Method and apparatus for maintaining the status of objects in computer networks using virtual state machines

• US 8,499,204 B2
• Filed: 06/28/2011
• Issued: 07/30/2013
• Est. Priority Date: 03/28/2001
• Status: Expired due to Term

• Current Assignee: Optanix, Inc. (Axispoint Technology Solutions Group, Inc.)
• Original Assignee: ShoreGroup, Inc.
• Inventors: Lovy, David M., Fagan, Brant M., Bojanek, Robert J.
• Primary Examiner(s): LOHN, JOSHUA A
• Application Number:
  US13/170,874
• Publication Number:
  US 20110264967A1
• Time in Patent Office: 763 Days
• Field of Search: 714/43, 714/47.1, 714/57, 709/224
• US Class Current: 714/57
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/0686 Additional information in the notification, e.g. enhancement of specific meta-data
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/40 using virtualisation of network functions or resources, e.g. SDN or NFV entities
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04L 43/106 using time related information in packets, e.g. by adding timestamps

Abstract

A network appliance for monitoring, diagnosing and documenting problems among a plurality of devices and processes (objects) coupled to a computer network utilizes periodic polling and collection of object-generated trap data to monitor the status of objects on the computer network. The status of a multitude of objects is maintained in memory utilizing virtual state machines which contain a small amount of persistent data but which are modeled after one of a plurality of finite state machines. The memory further maintains dependency data related to each object which identifies parent/child relationships with other objects at the same or different layers of the OSI network protocol model. A decision engine verifies through on-demand polling that a device is down. A root cause analysis module utilizes status and dependency data to locate the highest object in the parent/child relationship tree that is affected to determine the root cause of a problem. Once a problem has been verified, a “case” is opened and notification alerts may be sent out to one or more devices. A user interface allows all objects within the network to be displayed with their respective status and their respective parent/child dependency objects in various formats.

Claims

1. In a computer system having a processor, memory and a network interface, an apparatus for monitoring a plurality of device or process objects operatively coupled to the computer system over a computer network, the apparatus comprising:

(a) means for monitoring the status of the plurality of monitored objects over the computer network;

(b) means, coupled to the means for monitoring, for receiving data indicating the status of one of the monitored objects, and, if the data indicates the status of the monitored object is not normal, for verifying that the status of the monitored object is not normal by;

(b1) sending a verification query to said one monitored object, and

(b2) receiving a response to the verification query from said one monitored object confirming or denying abnormal status thereof; and

(c) a memory for storing data relating to the status of the monitored object wherein the memory stores a plurality of virtual state-machines relating to the monitored objects; and

(d) means, coupled to the memory, for presenting data relating to the monitored objects.

2. A computer program product for use with an computer system operatively coupled over a computer network to a plurality of device or process objects, the computer program product comprising a non-transitory computer useable medium having embodied therein program code comprising:

(a) program code for monitoring the status of the plurality of monitored objects;

(b) program code for receiving data indicating the status of a monitored object, and, if the data indicating that the status of the monitored object is not normal, for verifying that the status of the monitored object is not normal by;

(b1) sending a verification query to said one monitored object, and

(b2) receiving a response to the verification query from said one monitored object confirming or denying abnormal status thereof; and

(c) program code for storing data relating to the status of the monitored objects in memory;

(d) program code for presenting data relating to the monitored object.

3. The computer program product of claim 2 further comprising:

(e) program code for alerting a device external to the apparatus that the status of the monitored object has been verified as not normal.

4. The computer program product of claim 2 further comprising:

(f) program code for providing a device external to the apparatus with access to the data relating to the status of the monitored objects in memory.

5. The computer program product of claim 4 wherein (f) comprises:

(f1) program code for alerting an external device operatively coupled to the apparatus over a packet switched network that the status of the monitored object has been verified as not normal.

6. The computer program product of claim 4 wherein (f) comprises:

(f1) program code for alerting an external device operatively coupled to the apparatus over a circuit switched network that the status of the monitored object has been verified as not normal.

7. The computer program product of claim 2 wherein (f) further comprises:

(f1) program code for maintaining in memory a list of all monitored objects.

8. The computer program product of claim 7 wherein selected of the plurality of monitored objects have parent/child dependency relations and wherein (f) further comprises:

(f2) program code for maintaining in memory data identifying the parent/child dependency relations among a plurality of monitored objects.

9. The computer program product of claim 8 wherein the data identifying the parent/child dependency relationship among a plurality of monitored objects defines one or more Boolean relationships.

10. The computer program product of claim 8 wherein (d) further comprises:

(d1) program code for identifying if any monitored object in the parent/child dependency relation has a status other than normal.

11. The computer program product of claim 10 wherein (d) further comprises:

(d2) program code for determining that the status of a monitored object is normal if the status of all parent monitored objects in a parent/child dependency chain is other than normal.

12. The method of claim 11 wherein (e) further comprises:

(e1) representing the dependency relationship of the requested monitored object to others of the monitored objects in the computer network with a logical expression.

13. A computer program product for use with a computer system operatively coupled over a computer network to a plurality of device or process objects, some of the plurality of objects existing over the computer network at different layers of an Open Systems Interconnection (OSI) network protocol model, the computer program product comprising a non-transitory computer useable medium having embodied therein program code comprising:

(a) poller program code for sending queries to the plurality of monitored objects and for receiving responses therefrom;

(b) trap receiver program code for receiving traps generated by the monitored objects;

(c) decision engine program code, responsive to decision requests from any of the trap receiver program code and poller program code, for sending a verification query to one of the plurality of monitored objects identified in the decision request and for receiving a response to the verification query confirming or denying abnormal status thereof;

(d) program code for storing in memory data relating to status of the monitored object; and

(e) program code for presenting a visual representation of a requested monitored object, a current state of the requested monitored object, and any dependency relationship of the requested monitored object to other of the monitored objects existing in the computer network at a same layer and at a different layer of the OSI network protocol model.

14. The computer program product of claim 13 wherein (e) further comprises:

(e1) program code for representing the dependency relationship of the requested monitored object to others of the monitored objects in the computer network with a Boolean expression.

15. In a computer system operatively coupled over a computer network to a plurality of device or process objects, a method comprising:

(a) sending queries to the plurality of monitored objects and receiving responses therefrom;

(b) receiving traps generated by the monitored objects;

(c) in response to a received decision request, sending a verification query to one of the plurality of monitored objects identified in the decision request and receiving a response to the verification query confirming or denying abnormal status thereof;

(d) storing in memory data relating to status of the monitored object; and

(e) presenting a visual representation of a requested monitored object, a current state of the requested monitored object, and any dependency relationship of the requested monitored object to other of the monitored objects existing in the computer network at a same layer and at a different layer of an Open Systems Interconnect (OSI) network protocol model.