Active probing for real-time diagnosis

• US 9,009,301 B2
• Filed: 01/11/2012
• Issued: 04/14/2015
• Est. Priority Date: 04/16/2004
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Brodie, Mark A., Grabarnik, Genady, Ma, Sheng, Odintsova, Natalia V., Rish, Irina
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US13/347,860
• Publication Number:
  US 20120116721A1
• Time in Patent Office: 1,189 Days
• Field of Search: 709217-228, 709200-203, 702/168, 702/183, 700/195
• US Class Current: 709/224
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/12 Network monitoring probes

Abstract

Improved problem diagnosis techniques for use in accordance with computing systems, e.g., distributed computing systems, are disclosed. In one aspect of the invention, a technique for diagnosing a problem associated with a computing system comprises the following steps/operations. One or more probes are executed in accordance with at least a portion of a previously selected probe schedule. When a result of one or more of the probes of the previously selected probe schedule indicates, at least, a potential problem associated with the computing system, one or more probes which optimize at least one criterion are selected in real-time. The one or more selected probes are executed so as to diagnose the potential problem.

Claims

1. A method for diagnosing a problem associated with a computing system, the method comprising the steps of:

executing one or more probes in accordance with at least a portion of a previously selected probe schedule to detect one or more potential problems in the computing system;

when a result of one or more of the probes of the previously selected probe schedule indicates, at least, a potential problem associated with the computing system, selecting in real-time one or more probes which optimize at least one criterion; and

executing the one or more selected probes so as to diagnose the potential problem,

wherein selecting in real-time one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem, and

wherein one or more of the steps of executing and selecting are implemented by a computer processor.

2. The method of claim 1, further comprising the step of analyzing results of the execution of the one or more selected probes using a probabilistic inference.

3. The method of claim 2, wherein the step of analyzing results of the execution of the one or more selected probes using a probabilistic inference further comprises the step of analyzing results of the execution of the one or more selected probes using a Bayesian network.

4. The method of claim 2, wherein the step of analyzing results of the execution of the one or more selected probes using a probabilistic inference further comprises the step of analyzing results of the execution of the one or more selected probes using one or more prior fault probabilities for one or more system components.

5. The method of claim 2, further comprising the step of repeating the step of selecting in real-time one or more probes which optimize at least one criterion and the step of analyzing results of the execution of the one or more selected probes until the a particular level of diagnostic confidence is reached.

6. The method of claim 1, further comprising the step of preselecting sets of probes to be executed.

7. The method of claim 6, wherein the step of preselecting sets of probes to be executed further comprises the step of preselecting a problem detection probe set (DPS) and a problem localization probe set (LPS) to be executed, wherein probes of the DPS are intended to cover any problem and probes of the LPS are intended to localize a problem detected by a probe of the DPS.

8. A method for diagnosing a problem associated with a computing system, the method comprising the steps of:

selecting online one or more probes which optimize at least one criterion, when a result of an execution of one or more probes of at least a portion of a previously selected probe schedule indicates, at least, a potential problem associated with the computing system; and

executing the one or more selected probes so as to diagnose the potential problem,

wherein selecting online one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem, and

wherein one or more of the steps of executing and selecting are implemented by a computer processor.

9. Apparatus for diagnosing a problem associated with a computing system, the apparatus comprising:

a memory; and

at least one processor coupled to the memory and operative to;

execute one or more probes in accordance with at least a portion of a previously selected probe schedule to detect one or more potential problems in the computing system;

when a result of one or more of the probes of the previously selected probe schedule indicates, at least, a potential problem associated with the computing system, select in real-time one or more probes which optimize at least one criterion; and

execute the one or more selected probes so as to diagnose the potential problem,

wherein selecting in real-time one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem.

10. The apparatus of claim 9, wherein the at least one processor is further operative to analyze results of the execution of the one or more selected probes using a probabilistic inference.

11. The apparatus of claim 10, wherein the operation of analyzing results of the execution of the one or more selected probes using a probabilistic inference further comprises the operation of analyzing results of the execution of the one or more selected probes using a Bayesian network.

12. The apparatus of claim 10, wherein the operation of analyzing results of the execution of the one or more selected probes using a probabilistic inference further comprises the operation of analyzing results of the execution of the one or more selected probes using one or more prior fault probabilities for one or more system components.

13. The apparatus of claim 10, wherein the at least one processor is further operative to repeat the operation of selecting in real-time one or more probes which optimize at least one criterion and the operation of analyzing results of the execution of the one or more selected probes until the a particular level of diagnostic confidence is reached.

14. The apparatus of claim 9, wherein the at least one processor is further operative to preselect sets of probes to be executed.

15. The apparatus of claim 14, wherein the operation of preselecting sets of probes to be executed further comprises the operation of preselecting a problem detection probe set (DPS) and a problem localization probe set (LPS) to be executed, wherein probes of the DPS are intended to cover any problem and probes of the LPS are intended to localize a problem detected by a probe of the DPS.

16. Apparatus for diagnosing a problem associated with a computing system, the apparatus comprising:

a memory; and

at least one processor coupled to the memory and operative to;

select online one or more probes which optimize at least one criterion, when a result of an execution of one or more probes of at least a portion of a previously selected probe schedule indicates, at least, a potential problem associated with the computing system; and

execute the one or more selected probes so as to diagnose the potential problem,

wherein selecting online one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem.

17. An article of manufacture for diagnosing a problem associated with a computing system, comprising a non-transitory machine readable medium containing one or more programs which when executed implement the steps of:

executing one or more probes in accordance with at least a portion of a previously selected probe schedule to detect one or more potential problems in the computing system;

when a result of one or more of the probes of the previously selected probe schedule indicates, at least, a potential problem associated with the computing system, selecting in real-time one or more probes which optimize at least one criterion; and

executing the one or more selected probes so as to diagnose the potential problem,

wherein selecting in real-time one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem.

18. An article of manufacture for diagnosing a problem associated with a computing system, comprising a non-transitory machine readable medium containing one or more programs which when executed implement the steps of:

selecting online one or more probes which optimize at least one criterion, when a result of an execution of one or more probes of at least a portion of a previously selected probe schedule indicates, at least, a potential problem associated with the computing system; and

executing the one or more selected probes so as to diagnose the potential problem,

wherein selecting online one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem.

19. A method of providing a problem diagnosis service in accordance with a computing system, comprising the step of:

a service provider providing a problem diagnosis system operative to;

execute one or more probes in accordance with at least a portion of a previously selected probe schedule to detect one or more potential problems in the computing system;

when a result of one or more of the probes of the previously selected probe schedule indicates, at least, a potential problem associated with the computing system, select in real-time one or more probes which optimize at least one criterion; and

execute the one or more selected probes so as to diagnose the potential problem,

wherein selecting in real-time one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem, and

wherein one or more of the steps of executing and selecting are implemented by a computer processor.

20. A method of providing a problem diagnosis service in accordance with a computing system, comprising the step of:

a service provider providing a problem diagnosis system operative to;

select online one or more probes which optimize at least one criterion, when a result of an execution of one or more probes of at least a portion of a previously selected probe schedule indicates, at least, a potential problem associated with the computing system; and

executing the one or more selected probes so as to diagnose the potential problem,

wherein selecting online one or more probes which optimize at least one criterion comprises selecting in real-time one or more probes which maximize information gain relating to the potential problem, and

wherein one or more of the steps of executing and selecting are implemented by a computer processor.