Monitoring wireless access point events

• US 9,832,082 B2
• Filed: 06/30/2015
• Issued: 11/28/2017
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Mist Systems, Inc. (Juniper Networks Incorporated)
• Inventors: Dade, Nicolas S., Ernohazy, Oscar S., Frei, Randall W., Friday, Robert J.
• Primary Examiner(s): Hsu, Alpus H
• Assistant Examiner(s): PATEL, DHARMESH J
• Application Number:
  US14/788,489
• Publication Number:
  US 20170005886A1
• Time in Patent Office: 882 Days
• CPC Class Codes: H04L 41/0604 using filtering, e.g. reduction of information by using priority, element types, position or time
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 43/065 related to network devices
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04W 16/18 Network planning tools
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition
• CPC Class Codes: H04W 64/003 locating network equipment
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

A wireless access point system includes a processor configured to tap event data and process the event data using a plurality of event filters. Each event filter of the plurality of event filters applies event criteria to detect one or more types of events. The wireless access point system includes a memory configured to store the tapped event data. The wireless access point system includes a communication interface configured to report a report of a detected event type. At least a portion of the report is correlated to analyze a performance of a wireless network.

Claims

1. A wireless access point system, comprising:

a processor configured to tap event data and process the event data using a plurality of event filters, wherein each event filter of the plurality of event filters applies event criteria to detect one or more types of events, and tapping the event data includes intercepting the event data in the process of being routed, via the wireless access point system, between at least two different communication parties separate from the wireless access point system, and the event data is tapped within the wireless access point system using an analytic tap that observes network statistics and a performance tap that analyzes content included in the event data;

a memory configured to store the tapped event data; and

a communication interface configured to provide a report of a detected event type, wherein at least a portion of the report is correlated to analyze a performance of a wireless network.

2. The system of claim 1, wherein the event data includes analytic data quantifying network performance and the performance of the wireless network includes a wireless network performance of a client of the wireless access point system.

3. The system of claim 1, wherein at least the portion of the report is correlated with location information of a client of the wireless access point system to analyze the performance of the wireless network.

4. The system of claim 1, wherein at least a portion of the report is correlated with at least a portion of another report of a different detected event type.

5. The system of claim 1, wherein at least a portion of the report is correlated with at least external data detected external to a network of the wireless access point system.

6. The system of claim 1, wherein at least a portion of the report indicating an error is correlated with at least a portion of another error report of the detected event type detected by another wireless access point system.

7. The system of claim 1, wherein at least a portion of the report is correlated over time with another previous report of the wireless access point system.

8. The system of claim 1, wherein tapping the event data includes obtaining a copy of the event data from a wireless radio driver of the wireless access point system.

9. The system of claim 1, wherein tapping the event data includes obtaining a copy of the event data from an Ethernet driver of the wireless access point system.

10. The system of claim 1, wherein the event data includes control network packets.

11. The system of claim 1, wherein the event data includes network data packets.

12. The system of claim 1, wherein the communication interface is further configured to send a status update for the detected event type.

13. The system of claim 1, wherein the memory includes a ring buffer storing the tapped event data.

14. The system of claim 1, wherein the processor is further configured to perform an action in response to detecting the detected event type.

15. The system of claim 1, wherein the report is sent to a remote analysis server.

16. The system of claim 1, wherein a result of the correlation is reported to a user.

17. The system of claim 1, wherein the detected event type is associated with a DHCP service.

18. The system of claim 1, wherein the report includes a copy of one or more network packets identified and indicating the detected event type.

19. The system of claim 1, wherein the detected event type indicates an iOS client that does not roam to another wireless access point system due to an implementation of an iOS operating system.

20. The system of claim 1, wherein the communication interface is further configured to receive a result of the correlation and the processor is further configured to implement an instruction of the result.

21. The system of claim 20, wherein implementing the instruction includes terminating a wireless connection to force a client of the wireless connection to roam to another wireless access point system.

22. The system of claim 20, wherein the implementing the instruction includes spoofing a request to release an IP address lease as if it was originated by a client and sending the request to a DHCP server.

23. A method, comprising:

tapping event data, wherein tapping the event data includes intercepting the event data in the process of being routed, via the wireless access point system, between at least two different communication parties separate from the wireless access point system, and the event data is tapped within the wireless access point system using an analytic tap that observes network statistics and a performance tap that analyzes content included in the event data;

storing the event data;

using a processor to process the event data using a plurality of event filters, wherein each event filter of the plurality of event filters applies event criteria to detect one or more types of events; and

providing a report of a detected event type, wherein at least a portion of the report is correlated to analyze a performance of a wireless network.

24. The method of claim 23, wherein the event data includes analytic data quantifying network performance and the performance of the wireless network includes a wireless network performance of a client of the wireless access point system.

25. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

tapping event data, wherein tapping the event data includes intercepting the event data in the process of being routed, via the wireless access point system, between at least two different communication parties separate from the wireless access point system, and the event data is tapped within the wireless access point system using an analytic tap that observes network statistics and a performance tap that analyzes content included in the event data;

storing the event data;

processing the event data using a plurality of event filters, wherein each event filter of the plurality of event filters applies event criteria to detect one or more types of events; and

providing a report of a detected event type, wherein at least a portion of the report is correlated to analyze a performance of a wireless network.