CN100499502C

CN100499502C - Trap analyzing and preprocessing system and method thereof

Info

Publication number: CN100499502C
Application number: CNB2006101035272A
Authority: CN
Inventors: 周明; 王胜华
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2006-07-21
Filing date: 2006-07-21
Publication date: 2009-06-10
Anticipated expiration: 2026-07-21
Also published as: CN101110698A

Abstract

The present invention discloses a trap analysis and a preprocessing system and a method, which solves the problem that the data description format and the trap information format of the existing simple network management protocol are not uniform. The present invention comprises a trap content transformation module, which receives the trap protocol data unit received by the trap reading module, reads the trap analysis and processing configuration parameter, and performs the data transformation suitable for the network management to the trap protocol data unit; a trap analysis and processing module, which performs analysis to the original trap definition management database, and regulates normalized equipment trap definition management database and trap analysis processing disposition parameter; a trap transmission module, which retransmits the trap protocol data unit of the after performed with the trap content transformation module processing to the network server. The present invention can effectively share the burden of the network management system; the present invention can be also performed smooth abutting joint with the network management system, and the present invention is advantageous in the realization of the normalized TRAP analysis treating process in the new network management system, and reduces the alarming process complexity in the network management system.

Description

Trap analyzing and pretreatment system and method

Technical field

The present invention relates to carry out the communication field of network management, relate in particular to a kind of trap analyzing and pretreatment system and method based on SNMP (Simple Network Management Protocol Simple Network Management Protocol) agreement.

Background technology

At present, extensive use along with IP device, how rich and varied IP device is effectively managed and be faced with new challenges, each telecom operators generally all uses the network management system of the difference in functionality of a plurality of manufacturers exploitation simultaneously, and Device Alarm Management is an indispensable function in these network management systems, as the basis of alarm management, SNMP TRAP is the main alarm transmission means of IP device and network management system.

SNMP (Simple Network Management Protocol) is by IETF issue, on the network and depositing three main versions V1, V2c, V3 are arranged, in these serial standards, stipulated SMI (structure of management information), MIB (management information bank), protocol operation characteristic etc. at present.Aspect Trap (trap) processing, V2c compares with the V1 version, has improved Trap announcement mode, and a kind of different event format is designed to substitute the Trap event format of SNMP v1, and has increased type of error, and the V3 version is then basic identical with the V2c version.

Usually, management server (SNMP Manager) is monitored at 162 ports, after the OAMAgent on the equipment (SNMP Agent) is collected incident, uses floater port to send SNMP Trap to SNMP Manager, and both sides adopt the UDP/IP agreement to transmit.

Because people made SNMP have a lot of shortcomings to the limitation of network management understanding and the snmp protocol upward compatible way of having to when SNMP occurred:

All devices sends data with Snmp Trap packet to management server in 1 network, when network growth after certain scale, management server will become bottleneck.Under the serious situation, some faulty equipment may send the Trap data continuously, causes the congested and management servers process failure of network service.

The 2SNMP agreement can not be unified the information such as sign, state and configuration that general data description form is preserved all managed devices with a kind of.MIB storehouse except some public (public) that define in the snmp protocol, all there is the MIB storehouse of a large amount of own privately owned (private) in each manufacturer, just because of the existence in these Proprietary MIB storehouses, cause snmp protocol not unify the various information that general data description form is preserved all managed devices with a kind of.The form of Trap information also is multifarious, generally has only the network management system of manufacturer oneself to handle.

3 problems 2 directly cause being difficult to realize managing the Integrated Network Management System of multi-vendor equipment, and a Virtual network operator often needs to buy simultaneously the network management system of a plurality of manufacturers.

Summary of the invention

At defective and the deficiency that prior art exists, the invention provides a kind of trap analyzing and pretreatment system and the method that the trap information of different-format can be unified for general data description form.

For achieving the above object, the present invention by the following technical solutions: a kind of trap analyzing and pretreatment system comprise:

One trap analyzing processing module is used for original trap definition management information bank is analyzed, and makes normalized equipment trap definition management information bank and trap analyzing processing configuration parameter; The trap that described normalized equipment trap definition management information bank is resolved after changing for management server uses;

One trap reads in module, is used for receiving the simple network management protocol trap that OAMAgent equipment is sent at the User Datagram Protoco (UDP) listening port;

One trap content modular converter is used to receive described trap and reads in the trap protocol Data Unit that module is received, reads in described trap analyzing processing configuration parameter, trap protocol Data Unit content is fit to the data transaction of webmaster management;

The trap sending module, in the user datagram protocol message mode, the trap protocol Data Unit after NM server is transmitted trap content module processing.

Preferably: in described trap analyzing and pretreatment system, described trap reads in module the quantity and the port numbers of listening port is not limited, and described trap sending module does not limit quantity and the port numbers that mails to network management system.

A kind of trap analyzing and pretreated method comprise:

Steps A is analyzed original trap definition management information bank, makes normalized trap management information bank and trap analyzing processing configuration parameter;

Step B during system start-up, reads in trap analyzing processing configuration parameter from data source;

Step C, OAMAgent equipment sends simple network management protocol trap to the listening port of system;

Step D, trap read in after module receives simple network management protocol trap, are organized into the trap protocol Data Unit, pass to trap content modular converter;

Step e, trap content modular converter are changed the trap protocol Data Unit that imports into according to trap analyzing processing configuration parameter;

Step F, the trap protocol Data Unit that the trap sending module is transmitted needs uses the User Datagram Protoco (UDP) agreement to send to the NM server of needs.

Preferably: in described trap analyzing and pretreated method, described trap analyzing processing configuration parameter comprises: the types of variables conversion parameter; Object unique identifier standardization parameter; Continuous trap merger policing parameter; Trap mask; Main version conversion.

Because adopt technique scheme, the present invention has following beneficial effect:

The Trap dissection process is independent from network management system, can effectively share the burden of network management system;

Mode and network management system interface by TRAP transmits can smoothly dock with existing network management system, and help realizing normalized TRAP dissection process process in the new network management system, reduce the alarming processing complexity of network management system;

By the layering deployment techniques, can effectively reduce the TRAP flow on the network, alleviate the alarming processing burden of network management system.

Description of drawings

Fig. 1 is the functional module structure figure of system of the present invention;

Fig. 2 is the Typical Disposition figure of native system and NM server in the single operation system;

Fig. 3 is that TRAP of the present invention resolves and the preliminary treatment process chart.

Embodiment

Below in conjunction with the drawings and specific embodiments the present invention is described in further details:

As shown in Figure 1, the TRAP of independently standard of the present invention resolves with pretreatment system and comprises:

Trap reads in module, use the interface for network programming of 0S (operating system) to monitor and receiving subscriber data newspaper protocol message at certain (several) individual User Datagram Protoco (UDP) port, according to snmp protocol, the IP device of each manufacturer can dispose machine IP address and the port that receives Trap, after the Agent on the IP device collects equipment alarm, send SNMP Trap to this port.

Trap content modular converter, receive Trap and read in the Trap PDU that module is received, read in Trap dissection process configuration parameter, to the rule of OID (object unique identifier) in should Trap, the TrapPDU content is fit to the data transaction of webmaster management according to wherein.According to concrete facility environment, the conversion that can carry out mainly divides following a few class:

The types of variables conversion parameter-with not intelligible variablees such as enumerating among the TrapPDU, integers, be converted to understandable string format, for example among the MIB of MIB-II and many producers, interface type is represented with integer, can use the type of this configuration transitions as reality, as ' ethernet-csmacd ', the state with INTEGER representation can be converted to the form that ' up ', ' down ' etc. understand easily for another example.

OID standardization parameter-be primarily aimed in the Proprietary MIB of some producer, the TrapOID that has defines too generally, need could distinguish actual Trap type in conjunction with some variable that carries among the Trap, can cause general network management system to be not easy to realize general Trap resolving code like this, in this case, can be converted to different TrapOID, convenient follow-up network management system is handled;

The merger policing parameter of continuous T rap-for the Trap of continuous transmission, can define certain rule is a new Trap with a plurality of Trap merger, can effectively reduce network traffics like this in conjunction with the layering deployment techniques;

Trap shielding parameter-some type Trap is lost interest in is not changed transmission;

TrapV1/TrapV2 conversion parameter-to the Trap of V1 form, be converted to the V2 form perhaps is converted to the V1 form by V2.

The equipment Trap definition MIB that manufacturer provides, this is the most original MIB data.

Trap dissection process configuration parameter is closely related with Trap content modular converter, Trap is handled carry out the parametrization configuration, and being convenient to increases new MIB definition, and these configuration parameters can exist with the form of file, also can exist in the mode of database.

Normalized equipment Trap defines MIB, is consistent with semanteme in the above-mentioned configuration parameter, and these MIB use when resolving Trap after the conversion for Manager.

It is after obtaining original MIB that above-mentioned configuration parameter and normalized MIB need, and through after scrutinizing, can determine.

The Trap sending module in the user datagram protocol message mode, is transmitted through the TrapPDU after the module processing to NM server.

Generally speaking, native system and NM server all are configured in the UDP162 port and monitor Trap message, but, when TRAP parsing and pretreatment system and NM server are configured on the same operating system, be not easy to realize both monitoring, transmit at this moment (Fig. 2) again to 162 ports at 162 ports, one of them can be changed on other free subscriber datagram protocol port numbers (as 63162), perhaps use the inter-process communication techniques direct communication.

For larger network (200-1000 platform equipment), can disposing independently, computer carries out the Trap parsing.

For 1000 equipment of bigger network size (〉), when perhaps network size Trap flow is very big, can dispose two-layer Trap preprocessor, for example in the minimal network at the big equipment place of Trap amount, dispose ground floor Trap preprocessor, Trap is carried out merger, reduce the Trap quantity flow on the backbone network; Configuration second layer Trap preprocessor on the network of webmaster side is handled the Trap (noting the Trap that non-equipment directly reports) that the Trap of lower floor preprocessor reports then, expands simplifying variable, strengthens user friendly.

As Fig. 3, the treatment step of flow process part is as follows:

Step 1: prepare: preparing certain when trendy equipment manages, at first should obtain the SNMP MIB definition document of this equipment, and Trap definitional part wherein analyzed, contrast the form of stipulating in the aforementioned conversion method, formulate Trap and resolve configuration parameter, formulate normalized new SNMP Trap MIB simultaneously, use for follow-up network management system.

Step 2: Trap resolves with pretreatment system and starts, and reads in Trap dissection process configuration parameter from data source (file or database);

Step 3: start Trap conversion thread;

Step 4: monitor predetermined user datagram protocol port;

Step 5: if received and exit command, go to step 8, otherwise;

Step 6:, change step 4 and continue to monitor if do not receive new Trap;

Step 7: the TrapPDU that newly receives is added to ' pending TrapPDU formation ', change step 4 and continue to monitor;

Step 8: construct one and have the special PDU that withdraws from sign, it is added into ' pending Trap formation ';

Step 9: wait for that ' Trap changes thread ' is finished;

Step 10: withdraw from.

Wherein, the handling process of Trap conversion thread is as follows:

Step 11: from ' pending Trap formation ', obtain the oldest TrapPDU,, wait for if formation is empty;

Step 12:, change step 10 seven if the PDU that receives has the special PDU that withdraws from sign;

Step 13:, get corresponding Trap and resolve configuration parameter according to the TrapOID among the PDU;

Step 14: TrapPDU is carried out conversion process;

Step 15: the PDU for needs send, call sending module and send;

Step 10 six: change step 11, continue processing queue;

Step 10 seven: the thread end mark is set;

Step 10 eight: withdraw from thread.

This realizes adopting memory queue mode buffer memory Trap, and to avoid losing Trap when Trap message is too intensive, the size of buffer queue is subjected to the restriction of calculator memory, so suggestion under some limiting case, considers to increase the calculator memory capacity.In the more senior implementation, can further use hard disk to carry out buffer memory.

More than describe operation principle of the present invention in detail, but the example of this visualization of just lifting for the ease of understanding should not be considered to be limitation of the scope of the invention.Equally, according to the description of technical scheme of the present invention and preferred embodiment thereof, can make various possible being equal to and change or replacement, and all these changes or replacement all should belong to the protection range of claim of the present invention.

Claims

1, a kind of trap analyzing and pretreatment system comprise:

2, a kind of trap analyzing and pretreated method comprise:

Step F, the trap protocol Data Unit that the trap sending module is transmitted needs uses User Datagram Protoco (UDP) to send to the NM server of needs.

3, trap analyzing according to claim 2 and pretreated method is characterized in that: described trap analyzing processing configuration parameter comprises: the types of variables conversion parameter; Object unique identifier standardization parameter; Continuous trap merger policing parameter; Trap mask; Main version conversion.