Alarm reordering to handle alarm storms in large networks

• US 8,115,617 B2
• Filed: 02/14/2011
• Issued: 02/14/2012
• Est. Priority Date: 11/17/2008
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Thubert, Pascal, Vasseur, Jean-Philippe, Wetterwald, Patrick, Ribiere, Vincent Jean
• Primary Examiner(s): Nguyen, Tai T
• Application Number:
  US13/027,106
• Publication Number:
  US 20110133924A1
• Time in Patent Office: 365 Days
• Field of Search: 340/506, 340/286.02, 340/517, 340/521, 340/522, 340/527, 340/540, 340/541, 370/238, 370/392, 370/395.52, 370/400, 370/401
• US Class Current: 340/506
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/34 Signalling channels for network management communication
• CPC Class Codes: H04L 43/0858 One way delays
• CPC Class Codes: H04L 45/48 Routing tree calculation
• CPC Class Codes: H04W 4/90 Services for handling of emergency or hazardous situations, e.g. earthquake and tsunami warning systems [ETWS]
• CPC Class Codes: H04W 76/50 for emergency connections

Abstract

In one embodiment, a sensor device in a network detects an alarm condition. The sensor device generates an alarm message based on the detected alarm condition and waits for a delay whose length is inversely proportional to a distance between the sensor device and a downstream destination device for which the alarm message is destined. During the delay, the sensor device receives one or more additional alarm messages from one or more upstream sensor devices. The sensor device coalesces the one or more received alarm messages from the one or more upstream sensor devices with the alarm message generated at the sensor device, to form a coalesced alarm message, and transmits the coalesced alarm message downstream towards the downstream destination device, after expiration of the delay.

Claims

1. A method, comprising:

detecting an alarm condition at a sensor device in a network;

generating an alarm message at the sensor device based on the detected alarm condition;

waiting for a delay whose length is inversely proportional to a distance between the sensor device and a downstream destination device for which the alarm message is destined;

receiving, during the delay, one or more additional alarm messages at the sensor device from one or more upstream sensor devices;

coalescing the one or more received alarm messages from the one or more upstream sensor devices with the alarm message generated at the sensor device, to form a coalesced alarm message; and

transmitting the coalesced alarm message downstream towards the downstream destination device, after expiration of the delay.

2. The method of claim 1, wherein the coalescing further comprises:

including a node identifier (ID) of each of the one or more upstream sensor devices, and a node ID of the sensor device in the coalesced alarm message.

3. The method of claim 1, wherein the coalescing further comprises:

concatenating message data from the one or more received alarm messages and from the alarm message together into the coalesced alarm message.

4. The method of claim 1, wherein the coalescing further comprises:

determining the alarm condition detected at the sensor device is identical to an alarm condition indicated in the one or more received alarm messages, and suppressing duplicative indication of the alarm condition.

5. The method of claim 1, wherein the one or more received alarm messages include one or more received coalesced alarm messages and the coalescing further comprises:

further coalescing the one or more received coalesced alarm messages with the alarm message generated at the sensor device, to form the coalesced alarm message.

6. The method of claim 1, wherein the downstream destination device is an administration node.

7. The method of claim 1, further comprising:

determining a routing tree that is rooted at a node coupled to the downstream destination device, and

wherein the transmitting includes transmitting the coalesced alarm message downstream towards the downstream destination device along the routing tree.

8. The method of claim 7, wherein the determining comprises receiving an indication of the routing tree from a centralized location in the network.

9. The method of claim 1, further comprising:

adding a jitter to the delay.

10. An apparatus, comprising:

a network interface;

a processor coupled to the network interface and configured to execute one or more processes; and

a memory coupled to the processor and configured to store a stormed response process that is executable on the processor, the stormed response process including instructions that when executed are operable to

detect a trigger,

wait for a delay whose length is inversely proportional to a distance between the apparatus and a downstream destination device for which alarm messages are destined,

receive, during the delay, a plurality of alarm messages from one or more upstream sensor devices that have detected an alarm condition,

coalesce the plurality of alarm messages from the plurality of upstream sensor devices, to form a coalesced alarm message, and

transmit the coalesced alarm message downstream towards the downstream destination device, after expiration of the delay.

11. The apparatus of claim 10, wherein the trigger is detection of an alarm condition at the apparatus.

12. The apparatus of claim 11, wherein the stormed response process further includes instructions that when executed are operable to generate an alarm message at the apparatus based on the alarm condition detected at the apparatus.

13. The apparatus of claim 12, wherein the instructions that when executed are operable to coalesce are operable to coalesce the plurality of alarm messages from the plurality of upstream sensor devices with the alarm message generated at the apparatus to form the coalesced alarm message.

14. The apparatus of claim 10, wherein the instructions that when executed are operable to coalesce are operable to include a node identifier (ID) of each of the plurality of upstream sensor devices in the coalesced alarm message.

15. The apparatus of claim 10, wherein the instructions that when executed are operable to coalesce are operable to concatenate message data from the plurality of received alarm messages together into the coalesced alarm message.

16. The apparatus of claim 10, wherein the instructions that when executed are operable to coalesce are operable to determine an alarm condition indicated in a first of the received alarm messages is identical to an alarm condition indicated in a second of the received alarm messages, and suppress duplicative indication of the alarm condition.

17. The apparatus of claim 10, wherein at least one of the plurality of received alarm messages is a received coalesced alarm message.

18. The apparatus of claim 10, wherein the downstream destination device is an administration node.

19. The apparatus of claim 10, wherein the instructions that when executed are opera able to coalesce are operable to add a jitter to the delay.

20. An apparatus, comprising:

means for detecting an alarm condition at the apparatus;

means for generating an alarm message at the apparatus based on the detected alarm condition;

means for waiting for a delay that is inversely proportional to a distance between the apparatus and a downstream destination device for which the alarm message is destined;

means for receiving, during the delay, one or more additional alarm messages at the apparatus from one or more upstream sensor devices;

means for coalescing the one or more received alarm messages from the one or more upstream sensor devices with the alarm message generated at the apparatus, to form a coalesced alarm message; and

means for transmitting the coalesced alarm message downstream towards the downstream destination device, after expiration of the delay.