeling interdependencies in the network datacenter, wherein the correlation engine causes the one or more physical processors to; drop the at least one observed network conversation in response to a determination that the at least one observed network conversation fails to correlate with any of the plurality of open communication ports on the plurality of resources described in the resource inventory and further in response to a determination that the at least one observed network conversation comprises a network conversation between one of the resources in the information technology datacenter and a resource outside the information technology datacenter; and model a relationship between two of the plurality of resources described in the resource inventory in response to a determination that the at least one observed network conversation correlates with open communication ports on the two resources, wherein the correlation engine drops the at least one observed network conversation by no longer observing the network conversation for modeling interdependencies in the network datacenter. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A computer-implemented method of modeling interdependencies in a network datacenter, the method being implemented by one or more physical processors executing one or more computer program instructions which, when executed, perform the method, the method comprising:
-
discovering a resource inventory with a discovery engine coupled to an information technology datacenter, wherein the resource inventory comprises information describing a plurality of resources in the information technology datacenter and a plurality of open communication ports on the plurality of resources described in the resource inventory; observing one or more network conversations that occur in the datacenter, the one or more network conversations involving the plurality of open communication ports on the plurality of resources described in the resource inventory by one or more listeners for modeling interdependencies in the network datacenter; dropping, by the one or more physical processors, at least one observed network conversation of the one or more observed network conversations in response to a determination by a correlation engine that the at least one observed network conversation fails to correlate with any of the plurality of open communication ports on the plurality of resources described in the resource inventory and further in response to a determination that that the at least one observed network conversation comprises a network conversation between one of the resources in the information technology datacenter and a resource outside the information technology datacenter; and modeling, by the one or more physical processors, a relationship between two of the plurality of resources described in the resource inventory in response to a determination by the correlation engine that the at least one observed network conversation correlates with open communication ports on the two resources, wherein dropping the at least one observed network conversation comprises no longer observing the network conversation for modeling interdependencies in the network datacenter. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
Specification