Trap filtering within a device management protocol

• US 9,413,615 B1
• Filed: 03/02/2012
• Issued: 08/09/2016
• Est. Priority Date: 03/02/2012
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Singh, Vivek, Kumar, Subodh
• Primary Examiner(s): Bates, Kevin
• Assistant Examiner(s): McCray, Clarence
• Application Number:
  US13/411,248
• Time in Patent Office: 1,621 Days
• Field of Search: 709/220, 709/223
• US Class Current: 1/1
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

An example device includes a processor that provides an execution environment for a management agent, and a data repository configured to store configuration information. The management agent is operable to retrieve configuration information that specifies one or more trap conditions and one or more filter criteria from the data repository, detect that at least one of the one or more trap conditions is met, generate a message that includes a set of variable identifiers and associated variable values based on the one or more met trap conditions, determine whether at least one of the variable identifiers and associated value pairs included in the generated messages meet at least one of the filter criteria by at least comparing a variable value of a respective filter criteria to the variable value of the generated message, and selectively send the generated message to a device management system based on the comparison.

Claims

1. A method comprising:

receiving a set of configuration information, with a simple network management protocol agent executing on a network device, wherein the set of configuration information specifies one or more trap conditions and one or more filter criteria, and wherein each of the one or more filter criteria specifies a variable identifier, a variable value associated with the variable identifier, and an operator, wherein the operator corresponds to one of a mathematical operator, a logical operator, and a regular expression operator;

detecting, with the simple network management protocol agent, that at least one of the one or more trap conditions is met;

responsive to detecting the at least one of the one or more trap conditions, generating, with the simple network management protocol agent, a message based on the at least one trap condition that is met, wherein the message includes a set of variable identifiers and associated variable values from a management information base (MIB) storing configuration information for the network device;

determining, with the simple network management protocol agent, whether at least one of the variable identifiers and associated value pairs included in the message meet at least one of the one or more filter criteria by at least comparing the variable value associated with the variable identifier of a respective filter criteria to the variable value associated with the variable identifier of the message that corresponds to the variable identifier of the respective filter criteria in a manner consistent with the operator; and

selectively sending, by the network device, the message to a device management system based on the determination.

2. The method of claim 1, wherein selectively sending the generated message to the device management system based on the determination comprises:

when none of the one or more filter criteria applied to the generated message are met, sending the generated message to the device management system; and

when at least one of the one or more filter criteria applied to the generated message is met, discarding the generated message.

3. The method of claim 1, wherein selectively sending the generated message to the device management system based on the determination comprises:

when none of the one or more filter criteria applied to the generated message are met, discarding the generated message; and

when at least one of the one or more filter criteria applied to the generated message is met, sending the generated message to the device management system.

4. The method of claim 1,

wherein the set of configuration information further specifies a particular device management system to which the simple network management protocol agent is to send the message, and

wherein selectively sending the message comprises selectively sending the message to the particular device management system based at least on the configuration information.

5. The method of claim 1, wherein each of the one or more trap conditions is associated with one or more variable identifiers of the set of variable identifier and associated variable values.

6. The method of claim 1, wherein each of the one or more filter criteria further specifies a trap condition.

7. The method of claim 6, further comprising:

identifying a portion of the one or more filter criteria to use when determining whether one variable identifier and value pair of the set of variable identifier and value pairs included in the generated messages meet at least one of the one or more filter criteria by at least comparing the trap condition specified in each of the one or more filter criteria to each of the at least one of the one or more trap conditions determined to be met.

8. The method of claim 6, wherein the variable value associated with the variable identifier specified by at least one of the one or more filter criteria has a value type of a string or an integer.

9. The method of claim 1, wherein the one or more filter criteria includes at least three filter criteria, wherein a first filter criteria of the at least three filter criteria specifies one of the one or more trap conditions, a first variable identifier, a first value, and a first operator, wherein a second filter criteria of the at least three filter criteria specifies the one of the one or more trap conditions, a second variable identifier, a second value, and a second operator, and wherein a third filter criteria of the at least three filter criteria specifies the one of the one or more trap conditions and a third operator.

10. The method of claim 9, wherein determining, with the simple network management protocol agent, whether one variable identifier and value pair of the set of variable identifier and value pairs included in the generated messages meet at least one of the one or more filter criteria further comprises:

filtering the set of variable identifiers and associated values based at least in part on the first variable identifier, the first value, and the first operator specified by the first filter criteria to generate a first set of filtered variable identifiers and associated values;

filtering the set of variable identifiers and associated values based at least in part on the second variable identifier, the second value, and the second operator specified by the second filter criteria to generate a second set of filtered variable identifiers and associated values; and

combining the first set of filtered variable identifiers and associated values with the second set of filtered variable identifiers and associated values based on the third operator specified by the third filter criteria.

11. The method of claim 1,

wherein each respective filter criterion of the one or more filter criteria specifies a respective variable identifier, a respective value, and a respective operator, and

wherein the method further comprises, for each respective filter criterion of the one or more filter criteria, filtering the set of variable identifiers and associated value based at least in part on the respective variable identifier, the respective value, and the respective operator specified by the respective filter criterion.

12. The method of claim 1,

wherein the message comprises an SNMP trap protocol data unit (PDU) output from the network device to the device management system.

13. A network device comprising:

a processor that provides an execution environment for a simple network management protocol agent; and

a data repository configured to store configuration information,

wherein the simple network management protocol agent is operable to;

retrieve a set of configuration information from the data repository, wherein the configuration information specifies one or more trap conditions and one or more filter criteria, and wherein each of the one or more filter criteria specifies a variable identifier, a variable value associated with the variable identifier, and an operator, wherein the operator corresponds to one of a mathematical operator, a logical operator, and a regular expression operator;

detect that at least one of the one or more trap conditions is met;

responsive to detecting the at least one of the one or more trap conditions, generate an asynchronous message based on the at least one trap condition that is met, wherein the asynchronous message includes a set of variable identifiers and associated variable values from the data repository;

determine whether at least one of the variable identifiers and associated value pairs included in the asynchronous message meet at least one of the one or more filter criteria by at least comparing the variable value associated with the variable identifier of a respective filter criteria to the variable value associated with the variable identifier of the asynchronous message that corresponds to the variable identifier of the respective filter criteria in a manner consistent with the operator; and

selectively send the asynchronous message to a device management system based on the determination.

14. The device of claim 13,

wherein the set of configuration information further specifies a particular device management system to which the simple network management protocol agent is to send the asynchronous message, and

wherein the simple network management protocol agent is operable to selectively send the asynchronous message to the particular device management system based at least on the configuration information.

15. The device of claim 13, wherein each of the one or more filter criteria further specifies a trap condition.

16. The device of claim 15, wherein the simple network management protocol agent is further operable to identify a portion of the one or more filter criteria to use when determining whether one variable identifier and value pair of the set of variable identifier and value pairs included in the asynchronous message meet at least one of the one or more filter criteria by at least comparing the trap condition specified in each of the one or more filter criteria to each of the at least one of the one or more trap conditions determined to be met.

17. The device of claim 13, wherein the one or more filter criteria includes at least three filter criteria, wherein a first filter criteria of the at least three filter criteria specifies one of the one or more trap conditions, a first variable identifier, a first value, and a first operator, wherein a second filter criteria of the at least three filter criteria specifies the one of the one or more trap conditions, a second variable identifier, a second value, and a second operator, and wherein a third filter criteria of the at least three filter criteria specifies the one of the one or more trap conditions and a third operator.

18. The device of claim 17, wherein the simple network management protocol agent is operable to determine whether one variable identifier and value pair of the set of variable identifier and value pairs included in the asynchronous message meet at least one of the one or more filter criteria by at least being operable to filter the set of variable identifiers and associated values based at least in part on the first variable identifier, the first value, and the first operator specified by the first filter criteria to generate a first set of filtered variable identifiers and associated values, filter the set of variable identifiers and associated values based at least in part on the second variable identifier, the second value, and the second operator specified by the second filter criteria to generate a second set of filtered variable identifiers and associated values, and combine the first set of filtered variable identifiers and associated values with the second set of filtered variable identifiers and associated values based on the third operator specified by the third filter criteria.

19. The device of claim 13,

wherein each respective filter criterion of the one or more filter criteria specifies a respective variable identifier, a respective value, and a respective operator, and

wherein the simple network management protocol agent is operable to, for each respective filter criterion of the one or more filter criteria, filter the set of variable identifiers and associated value based at least in part on the respective variable identifier, the respective value, and the respective operator specified by the respective filter criterion.

20. A computer-readable storage medium encoded with instructions that cause one or more programmable processors of a network device to:

receive, with a simple network management protocol agent, a set of configuration information that specifies one or more trap conditions and one or more filter criteria, wherein the set of configuration information specifies one or more trap conditions and one or more filter criteria, and wherein each of the one or more filter criteria specifies a variable identifier, a variable value associated with the variable identifier, and an operator, wherein the operator corresponds to one of a mathematical operator, a logical operator, and a regular expression operator;

detect, with the simple network management protocol agent, that at least one of the one or more trap conditions is met;

responsive to detecting the at least one of the one or more trap conditions, generate, with the simple network management protocol agent, a message based on the at least one trap condition that is met, wherein the message includes a set of variable identifiers and associated variable values from a management information base (MIB) storing configuration information for the network device;

determine, with the simple network management protocol agent, whether at least one of the variable identifiers and associated value pairs included in the message meet at least one of the one or more filter criteria by at least comparing the variable value associated with the variable identifier of a respective filter criteria to the variable value associated with the variable identifier of the message that corresponds to the variable identifier of the respective filter criteria in a manner consistent with the operator; and

selectively send, with the simple network management protocol agent, the message from the network device to a device management system based on the determination.