Monitoring system, method of sampling datagrams, and apparatus therefor

• US 20060159028A1
• Filed: 11/14/2005
• Published: 07/20/2006
• Est. Priority Date: 01/20/2005
• Status: Abandoned Application

• Current Assignee: Agilent Technologies, Inc.
• Original Assignee: Agilent Technologies, Inc.
• Inventors: Lehane, Andrew Robert, Curran-Gray, Martin
• Application Number:
  US11/273,128
• Publication Number:
  US 20060159028A1
• Time in Patent Office: Days
• US Class Current: 370/252
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 43/067 using time frame reporting
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps

Abstract

A monitoring system comprises a first network probe coupled to a first point in a communications link and a second network probe coupled to a second point in the communications link. Each of the first and second network probes is arranged to sample packets from a predetermined flow of packets and store timestamps associated with packet samples. The timestamps stored by the probes are subsequently correlated.

Claims

1. A method of sampling datagrams, the method comprising the steps of:

sampling a plurality of datagrams from a predetermined flow of datagrams associated with a first point in a communications link, the plurality of datagrams being sampled with reference to a first respective plurality of sampling intervals;

generating respective first time record data corresponding to a predetermined number of the plurality of datagrams;

sampling the plurality of datagrams from the predetermined flow of datagrams associated with a second point in the communications link, the plurality of datagrams being sampled with reference to a second respective plurality of sampling intervals;

generating respective second time record data corresponding to of the predetermined number of the plurality of datagrams; and

correlating the first and second time record data;

wherein

the first respective plurality of sampling intervals is consistent with the second respective plurality of sampling intervals.

2. A method as claimed in claim 1, further comprising the steps of:

obtaining a copy of datagrams passing the first point and extracting datagrams relating to the predetermined flow of datagrams therefrom; and

obtaining a copy of the datagrams passing the second point and extracting datagrams relating to the predetermined flow of datagrams therefrom.

3. A method as claimed in claim 1, wherein the first time record data comprises a first time record entry and the second time record data comprises a second time record entry, the first time record entry respectively corresponding to the second time record entry, the first and second time record entries relating to a same sampled datagram from the predetermined flow of datagrams.

4. A method as claimed in claim 1, wherein the step of correlating the first and second time record data comprises the steps of:

receiving the first time record data in respect of the first point, the first time record data comprising a first plurality of time record entries associated with the sampled plurality of datagrams; and

receiving the second time record data in respect of the second point, the second time record data comprising a second plurality of time record entries associated with the sampled plurality of datagrams.

5. A method as claimed in claim 1, wherein the step of sampling the plurality of datagrams from the predetermined flow of datagrams associated with the first point in the communications link comprises the steps of:

providing a plurality of individually testable threshold values, the plurality of threshold values delineating the first respective plurality of sampling intervals; and

comparing a first sequence number of a datagram from the predetermined flow of datagrams with each of a first number of the plurality of threshold values so as to identify a first threshold value from the first plurality of threshold values equal to or less than the first sequence number of the datagram and numerically closest to the first sequence number.

6. A method as claimed in claim 5, wherein the step of generating the respective first time record data comprises the step of:

recording a first time record in respect of the datagram from the predetermined flow of datagrams in response to the first threshold value identified;

wherein

the first time record is recorded in the first time record data, a position of the first time record within the first time record data relative to other time record entries corresponding uniquely to the first threshold value identified from the first number of the plurality of threshold values.

7. A method as claimed in claim 1, wherein the step of sampling the plurality of datagrams from the predetermined flow of datagrams associated with the second point in the communications link comprises the steps of:

providing a plurality of individually testable threshold values, the plurality of threshold values delineating the second respective plurality of sampling intervals; and

comparing a second sequence number of a datagram from the predetermined flow of datagrams with each of a second number of the plurality of threshold values so as to identify a second threshold value from the second plurality of threshold values equal to or less than the second sequence number of the received datagram and numerically closest to the second sequence number.

8. A method as claimed in claim 5, wherein the step of generating the respective second time record data comprises the step of:

recording a second time record in respect of the datagram from the predetermined flow of datagrams in response to the second threshold value identified;

wherein

the second time record is recorded in the second time record data, a position of the second time record within the second time record data relative to other time record entries corresponding uniquely to the second threshold value identified from the second number of the plurality of threshold values.

9. A method as claimed in claim 1, wherein the predetermined flow of datagrams comprises an out-of-sequence datagram, the method further comprising the step of:

identifying the out-of-sequence datagram as being out of sequence; and

identifying one of the first number of the plurality of threshold values less than or equal to a sequence number of the out-of-sequence datagram and numerically closest to the sequence number of the out-of-sequence datagram.

10. A method as claimed in claim 9, further comprising the step of:

substituting a time record entry for a datagram sampled in the absence of the out-of-sequence datagram with a time record associated with the out-of-sequence datagram.

11. A method as claimed in claim 1, wherein the predetermined flow of datagrams comprises an out-of-sequence datagram, the method further comprising the step of:

identifying the out-of-sequence datagram as being out of sequence; and

identifying one of the second number of the plurality of threshold values less than or equal to a sequence number of the out-of-sequence datagram and numerically closest to the sequence number of the out-of-sequence datagram.

12. A method as claimed in claim 11, further comprising the step of:

substituting a time record entry for a datagram sampled in the absence of the out-of-sequence datagram with a time record associated with the out-of-sequence datagram.

13. A method as claimed in claim 9, further comprising the step of:

temporarily storing sequence numbers of datagrams corresponding to time records stored in the first time record data and/or second time record data; and

using the temporarily stored sequence numbers to identify in the first time record data and/or the second time record data the time record entry for the datagram sampled in the absence of the out-of-sequence datagram.

14. A computer program element comprising computer program code means to make a computer execute the method as claimed in claim 1.

15. A method of calculating datagram jitter comprising the method of sampling datagrams as claimed in claim 1.

16. A method of calculating datagram delay comprising the method of sampling datagrams as claimed in claim 1.

17. A datagram sampling apparatus comprising:

a sampler for sampling a plurality of datagrams from a predetermined flow of datagrams associated with a point in a communications link, the plurality of datagrams being sampled with reference to a respective plurality of sampling intervals; and

a time record generator for generating respective time record data corresponding to a predetermined number of the plurality of datagrams;

wherein

the respective plurality of sampling intervals is in accordance with a shared predetermined sampling interval regime so that the time record data comprises a plurality of time record entries corresponding respectively to the respective plurality of sampling intervals.

18. A time record correlator apparatus for a communications network, the apparatus comprising:

a processing resource arranged to receive first time record data and second time record data, and correlate the first and second time record data;

wherein

the first time record data comprises a first plurality of time record entries and the second time record data comprises a second plurality of time record entries, a position of a data record entry in the first time record data having a corresponding known counterpart position in the second time record data.

19. A datagram sampling system comprising:

a first sampler for sampling a plurality of datagrams from a predetermined flow of datagrams associated with a first point in a communications link, the plurality of datagrams being sampled with reference to a first respective plurality of sampling intervals;

a first time record generator for generating respective first time record data corresponding to a predetermined number of the plurality of datagrams;

a second sampler for sampling the plurality of datagrams from the predetermined flow of datagrams associated with a second point in the communications link, the plurality of datagrams being sampled with reference to a second respective plurality of sampling intervals;

a second time record generator for generating respective second time record data corresponding to of the predetermined number of the plurality of datagrams; and

a correlator the first and second time record data;

wherein

the first respective plurality of sampling intervals is consistent with the second respective plurality of sampling intervals.