Configurable probe blocks for system monitoring

• US 9,964,590 B2
• Filed: 02/27/2015
• Issued: 05/08/2018
• Est. Priority Date: 02/27/2015
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Tofighbakhsh, Mostafa, Anschutz, Thomas A.
• Primary Examiner(s): Diallo, Mamadou
• Application Number:
  US14/633,724
• Publication Number:
  US 20160252576A1
• Time in Patent Office: 1,166 Days
• CPC Class Codes: G01R 31/31712 Input or output aspects
• CPC Class Codes: G06F 11/3003 Monitoring arrangements specially adapted to the computing system or computing system component being monitored
• CPC Class Codes: G06F 11/3093 Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 43/12 Network monitoring probes

Abstract

Configurable probe blocks for system monitoring are disclosed. Example methods disclosed herein to monitor a system include configuring a probe block based on a first value of a control word specifying that a first probe input from a set of available probe inputs associated with the probe block is to be enabled and that a first trigger condition from a set of available trigger conditions associated with the probe block is to be assigned to the first probe input. Some such disclosed example methods also include processing, in accordance with the configuring of the probe block based on the first value of the control word, monitored data accessible via the probe block to determine probe data to output from the probe block.

Claims

1. A method to monitor a network, the method comprising:

configuring, by executing an instruction with a processor, a probe block embedded in a network component based on a first value of a control word, the first value of the control word specifying that a first probe input from a set of available probe inputs associated with the probe block is to be enabled and that a first trigger condition from a set of available trigger conditions associated with the probe block is to be assigned to the first probe input;

mapping, with digital logic, the first probe input to a source of monitored network traffic; and

processing, with the probe block based on the first trigger condition specified by the first value of the control word, the monitored network traffic accessible via the first probe input of the probe block to determine network visibility data to output from the probe block to a network application.

2. The method of claim 1, wherein the processing of the monitored network traffic includes performing a first action specified by the first value of the control word from a set of available actions associated with the probe block when the first trigger condition assigned to the first probe input is satisfied.

3. The method of claim 2, wherein the first value of the control word further specifies that a first timer from a set of available timers associated with the probe block is to be assigned to the first action.

4. The method of claim 2, wherein the first value of the control word further specifies that a second probe input from the set of available probe inputs associated with the probe block is to be enabled, and that a second trigger condition from the set of available trigger conditions associated with the probe block is to be assigned to the second probe input, and the processing of the monitored network traffic includes:

performing a second action specified by the first value of the control word from the set of available actions associated with the probe block when the second trigger condition assigned to the second probe input is satisfied; and

applying a first ordering specified by the first value of the control word from a set of possible orderings associated with the probe block to the first action and the second action.

5. The method of claim 1, wherein the first value of the control word further specifies that a second probe input from the set of available probe inputs associated with the probe block is to be enabled, and that a second trigger condition from the set of available trigger conditions associated with the probe block is to be assigned to the second probe input, and the processing of the monitored network traffic includes performing a first correlation operation on a first result determined by processing the first probe input based on the first trigger condition and a second result determined by processing the second probe input based on the second trigger condition, the first correlation operation being specified by the first value of the control word.

6. The method of claim 1, wherein the first value of the control word further specifies that a first probe output from a set of available probe outputs associated with the probe block is to output the probe data from the probe block.

7. The method of claim 1, wherein the network component is included in a data plane of a software defined network, the network application is included in an application plane of the software defined network, and the first value of the control word is determined by a network operating system included in a control plane of the software defined network.

8. A tangible machine readable storage medium comprising machine readable instructions which, when executed, cause a machine to perform operations comprising:

configuring a probe block, which is embedded in a network component, based on a first value of a control word, the first value of the control word specifying that a first probe input from a set of available probe inputs associated with the probe block is to be enabled and that a first trigger condition from a set of available trigger conditions associated with the probe block is to be assigned to the first probe input;

mapping the first probe input to a source of monitored network traffic; and

processing, with the probe block based on the first trigger condition specified by the first value of the control word, the monitored network traffic accessible via the first probe input of the probe block to determine network visibility data to output from the probe block to a network application.

9. The tangible machine readable storage medium of claim 8, wherein the processing of the monitored network traffic includes performing a first action specified by the first value of the control word from a set of available actions associated with the probe block when the first trigger condition assigned to the first probe input is satisfied.

10. The tangible machine readable storage medium of claim 9, wherein the first value of the control word further specifies that a first timer from a set of available timers associated with the probe block is to be assigned to the first action.

11. The tangible machine readable storage medium of claim 9, wherein the first value of the control word further specifies that a second probe input from the set of available probe inputs associated with the probe block is to be enabled, and that a second trigger condition from the set of available trigger conditions associated with the probe block is to be assigned to the second probe input, and the processing of the monitored network traffic includes:

performing a second action specified by the first value of the control word from the set of available actions associated with the probe block when the second trigger condition assigned to the second probe input is satisfied; and

applying a first ordering specified by the first value of the control word from a set of possible orderings associated with the probe block to the first action and the second action.

12. The tangible machine readable storage medium of claim 9, wherein the first value of the control word further specifies that a second probe input from the set of available probe inputs associated with the probe block is to be enabled, and that a second trigger condition from the set of available trigger conditions associated with the probe block is to be assigned to the second probe input, and the processing of the monitored network traffic includes performing a first correlation operation on a first result determined by processing the first probe input based on the first trigger condition and a second result determined by processing the second probe input based on the second trigger condition, the first correlation operation being specified by the first value of the control word.

13. The tangible machine readable storage medium of claim 8, wherein the first value of the control word further specifies that a first probe output from a set of available probe outputs associated with the probe block is to output the probe data from the probe block.

14. The tangible machine readable storage medium of claim 8, wherein the network component is included in a data plane of a software defined network, the network application is included in an application plane of the software defined network, and the first value of the control word is determined by a network operating system included in a control plane of the software defined network.

15. An apparatus to monitor a network, the apparatus comprising:

memory including machine readable instructions; and

a processor to execute the machine readable instructions to perform operations including;

configuring a probe block embedded in a network component based on a first value of a control word, the first value of the control word specifying that a first probe input from a set of available probe inputs associated with the probe block is to be enabled, that a first trigger condition from a set of available trigger conditions associated with the probe block is to be assigned to the first probe input, and that a first probe output from a set of available probe outputs associated with the probe block is to output network visibility data from the probe block;

mapping the first probe input to a source of monitored network traffic; and

processing, the monitored network traffic accessible via the first probe input of the probe block with the probe block based on the first trigger condition specified by the first value of the control word, the processing to determine the network visibility data to output from the first probe output of the probe block to a network application.

16. The apparatus of claim 15, wherein the processing of the monitored network traffic includes performing a first action specified by the first value of the control word from a set of available actions associated with the probe block when the first trigger condition assigned to the first probe input is satisfied.

17. The apparatus of claim 16, wherein the first value of the control word further specifies that a first timer from a set of available timers associated with the probe block is to be assigned to the first action.

18. The apparatus of claim 16, wherein the first value of the control word further specifies that a second probe input from the set of available probe inputs associated with the probe block is to be enabled, and that a second trigger condition from the set of available trigger conditions associated with the probe block is to be assigned to the second probe input, and the processing of the monitored network traffic includes:

performing a second action specified by the first value of the control word from the set of available actions associated with the probe block when the second trigger condition assigned to the second probe input is satisfied; and

applying a first ordering specified by the first value of the control word from a set of possible orderings associated with the probe block to the first action and the second action.

19. The apparatus of claim 15, wherein the first value of the control word further specifies that a second probe input from the set of available probe inputs associated with the probe block is to be enabled, and that a second trigger condition from the set of available trigger conditions associated with the probe block is to be assigned to the second probe input, and the processing of the monitored network traffic includes performing a first correlation operation on a first result determined by processing the first probe input based on the first trigger condition and a second result determined by processing the second probe input based on the second trigger condition, the first correlation operation being specified by the first value of the control word.

20. The apparatus of claim 15, wherein the network component is included in a data plane of a software defined network, the network application is included in an application plane of the software defined network, and the first value of the control word is determined by a network operating system included in a control plane of the software defined network.