System and method for discovering assets and functional relationships in a network

• US 9,172,611 B2
• Filed: 10/29/2008
• Issued: 10/27/2015
• Est. Priority Date: 09/01/2006
• Status: Active Grant

• Current Assignee: Spirent Communications Incorporated
• Original Assignee: Spirent Communications Incorporated
• Inventors: Guruswamy, Kowsik
• Primary Examiner(s): Christensen, Scott B
• Application Number:
  US12/260,438
• Publication Number:
  US 20100106742A1
• Time in Patent Office: 2,554 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies

Abstract

A discovery system (and corresponding method and computer program product) for automatically discovering assets and their roles and functional relationships in a network system is described. In one aspect, the discovery system interrogates known assets through protocol messages, normalizes response messages, and contextually analyzes the normalized response message to identify additional assets and their roles and functional relationships with the interrogated assets. The discovery system can recursively interrogate newly discovered assets to discover additional assets. In another aspect of the present invention, the discovery system is scheduled to periodically interrogate known assets for up-to-date information of the assets and their roles and functional relationships. Such information can be used to provide various services.

Claims

1. A method for discovering assets and roles and functional relationships of the assets in a network including a plurality of related assets, each supporting one or more protocols, the method comprising:

(1) executing a query associated with a seed asset, the query representing a protocol message of a protocol supported by the seed asset, the seed asset being related to at least one of the plurality of related assets;

(2) contextually analyzing the query response for determining references to a first asset, a role of the first asset, and a functional relationship between the seed asset and the first asset based on a protocol grammar of the protocol;

wherein the role specifies general functions performed by the first asset; and

wherein the functional relationship specifies at least one specific function performed by the seed asset for the first asset or performed by the first asset for the seed asset;

(3) determining a query to send the first asset based on the role and the functional relationship; and

(4) recursively applying steps (1) through (3) for determining references to assets and their roles and functional relationships.

2. The method of claim 1, wherein recursively applying steps (1) through (3) further comprises recursively applying steps (1) through (3) using a second protocol different from the protocol supported by the seed asset.

3. The method of claim 1, wherein the functional relationship between the seed asset and the first asset is associated with a protocol independent from the protocol supported by the seed asset.

4. The method of claim 1, wherein the asset comprises one of the following:

a service, an interface, a domain, an application, a server, a host, and a subnet.

5. The method of claim 1, further comprising:

(5) normalizing the query response into a structured document based on the protocol grammar of the protocol.

6. The method of claim 1, wherein data in the query response is stored and indexed for subsequent searches.

7. The method of claim 1, further comprising:

(5) continuously applying steps (1) through (3) to all known assets to keep information about the known assets up-to-date.

8. The method of claim 1, further comprising:

(5) receiving a network range for network addresses of assets of interest,

wherein contextually analyzing the query response further comprises;

(2.1) comparing a network address of the first asset against the network range, and

(2.2) responding to the network address being outside the network range, not determining the query associated with the first asset based on the role and the functional relationship.

9. The method of claim 2, wherein recursively applying steps (1) through (3) further comprises recursively applying steps (1) through (3) using a third protocol different from the protocol supported by the seed asset and different from the second protocol.

10. The method of claim 1, further comprising constructing a network functional topology map based on the determined roles and functional relationships of the assets.

11. A computer program product having a non-transitory computer-readable medium having computer program instructions recorded thereon for discovering assets and roles and functional relationships of the assets in a network including a plurality of related assets, each supporting one or more protocols, the computer program instruction comprising instructions for:

(1) executing a query associated with a seed asset, the query representing a protocol message of a protocol supported by the seed asset, the seed asset being related to at least one of the plurality of related assets;

(2) contextually analyzing the query response for determining references to a first asset, a role of the first asset, and a functional relationship between the seed asset and the first asset based on a protocol grammar of the protocol;

wherein the role specifies general functions performed by the first asset; and

wherein the functional relationship specifies at least one specific function performed by the seed asset for the first asset or performed by the first asset for the seed asset;

(3) determining a query to send the first asset based on the role and the functional relationship; and

(4) recursively applying steps (1) through (3) for determining references to assets and their roles and functional relationships.

12. The computer program product of claim 11, wherein recursively applying steps (1) through (3) further comprises recursively applying steps (1) through (3) using a second protocol different from the protocol supported by the seed asset.

13. The computer program product of claim 11, wherein the functional relationship between the seed asset and the first asset is associated with a protocol independent from the protocol supported by the seed asset.

14. The computer program product of claim 11, wherein the asset comprises one of the following:

a service, an interface, a domain, an application, a server, a host, and a subnet.

15. The computer program product of claim 11, wherein the computer program instruction further comprises instructions for:

(5) normalizing the query response into a structured document based on the protocol grammar of the protocol.

16. The computer program product of claim 11, wherein data in the query response is stored and indexed for subsequent searches.

17. The computer program product of claim 12, wherein recursively applying steps (1) through (3) further comprises recursively applying steps (1) through (3) using a third protocol different from the protocol supported by the seed asset and different from the second protocol.

18. The computer program product of claim 11, wherein the computer program instruction further comprises instructions for constructing a network functional topology map based on the determined roles and functional relationships of the assets.

19. An apparatus for discovering assets and roles and functional relationships of the assets in a network including a plurality of related assets, each supporting one or more protocols, the apparatus comprising:

a discovery component configured to execute a query associated with a seed asset, the query representing a protocol message of a protocol supported by the seed asset, the seed asset being related to at least one of the plurality of related assets;

an analyzing component configured to contextually analyze the query response to determine references to a first asset, a role of the first asset, and a functional relationship between the seed asset and the first asset based on a protocol grammar of the protocol; and

wherein the role specifies general functions performed by the first asset; and

wherein the functional relationship specifies at least one specific function performed by the seed asset for the first asset or performed by the first asset for the seed asset;

the discovery component further configured to determine a query to send the first asset based on the role and the functional relationship;

wherein the above components are configured to recursively interrogate discovered assets to determine references to additional assets and their roles and functional relationships.

20. The apparatus of claim 19, wherein the discovery and

analyzing components are further configured to recursively interrogate discovered assets to determine references to additional assets and their roles and functional

relationships using a second protocol different from the protocol supported by the seed asset.

21. The apparatus of claim 19, wherein the functional relationship between the seed asset and the first asset is associated with a protocol independent from the protocol supported by the seed asset.

22. The apparatus of claim 19, wherein the asset comprises one of the following:

a service, an interface, a domain, an application, a server, a host, and a subnet.

23. The apparatus of claim 19, further comprising:

a protocol engine configured to normalize the query response into a structured document based on the protocol grammar of the protocol.

24. The apparatus of claim 19, wherein data in the query response is stored and indexed for subsequent searches.

25. The apparatus of claim 20, wherein the discovery and analyzing components are further configured to recursively interrogate discovered assets to determine-references to additional assets and their roles and functional relationships using a third protocol different from the protocol supported by the seed asset and different from the second protocol.

26. The apparatus of claim 19, wherein the discovery and analyzing components are further configured to construct a network functional topology map based on the determined roles and functional relationships of the assets.