JP2959942B2 - Network monitoring system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network monitoring system for monitoring a communication state of each signal line of a communication network such as an ISDN or a packet communication network.

[0002]

2. Description of the Related Art ISDN (Integrated Services Digital Network) and packet communication networks are communication systems for transmitting a large number of multiplexed data at high speed and efficiently. In such a communication system, the I
An SDN switch is connected via an ISDN signal line to a DSU (Line Terminating Unit) provided in the user's home.
A number of terminals such as a telephone, a telex, a personal computer, and a facsimile are connected to the SU (line terminating device).

[0003] An ISDN exchange in a communication network is connected to a DTE (packet terminal) via a packet signal line and a DCE (data line terminating device). In some cases, a normal telephone terminal is connected to the ISDN exchange via an analog telephone line.

When a communication system having such a configuration is newly constructed or during periodic inspection and maintenance, each ISD
For N signal lines and packet signal lines, cable disconnection failures, poor contact of connectors, and exchange and DSU
It is necessary to confirm the presence or absence of a hardware failure such as a connection error with the DCE or the DCE. Further, the line quality such as a transmission error needs to be measured over a long period of time and statistically evaluated.

Conventionally, when such a test is performed, a connection point between devices in each signal line, that is, S
A signal measuring device is connected to each interface point such as / T point and R point, and the communication state of each point is monitored and displayed by a cathode ray tube or the like, and its signal waveform or digital value is analyzed to estimate an abnormal occurrence position. I was

[0006]

However, there is still no technique for installing the above-described signal measuring devices at each interface point in the user's home and for technicians to be resident to observe signal waveforms or measured digital values. There were the following problems.

That is, for an abnormal phenomenon that is constantly occurring, the abnormal phenomenon can be easily specified by a signal waveform or the like.
The cause of the abnormality can be determined in a relatively short time. But,
The abnormal phenomenon that occurs sporadically cannot be easily reproduced even by a technician who is familiar with this communication system, and it requires a great deal of time and effort to identify the abnormal phenomenon and find out the cause of the abnormality.

Further, even if the occurrence of an abnormality is found after a lapse of a predetermined time after the occurrence, the communication state at each interface point at the time of occurrence is not stored and held, so that much time is required for investigating the cause of the abnormal phenomenon. Needed.

The present invention has been made in view of such circumstances, and automatically generates a trigger when log information detected at an interface point on a signal line exceeds a predetermined threshold. Monitor information at the time of the trigger occurrence detected by the monitoring device can be collected by the remote control device. Even if a single error occurs, the monitor information at the interface point immediately before the occurrence of the error is reliably secured. It is an object of the present invention to provide a network monitoring system capable of performing a cause investigation in a short time when an abnormality occurs in each signal line.

[0010]

In order to solve the above-mentioned problems, a network monitoring system according to the present invention comprises a monitoring device for detecting monitor information and log information at an interface point on a signal line of a communication network; And a remote control device that collects the monitor information and log information detected.

A monitor information memory for constantly storing a predetermined number of the latest monitor information among the sequentially detected monitor information, and a log for cumulatively storing the number of times of the sequentially detected log information are stored in the monitoring device. An information memory, automatic trigger means for transmitting trigger information to the remote control device when the number of occurrences of the log information memory exceeds a predetermined threshold value, and trigger information to the remote control device in response to an abnormality detection operation in the operation unit. Manual trigger means for transmitting, monitor stop means for stopping the detection operation of monitor information in response to a monitor stop command from the remote control device, and memory stored in each memory in response to the information transmission command from the remote control device. An information transmitting means for transmitting the monitor information and the log information to the remote control device is added.

Further, a command transmitting means for transmitting a monitor stop command and an information transmission command to the remote control device in response to trigger information from the monitoring device, a monitor information and a log received from the monitor device. Display output means for displaying and outputting information.

[0013]

In the network monitoring system configured as described above, monitoring for detecting monitor information and log information of the interface points at each interface point such as S / T point and R point on the signal line of the communication network. A device is connected, and a remote control device for collecting monitor information and log information detected by the monitoring device is provided.

The monitor information indicated by, for example, protocol information at the above-mentioned interface points is written in the monitor information memory in time series. Naturally, since the storage capacity of the monitor information memory has a certain limit, old monitor information is sequentially discarded. As a result, the monitor information memory always stores the latest predetermined number of monitor information. The log information memory accumulates the number of occurrences of log information (event occurrence).

For example, when the number of occurrences of log information indicating the occurrence of an abnormality exceeds a predetermined threshold value, trigger information is automatically transmitted to the remote control device. Further, when the operator finds a serious abnormality and performs an abnormality detection operation, the trigger information is transmitted to the remote control device.

When the remote control device receives the trigger information,
It determines that some abnormality has occurred in the signal line, and sends a monitor stop command and an information transmission command to the monitoring device. The monitoring device that has received the monitor stop command and the information transmission command from the remote control device immediately stops the monitoring operation and sends the monitor information and the log information stored in the monitor information memory and the log information memory to the remote control device. .

Therefore, the remote control device can grasp the monitor information (protocol information) from the time when the trigger generation (abnormality generation) time is a predetermined time earlier to the time when the trigger is generated. Further, the log information (the number of abnormal occurrences) up to the trigger occurrence time can be grasped.

[0018]

An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a communication system in which the network monitoring system according to the embodiment is incorporated.

An ISDN signal line 2a connected to one ISDN exchange in a communication network 1 composed of a large number of ISDN exchanges and a large number of signal lines connecting these ISDN exchanges is connected to a DSU ( (Line terminating device) 3a. T for this DSU3a
A (terminal adapter device) 4 is connected to a TE2 (ISDN non-standard terminal) 5 such as a personal computer.

Further, the ISDN in the communication network 1
A packet signal line 6 connected to the exchange is connected to a DTE (packet terminal) 8 via a DCE (data line terminating device) 7.
Connected to

In such a communication system, ISD
The interface between the N exchange and the DSU 3a is [2B
+ D] or, for example, [23B +
D] and [24B].

The interface between the DSU 3a and the TA4, that is, the interface at the S / T point is constituted by a basic interface or a primary rate interface.

Further, the interface between TA4 and TE25, that is, the interface at point R is, for example, RS-
It is a serial interface such as 232C. Also, D
The interface between CE7 and DTE8, ie
The interface at point DDX-P also conforms to the interface at point R.

In the communication system having such a basic configuration, three monitoring devices 9, 10 for monitoring the respective communication states of a total of four interface points of S / T point, R point, DDX-P point and V point. , 11 are provided. Further, a remote control device 12 for remotely controlling each of these monitoring devices 9, 10, 11 is incorporated.

That is, DS on the ISDN signal line 2a
U (line termination device) 3a and TA (terminal adapter device) 4
The monitoring device 9 is connected to an S / T point between the terminal 4 and an R point between TA4 and TE2 (ISDN non-standard terminal) 5.

The DC signal on the packet signal line 6
E (data line terminator) 7 and DTE (packet terminal)
The monitoring device 10 is connected to the point DDX-P between the monitoring device 10 and the monitoring device 10. The monitoring device 10 is connected to an ISDN exchange in the communication network 1 via a DSU 3b and an ISDN signal line 2b. Further, the monitoring device 10 includes a modem 13
a and an ISDN exchange in the communication network 1 via the telephone line 14a.

The monitoring device 11 is connected to a point V in the ISDN exchange in the communication network 1. This monitoring device 11 is connected to an ISDN exchange in the communication network 1 via the DSU 3c and the ISDN signal line 2c. Further, the monitoring device 11 is connected to an ISDN exchange in the communication network 1 via a modem 13b and a telephone line 14b.

The V in the exchange of the communication network 1
The point indicates an interface point between the interface signaling device in the exchange and the subscriber line terminal equipment, and can be regarded as an output point in the exchange flowing through the signal line 2a installed in the user's house. It is.

Further, DSU is connected to another ISDN signal line 2d connected to the ISDN exchange of the communication network 1.
The remote control device 12 is connected via 3d. The remote controller 12 is connected to an ISDN exchange in the communication network 1 via a modem 13c and a telephone line 14c. The remote control device 12 is provided, for example, in a management center of a telephone company.

FIG. 2 shows the S / T point, R point, DDX-P point, V
FIG. 2 is a block diagram showing a schematic configuration of each of monitoring devices 9, 10, and 11 for detecting a signal state of each interface point of the point.
As shown in the figure, each of the monitoring devices 9 to 11 includes a monitoring device main body 24 that detects the communication state of the S / T point having the same configuration across all the monitoring devices 9 to 11, and each of the monitoring target interface points (R Point, DDX-P point, and V point). In addition, each adapter device 16 is provided detachably with respect to the adapter terminal 15a of the monitoring device main body 15.

Therefore, when detecting the communication state at the S / T point, the monitoring apparatus is constituted using only the monitoring apparatus main body 15, and when detecting each communication state at the S / T point and the R point, the monitoring apparatus main body is used. The monitoring device 9 is configured by using the adapter device 15 and the adapter device 16 for the R point.

Further, when detecting the communication state at the DDX-P point, the monitoring apparatus 10 is constituted by using the monitoring apparatus main body 15 and the adapter apparatus 16 for the DDX-P point. When detecting the communication state at the V point, the monitoring apparatus 11 is configured by using the monitoring apparatus main body 15 and the adapter apparatus 16 for the V point.

The adapter device 16 for the DDX-P point is a DD
The communication state at the point X-P is sent to the monitoring apparatus main body 15 as information equivalent to the communication state at the point R. Similarly, the adapter device 16 for the V point converts the communication state at the V point into information equivalent to the communication state at the T point, and sends the information to the monitoring device body 15.

The monitoring device body 15 is composed of a kind of information processing device such as a microcomputer. The monitoring device body 15 is roughly divided as shown in FIG.
It comprises a control unit 17, a monitor unit 18, a log information detection unit 19, a trigger generation unit 20, a communication unit 21, and the like. A monitor information memory 22 is connected to the monitor unit 18, and a log information memory 23 is connected to the log information detection unit 19. An operation unit 24a and an external trigger terminal 24b are connected to the trigger generation circuit 20.

The communication unit 21 has connection terminals 26a, 26b connected to the S / T point of the monitored ISDN signal line via the switching unit 25 and the dedicated ISDN signal line 2b,
It is connected to a connection terminal 27 connected to 2c. Further, the communication unit 21 is connected to a connection terminal 28 and a spare connection terminal 29 connected to the telephone lines 14a and 14b.
The monitor 18 has a connection terminal 26 connected to the S / T point.
a, 26b and the adapter terminal 15a.

As shown in FIG. 3, the monitor information memory 22 stores an S / T point monitor information memory 22a for storing the monitor information of the S / T points in time series with the occurrence time.
An R-point monitor information memory 22b for storing the monitor information of the R point in time series with the occurrence time is formed.

In the log information memory 23, as shown in FIG. 4, an S / T point log information memory 23a for storing the number of occurrences of log information at the S / T point, and the generation of log information at the R point are provided. An R point log information memory 23b for storing the number of times is formed.

Next, the operation of each section will be described in order. The monitor unit 18 communicates with the communication state of the S / T point input from the connection terminals 26a and 26b connected to the S / T point of the ISDN signal line 2a and each of the communication states transmitted from the adapter device 16 connected to the adapter terminal 15a. Monitor the communication status at the interface point. Specifically, (a) the protocol information of the layer 1 of the ISDN signal; (b) the protocol information of the layers 2 and 3 on the D channel; (c) the protocol information of the layers 2 and 3 on the B channel; Monitors protocol information of layers 2 and 3 on the DDX-P point.

When the communication state changes, the change time is written to each address of the S / T point monitor information memory 22a in the monitor information memory 22 in time series as S / T point monitor information. When the monitor information is written to the last address of the S / T point monitor information memory 22a,
The write address returns to the start address. That is, this S
The / T point monitor information memory 22a always stores the latest predetermined number N of monitor information together with the occurrence time.

The monitor section 18 stores, in the monitor information memory 22, the monitor information of the communication status of each interface point to which the corresponding adapter apparatus 16 is connected, which is input from the adapter apparatus 16 connected to the adapter terminal 15. Write in a series.

For example, when the adapter device 16 is an adapter device for the R point, that is, the monitoring device 9 of FIG. 1, the input monitor information of the R point is stored in the monitor information memory 2.
2 is written to the R point monitor information memory 22b in the same procedure as described above.

When the adapter device 16 is a DDX-P point adapter device, that is, the monitoring device 10 shown in FIG. 1, the input monitor information of the DDX-P point is stored in the monitor information memory 22 in the R point monitor information. The data is written in the memory 22b in the same procedure as described above. In this case, since the signal connection terminals 26a and 26b are open, the monitor 1
8 does not monitor the communication state at the S / T point.

If the adapter device 16 is a V point adapter device, that is, the monitoring device 11 of FIG. 1, the input monitor information of the V point is stored in the monitor information memory 22 in S.
The data is written into the / T point monitor information memory 22a in the same procedure as the procedure described above. In this case, the signal connection terminals 26a,
Since 26b is open, the monitor unit 18 does not monitor the communication state at the S / T point.

The log information detecting section 19 detects predetermined log information (event occurrence information) of the monitor information of the layers 1, 2 and 3 detected by the monitor section 18 and stores the log information in the log information memory 23. The number of occurrences of the event stored in the / T point log information memory 23a and the R point log information memory 23b is increased and updated.

For example, as log information of the S / T point, FIG.
As shown in the S / T point log information memory 23a of (a),
Items such as "normal noise detection" and "INFO out of sync" are set. Further, a threshold value indicating an allowable generation limit value is set. Note that this threshold value is not set for all items, but only for important items. Each threshold value of each item is set in advance from the remote control device 12.

Similarly, as log information at point R, FIG.
As shown in the R-point log information memory 23b of (b), items such as “RNR frame generation” indicating that reception is not possible, “REJ frame generation” indicating retransmission of I frames, and a threshold value corresponding to each item are set. ing.

The log information at point DDX-P conforms to the log information at point R, and the log information at point V is at point T, that is, S / T.
Same as point log information. Next, the trigger generator 20 will be described. This "trigger" is defined as each monitoring device 9, 10,
11 is a signal sent from the remote control device 12 to the remote control device 12 to prompt a request for transmission of the monitor information and the log information recorded in the monitor information memory 22 and the log information memory 23.

The trigger generation unit 20 (a) detects an important abnormality by the operator and performs a trigger output operation on the operation unit 24a, and (b) a trigger terminal 24b from an external device (not shown). (C) when the number of occurrences of log information in the S / T point log information memory 23a and the R point log information memory 23b of the log information memory 23 exceeds a threshold value, 21 through the remote control device 1
2 sends a trigger signal.

The communication unit 21 is provided with an ISDN signal line 2a to be monitored or dedicated ISDN signal lines 2b, 2c, 2
d, or various types of information exchange and data transfer with the remote control device 12 via the telephone lines 14a, 14b, and 14c. The operator selects and sets in advance which transmission path to use.

The control unit 17 determines the type of the connected adapter device 16, instructs the monitor unit 18, and in response to a transmission request from the remote control device 12 received via the communication unit 21, It has a function of transmitting the monitor information and the log information stored in the monitor information memory 22 and the log information memory 23 to the remote control device 12. Further, when the monitor stop command is input from the remote control device 12, the control unit 17 instructs the monitor unit 18 to execute the monitor stop command.

FIG. 5 is a schematic configuration diagram of the remote control device 12. The remote control device 12 is also formed of a kind of information processing device such as a personal computer. That is, the remote control device 12 is roughly divided into a control unit 30, a communication unit 32, a data collection unit 34 for writing data received by the communication unit 32 into a data file 33, and a collection condition setting unit 3
5, an operation unit 36 having a man-machine function constituted by a CRT display device 36a and a keyboard 36b, and a printer 37.

The communication unit 32 is connected to the IS through the connection terminal 32a.
It is connected to the DN signal line 2d and to the telephone line 14c via the connection terminal 32b. Further, it is connected to a connection terminal 32c having an RS-232C interface standard which can be connected to an external host computer or the like.

The data file 33 includes a monitor information collecting memory for storing monitor information transmitted from each of the monitoring devices 9, 10, and 11, and a monitoring information collection memory for storing each of the monitoring devices 9, 10, and 11.
A log information collection memory for storing the log information transmitted from the server 11 is formed.

The collection condition setting unit 35 is, for example, each of the monitoring devices 9 to 11 specified by the operator on the operation unit 36.
Of the transmission request of the monitor information and the log information to the server, the amount of information to be transmitted out of the information stored in the monitor information memories 22a and 22b of the monitoring devices 9 to 11, Log information memory 23
Transmission conditions, such as which log information to transmit, are set and stored.

As a specific transmission request transmission timing, a predetermined time of the day, such as 24:00 at midnight, is set. Also, for each of the monitoring devices 9 to 11,
When a trigger signal is received from the corresponding monitoring device 9 to 11, information on which monitoring device to send a monitor stop command and an information transmission command to other than the transmission source is also set by the collection condition setting unit 35. You.

The control unit 30 sends a transmission request to each of the monitoring devices 9 to 11 at a specified time, for example, at midnight, which is stored and held in the collection condition setting unit 35. As shown in the flowchart of FIG. 6, when the control unit 30 receives a trigger signal from, for example, one of the monitoring devices 9 to 11 via the communication unit 32, the CRT display device 36a of the operation unit 36 displays
Is displayed as shown in FIG.

Next, the monitoring device 9 to which the trigger signal is transmitted
11 and the monitoring devices 9 to set in the collection condition setting unit 35
11, a command to stop monitoring the communication state of the interface point is sent, and at the same time, a command to send monitor information and log information is sent.

Then, the data collection unit 34 sends the ISDN signal lines 2a, 2b, 2 from the designated monitoring devices 9-11.
When the monitor information and log information are received via c and 2d, the received monitor information and log information are written to the data file 33. Further, the received monitor information and log information are displayed on the CRT display device 36a of the operation unit 36 as necessary.

FIG. 8 is a diagram showing log information 39 displayed on the CRT display device 36a. In this figure, S
The number of occurrences of each item of log information at point / T is displayed. In this case, it indicates that the number of occurrences of the item of “INFO synchronization stop” exceeds the threshold value and the trigger signal is transmitted.

FIG. 9 is a diagram showing the monitor information 40 displayed on the CRT display device 36a. The monitor information 40 indicates that the last time of the monitor information described in the protocol information is 16: 25: 42: 538. That is, with this last monitor information, “I
This indicates that the number of occurrences of “NFO synchronization stop” has reached a threshold value of 300.

The data collected by the data collection unit 34 shown in FIG.
Since the monitor information and log information at other interface points other than FIG. 9 and other monitor information and log information collected from other monitoring devices have already been collected in the data file 33, the operator can operate the operation unit 36. Keyboard 36b
Can be displayed on the display screen of the CRT display device 36a.

In the network monitoring system configured as described above, for example, the communication lines 2a and 2b to be monitored
If any abnormality occurs in the interface, the communication state (protocol information) at each interface point adjacent to the abnormality occurrence point becomes abnormal. Therefore, the number of occurrences of log information (event occurrence) corresponding to the abnormality rapidly increases and exceeds the threshold value.

Therefore, a trigger signal is transmitted to the remote monitoring device 12 at that time. Then, a monitor stop command and an information transmission command are input from the remote monitoring device 12. Therefore, the detection of the monitor information stops when the trigger occurs, so that a predetermined number N of the monitor information (protocol information) immediately before the occurrence of the abnormality is stored and held in the monitor information memory 23. Then, the stored monitor information is transmitted to the remote control device 12.

Therefore, even if a single error occurs, the operator can surely confirm the communication state (protocol information) immediately before the occurrence of the error at each interface point by using the CRT display device 36a. Moreover, in this case, the operator need not monitor each of the monitoring devices 9 to 11 installed in the user's house. That is, each of the monitoring devices 9 to 11 may be unmanned.

In the remote control device 12, it is also possible to display monitor information at other interface points at the time of trigger occurrence on the CRT display device 26a. For example, a communication call originating from one terminal is transmitted to the communication destination TE2 (terminal) 5 via the ISDN exchange and the ISDN signal line 2a of the communication network 1. By comparing and comparing the monitor information indicating the communication state such as the protocol information of the S / T point, the abnormality occurrence position can be specified relatively easily.

When a surveillance person is present at the user's home and a serious abnormality is found, for example, a trigger can be manually generated before the number of occurrences of the log information of the abnormality reaches a threshold value. It is. That is, the cause can be investigated and countermeasures can be taken before a serious situation is reached.

[0067]

As described above, in the network monitoring system according to the present invention, when the log information detected at the interface point on the signal line exceeds a predetermined threshold value, the remote control is automatically performed. A trigger is being sent to the device. Therefore, the monitor information at the time of the trigger occurrence detected by the monitoring device can be automatically collected by the remote control device, and even if the abnormality occurs only once, the interface point immediately before the occurrence of the abnormality is surely obtained. Monitor information. As a result, it is possible to investigate the cause when an abnormality occurs in each signal line in a short time.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a communication system in which a network monitoring system according to one embodiment of the present invention is incorporated.

FIG. 2 is a block diagram illustrating a schematic configuration of a monitoring device of the monitoring system according to the embodiment.

FIG. 3 is a diagram showing a monitor information memory of the monitoring device.

FIG. 4 is a diagram showing a log information memory of the monitoring device.

FIG. 5 is a block diagram showing a schematic configuration of a remote control device of the monitoring system of the embodiment.

FIG. 6 is a flowchart showing the operation of the remote control device.

FIG. 7 is an exemplary view showing a trigger message displayed on the remote control device.

FIG. 8 is a view showing log information displayed on the remote control device.

FIG. 9 is an exemplary view showing monitor information displayed on the remote control device.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Communication network, 2a-2d ... ISDN signal line, 3a, 3b, 3c ... DSU, 4 ... TA, 5 ... TE2
, 6 ... packet communication line, 7 ... DCE, 9, 10, 1
DESCRIPTION OF SYMBOLS 1 ... Monitoring apparatus, 12 ... Remote control apparatus, 15 ... Monitoring apparatus main body, 16 ... Adapter apparatus, 18 ... Monitor part, 19 ... Log information detection part, 20 ... Trigger generation part, 21 ... Communication part, 22
... Monitor information memory, 23 ... Log information memory, 24a ...
Operation unit, 34: Data collection unit, 33: Data file,
35: collection condition setting unit; 36: operation unit.

──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Yuji Sekine 5- 10-27 Minamiazabu, Minato-ku, Tokyo An Ritsu Corporation (72) Inventor Soji Oshima 1-6-1, Uchisaiwaicho, Chiyoda-ku, Tokyo Nippon Telegraph and Telephone Telephone Co., Ltd. (72) Inventor Hiroshi Takeuchi 1-6-1, Uchisaiwaicho, Chiyoda-ku, Tokyo Nippon Telegraph and Telephone Corporation (56) References JP-A-5-153243 (JP, A) JP-A-51-38916 (JP, A) JP-A-4-237251 (JP, A) (58) Fields investigated (Int. Cl. ⁶ , DB name) H04M 3/22

Claims (1)

(57) [Claims] A monitoring device for detecting monitor information and log information at an interface point on a signal line of a communication network, and a remote control for collecting monitor information and log information detected by the monitoring device. A network monitoring system having a device (12), wherein the monitoring device is a monitor information memory (22) that stores and holds the latest predetermined number of monitor information at all times out of the monitor information that is sequentially detected; A log information memory (23) for accumulating and storing the number of occurrences of the detected log information; and an automatic trigger means for transmitting trigger information to the remote control device when the number of occurrences of the log information memory exceeds a predetermined threshold value ( 20),
Manual trigger means (24a.20) for transmitting trigger information to the remote control device in response to an abnormality detection operation in the operation unit;
Monitor stop means (17, 1) for stopping the monitor information detecting operation in response to a monitor stop command from the remote control device.
8), and information transmitting means (21) for transmitting monitor information and log information stored in each memory to the remote control device in response to an information transmission command from the remote control device, wherein the remote control In response to the trigger information from the monitoring device, the device displays command transmission means (32) for transmitting a monitor stop command and an information transmission command to the monitoring device, and displays the monitor information and log information received from the monitoring device. And a display output means (36a) for outputting.