Systems and methods for detecting unmanaged nodes within a system

• US 8,838,759 B1
• Filed: 06/29/2007
• Issued: 09/16/2014
• Est. Priority Date: 06/29/2007
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Crimson Corporation
• Inventors: Eatough, David A., Johnson, Peter E., Morley, David B.
• Primary Examiner(s): DONAGHUE, LARRY D
• Application Number:
  US11/771,735
• Time in Patent Office: 2,636 Days
• Field of Search: 709/223
• US Class Current: 709/223
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history
• CPC Class Codes: H04L 41/5058 Service discovery by the service manager
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Abstract

A method for detecting unmanaged nodes within a system is described. A flow of data associated with a node is detected, wherein a managed node detects the flow of data. Information relating to the node is discovered. A determination is made whether the node has been previously discovered. The identification of the node is recorded to a list if it is determined the node has not been previously discovered. The identification of the node is transmitted to a management device.

Claims

1. A method for detecting unmanaged nodes within a system, the method comprising:

detecting a flow of data associated with an unmanaged node, wherein a managed node detects the flow of data, wherein the managed node and the unmanaged node are downstream of a router, wherein the router blocks communications between a management device and the unmanaged node such that the management device is unaware of the unmanaged node;

discovering, by the managed node, information relating to the unmanaged node, wherein discovering information comprises building a filename based on a Media Access Control (MAC) address of the unmanaged node and a file path;

determining, by the managed node, whether the unmanaged node has been previously discovered, wherein the management device is unaware of the unmanaged node until after the unmanaged node has been discovered or identified;

recording, by the managed node, the identification of the unmanaged node to a list if it is determined the unmanaged node has not been previously discovered;

determining if a management agent included on the unmanaged node is disabled; and

transmitting, by the managed node, the identification of the unmanaged node to the management device and if the unmanaged node includes a disabled management agent, wherein the transmission sent by the managed node to the management device is not blocked by the router, thereby making the management device aware of the unmanaged node.

2. The method of claim 1, wherein the flow of data comprises a Dynamic Host Configuration Protocol (DHCP) broadcast.

3. The method of claim 1, wherein the flow of data comprises an Address Resolution Protocol (ARP) request.

4. The method of claim 1, further comprising determining if a file associated with the filename is stored in local cache of the unmanaged node.

5. The method of claim 4, further comprising performing a peer aware download and determining if the file is included in a local subnet of the unmanaged node.

6. The method of claim 5, further comprising contacting a core device to download the file if it is determined that the file is not included in the local subnet of the unmanaged node.

7. The method of claim 6, wherein the core device identifies an undiscovered machine based on a Uniform Resource Locator (URL) of the file that is downloaded from the core device.

8. The method of claim 1, further comprising comparing information related with the unmanaged node with information stored in a database.

9. The method of claim 1, further comprising flagging the unmanaged node as an unmanaged node if information relating to the unmanaged node is not stored in a database.

10. The method of claim 1, wherein the information relating to the unmanaged node comprises a hostname, an Internet Protocol (IP) address, a MAC address and a status of a management agent.

11. A computer system that is configured to detect unmanaged nodes within a system, the computer system comprising:

a processor;

memory in electronic communication with the processor;

instructions stored in the memory, the instructions being executable to;

detect a flow of data associated with an unmanaged node, wherein the computer system detects the flow of data, wherein the computer system and the unmanaged node are downstream of a router, wherein the router blocks communications between a management device and the unmanaged node such that the management device is unaware of the unmanaged node;

discover, by the computer system, information relating to the unmanaged node, wherein discovering information comprises building a filename based on a Media Access Control (MAC) address of the unmanaged node and a file path;

determine, by the computer system, whether the unmanaged node has been previously discovered, wherein the management device is unaware of the unmanaged node until after the unmanaged node has been discovered or identified;

record, by the computer system, the identification of the unmanaged node to a list if it is determined the unmanaged node has not been previously discovered;

determine if a management agent included on the unmanaged node is disabled; and

transmit, by the computer system, the identification of the unmanaged node to the management device and if the unmanaged node includes a disabled management agent, wherein the transmission sent by the computer system to the management device is not blocked by the router, thereby making the management device aware of the unmanaged node.

12. The computer system of claim 11, wherein the flow of data comprises a Dynamic Host Configuration Protocol (DHCP) broadcast.

13. The computer system of claim 11, wherein the flow of data comprises an Address Resolution Protocol (ARP) request.

14. The computer system of claim 11, wherein the instructions are further executable to determine if a file associated with the filename is stored in local cache of the unmanaged node.

15. The computer system of claim 14, wherein the instructions are further executable to perform a peer aware download and determine if the file is included in a local subnet of the unmanaged node.

16. The computer system of claim 15, wherein the instructions are further executable to contact a core device to download the file if it is determined that the file is not included in the local subnet of the unmanaged node.

17. The computer system of claim 16, wherein the core device identifies an undiscovered machine based on a URL of the file that is downloaded from the core device.

18. A non-transitory computer-readable medium comprising executable instructions for detecting unmanaged nodes within a system, the instructions being executable to:

detect a flow of data associated with an unmanaged node, wherein a managed node detects the flow of data, wherein the managed node and the unmanaged node are downstream of a router, wherein the router blocks communications between a management device and the unmanaged node such that the management device is unaware of the unmanaged node;

discover, by the managed node, information relating to the unmanaged node, wherein discovering information comprises building a filename based on a Media Access Control (MAC) address of the unmanaged node and a file path;

determine, by the managed node, whether the unmanaged node has been previously discovered, wherein the management device is unaware of the unmanaged node until after the unmanaged node has been discovered or identified;

record, by the managed node, the identification of the unmanaged node to a list if it is determined the unmanaged node has not been previously discovered;

determine if a management agent included on the unmanaged node is disabled; and

transmit, by the managed node, the identification of the unmanaged node to the management device and if the unmanaged node includes a disabled management agent, wherein the transmission sent by the managed node to the management device is not blocked by the router, thereby making the management device aware of the unmanaged node.