JP5035170B2 - Network monitoring system, monitoring device, network monitoring method and program - Google Patents

Description

  The present invention relates to a multi-stage network monitoring system, a monitoring apparatus, a network monitoring method, and a program.

  A network device such as a transmission device that constitutes a network is normally monitored by a monitoring device for the operation status from the viewpoint of ensuring the reliability of the network.

  In recent years, with the development of information communication networks, the scale of networks has been increasing, and the number of network devices constituting the networks has also increased. When the network becomes large and the number of network devices increases, it is common to prepare a plurality of monitoring devices and monitor the network devices by configuring them in multiple stages.

  Here, a method for monitoring a network device by a network monitoring system in a large-scale network will be described below.

  FIG. 8 is a diagram illustrating an example of a network monitoring system in a large-scale network.

  The network monitoring system in the large-scale network shown in FIG. 8 includes a plurality of monitoring terminals 210a and 210b, a plurality of upper monitoring devices 220a and 220b, a plurality of lower monitoring devices 230a to 230d, and a plurality of monitored devices 240a to 240a. 240h. The monitored devices 240a to 240h are assumed to be network devices such as transmission devices.

  When a failure occurs in the monitored devices 240a and 240b, the monitored devices 240a and 240b transmit failure information for notifying that the failure has occurred to the lower-level monitoring device 230a connected to the monitored device. Similarly, when a failure occurs in the other monitored devices 240c to 240h, the failure information is transmitted to the lower monitoring devices 230b to 230d connected to the own device.

  The lower-level monitoring devices 230a to 230d receive the failure information transmitted from the monitored devices 240a to 240h, and transmit the received failure information to the higher-level monitoring device 220a or the higher-level monitoring device 220b connected to the own device.

  The higher-level monitoring devices 220a and 220b aggregate the failure information transmitted from the lower-level monitoring devices 230a to 230d and transmit the information to the monitoring terminal 210a or the monitoring terminal 210b connected to the own device.

  The monitoring terminals 210a and 210b receive the failure information transmitted from the host monitoring devices 220a and 220b, and display the received failure information to indicate to the network operator that a failure has occurred in the monitored devices 240a to 240h. Notice.

  In the network monitoring system shown in FIG. 8, when many failures occur simultaneously in the monitored devices 240a to 240d, the load on the higher-level monitoring device 220a that collects the failure information of the monitored devices 240a to 240d increases, and the processing capability is increased. It is assumed that it will be exceeded. In this case, even if the higher-level monitoring device 220a receives the failure information, the received failure information may be discarded or even acquired. As a result, the failure information is not notified to the operator, and the failure may be further expanded.

  Therefore, even when many faults occur in the monitored apparatus, a technique is required for surely notifying fault information, and for example, a technique disclosed in Patent Document 1 is disclosed.

  FIG. 9 is a diagram illustrating another example of a network monitoring system in a large-scale network.

  In the network monitoring system shown in FIG. 9, in the technique disclosed in Patent Document 1, a polling signal is periodically transmitted between the monitored device 340, the lower-level monitoring device 330, the middle-level monitoring device 325, and the higher-level monitoring device 320. Each other's address is notified by transmitting and receiving. Each device creates a failure information notification destination list from the notified address. Then, when transmitting the failure information, the device that transmits the failure information transmits the failure information to the transmission destination indicated by the notification destination list.

  At this time, if the failure information cannot be correctly transmitted to the transmission destination, the device that transmits the failure information retransmits the failure information to another monitoring device in the notification destination list. Therefore, even if the failure information cannot be received because the monitoring device to which the failure information is transmitted exceeds the processing capability, the failure information is transmitted to other monitoring devices, so the failure information is notified to the operator. The situation where it is not done can be avoided.

For example, if a failure occurs in the monitored device 340 shown in FIG. 9 and the monitored device 340 transmits failure information, assuming that the lower monitoring device 330 is shown first in the communication destination list, the monitored device First, 340 transmits failure information to the lower-level monitoring device 330. At this time, when the failure information is not correctly transmitted to the lower-level monitoring device 330, the monitored device 340 transmits the failure information to the second monitoring device shown in the communication destination list. If the second monitoring device in the communication destination list is the middle-level monitoring device 325, the monitored device 340 transmits failure information to the middle-level monitoring device 325.
JP 2001-53727 A

  As described above, in the technique disclosed in Patent Document 1, the notification destination list is created by periodically transmitting and receiving polling signals between the monitored device and the monitoring device, and between the monitoring devices. .

  In this case, there is a problem that the bandwidth of the line in the network monitoring system is compressed by periodically transmitting and receiving polling signals.

  In addition, if the failure information is not correctly transmitted to the transmission destination monitoring device, the failure information transmitting side retransmits the failure information to another monitoring device, so that unnecessary traffic occurs and the bandwidth of the line in the network monitoring system is increased. There is a problem of squeezing.

  It is an object of the present invention to provide a network monitoring system and a network monitoring method that can reliably notify failure information even when many failures occur in a monitored device without squeezing the bandwidth of the line in the network monitoring system. And

In order to achieve the above object, the present invention provides:
A plurality of lower-level monitoring devices that receive failure information transmitted from network devices that constitute the network, and a plurality of higher-level monitoring devices that are connected to the plurality of lower-level monitoring devices and aggregate failure information received by the plurality of lower-level monitoring devices A network monitoring system in which the number of the upper monitoring devices is smaller than the number of the lower monitoring devices,
When receiving the failure information transmitted from the network device, the lower-level monitoring device receives a first reception rate that is the number of failure information received from the network device before receiving the failure information. In response, the host monitoring device that transmits the received failure information is determined.

Further, it is a lower-level monitoring device connected to a plurality of higher-level monitoring devices that receive fault information transmitted from network devices constituting the network and aggregate the fault information,
When the failure information transmitted from the network device is received, the received failure information is changed according to a reception rate that is the number of failures per unit time received from the network device before the failure information is received. Determine the host monitoring device to send.

In addition, a plurality of lower-level monitoring devices that receive failure information transmitted from network devices that constitute the network, and a plurality of lower-level monitoring devices that are connected to the plurality of lower-level monitoring devices and that aggregate failure information received by the plurality of lower-level monitoring devices A network monitoring method in a network monitoring system having a higher-level monitoring device, wherein the number of the higher-level monitoring devices is smaller than the number of the lower-level monitoring devices,
When the failure information transmitted from the network device is received, the received information is received according to a first reception rate that is the number of failure information received from the network device per unit time before receiving the failure information. A process of determining a higher-level monitoring device that transmits the failure information.

Further, the failure information transmitted from the network devices constituting the network is received, and the lower monitoring device connected to the upper monitoring device that aggregates the failure information,
When the failure information transmitted from the network device is received, the received failure information is changed according to a reception rate that is the number of failures per unit time received from the network device before the failure information is received. A function for determining a higher-level monitoring device to be transmitted is realized.

  Since the present invention is configured as described above, when there are many failures in the monitored device while avoiding squeezing the bandwidth of the line in the network monitoring system due to polling signals and useless traffic But failure information is surely notified.

  Embodiments of the present invention will be described below with reference to the drawings.

(First embodiment)
FIG. 1 is a diagram showing a first embodiment of a network monitoring system of the present invention.

  As shown in FIG. 1, the network monitoring system of the present embodiment includes a plurality of monitoring terminals 10a and 10b, a plurality of upper monitoring devices 20a and 20b, a plurality of lower monitoring devices 30a to 30d, and a plurality of monitored devices 40a to 40a. 40h. The monitored devices 40a to 40h are assumed to be network devices such as transmission devices.

  The monitored devices 40a and 40b are connected to the lower monitoring device 30a. Similarly, the other monitored devices 40c to 40h are connected to the lower monitoring devices 30b to 30d.

  When a failure occurs in the device itself, the monitored devices 40a to 40h transmit failure information for notifying that the failure has occurred to the lower-level monitoring devices 30a to 30d connected to the device itself. The failure information includes a monitored device ID (Identification) that can uniquely identify the monitored devices 40a to 40h.

  The monitoring terminals 10a and 10b are connected to the higher-level monitoring devices 20a and 20b, respectively, and receive failure occurrence information including the names of the monitored devices 40a to 40h in which a failure has occurred from the higher-level monitoring devices 20a and 20b. By displaying the received failure occurrence information, the network operator is notified that a failure has occurred in the monitored devices 40a to 40h.

  The host monitoring devices 20a and 20b are connected to the monitoring terminals 10a and 10b, respectively. Further, it is connected to the lower level monitoring devices 30a to 30d and aggregates the failure information transmitted from the lower level monitoring devices 30a to 30d.

  FIG. 2 is a block diagram illustrating a configuration example of the higher-level monitoring device 20a illustrated in FIG. The host monitoring device 20b has the same configuration.

  As shown in FIG. 2, the host monitoring device 20 a includes a failure information receiving unit 21, a failure information transmitting unit 22, and a station data unit 23.

  The failure information receiving unit 21 receives the failure information transmitted from the lower-level monitoring devices 30 a to 30 d and outputs the received failure information to the failure information transmitting unit 22.

  When receiving the failure information output from the failure information receiving unit 21, the failure information transmitting unit 22 compares the monitored device ID included in the failure information with the monitored device ID stored in the station data unit 23. Thus, the monitored devices 40a to 40h in which the failure has occurred are determined. Then, the names of the monitored devices 40a to 40h in which the failure has occurred are acquired from the station data unit 23, and the failure occurrence information including the acquired names of the monitored devices is transmitted to the monitoring terminal 10a.

  The station data unit 23 stores the monitored device ID and the name of the monitored device in association with each other. The same contents are stored in the station data section 23 of the higher-level monitoring devices 20a and 20b.

  The lower level monitoring devices 30a to 30d are connected to both the higher level monitoring devices 20a and 20b.

  FIG. 3 is a block diagram showing a configuration of the lower-level monitoring device 30a shown in FIG. The lower monitoring devices 30b to 30d have the same configuration.

  As shown in FIG. 3, the lower-level monitoring device 30 a includes a failure information reception unit 31, a failure information transmission unit 32, and a reception number comparison unit 33.

  The failure information receiving unit 31 receives the failure information transmitted from the monitored devices 40 a and 40 b and outputs the received failure information to the failure information transmitting unit 32.

  When receiving the failure information output from the failure information receiving unit 31, the failure information transmitting unit 32 converts the failure information into a format that can be received by the higher-level monitoring devices 20a and 20b. Then, the failure information reception number stored in the reception number comparison unit 33 is incremented. Then, the transmission destination flag indicating either the higher-level monitoring device 20a or the higher-level monitoring device 20b that is the transmission destination of the failure information stored in the reception number comparison unit 33 is confirmed, and the higher-level monitoring device indicated by the confirmed transmission destination flag The fault information whose format has been converted is transmitted to 20a or the upper monitoring apparatus 20b. Note that the transmission destination flag indicates, as an initial setting, either the predetermined upper monitoring apparatus 20a or the upper monitoring apparatus 20b.

  The reception number comparison unit 33 stores the following information.

  (1) The number of failure information received by the failure information receiving unit 31.

  (2) A lower reception rate which is the first reception rate, which is the number of pieces of failure information received per unit time calculated based on the number of pieces of failure information received in (1).

  (3) Destination flag.

  (4) A transmission destination change prescribed value that is a threshold value compared with the lower reception rate for switching the transmission destination flag.

  In addition, the reception number comparison unit 33 compares the lower reception rate stored in itself with the transmission destination change specified value at regular time intervals, and performs an operation of switching the transmission destination flag according to the comparison result.

  Hereinafter, a transmission destination flag switching operation performed by the reception number comparison unit 33 of the lower monitoring apparatus 30a will be described.

  FIG. 4 is a flowchart for explaining the transmission destination flag switching operation performed by the reception number comparison unit 33 of the lower-level monitoring device 30a shown in FIG. The other lower monitoring devices 30b to 30d perform the same operation.

  The reception number comparison unit 33 confirms whether or not the lower reception rate stored in the reception number comparison unit 33 is larger than the transmission destination change prescribed value at regular time intervals (step S1).

  As a result of the confirmation in step S1, if the lower reception rate is larger than the transmission destination change specified value, the reception number comparison unit 33 switches the transmission destination flag (step S2).

  Next, the reception number comparison unit 33 sets the failure information reception number to 0 (step S3).

  On the other hand, as a result of the confirmation in step S1, if the lower reception rate is equal to or less than the transmission destination change prescribed value, the processing is terminated without switching the transmission destination flag.

  Hereinafter, in the network monitoring system configured as described above, an operation when information on a failure that has occurred in the monitored device 40a is transmitted to the monitoring terminal 10a or the monitoring terminal 10b will be described.

  FIG. 5 is a flowchart for explaining an example of operation when network monitoring is performed in the network monitoring system shown in FIGS.

  First, when a failure occurs in the monitored device 40a, the monitored device 40a transmits failure information to the lower monitoring device 30a (step S51). The failure information includes a monitored device ID that uniquely identifies the monitored device 40a.

  The failure information receiving unit 31 of the lower monitoring device 30a receives the failure information transmitted from the monitored device 40a (step S52).

  Then, the failure information receiving unit 31 outputs the failure information received from the monitored device 40a to the failure information transmitting unit 32.

  The failure information transmitting unit 32 converts the failure information output from the failure information receiving unit 31 into a format that can be received by the higher-level monitoring devices 20a and 20b (step S53).

  Next, the failure information transmission unit 32 increments the failure information reception number stored in the reception number comparison unit 33 (step S54).

  Then, the failure information transmission unit 32 checks the transmission destination flag stored in the reception number comparison unit 33 (step S55). The transmission destination flag indicates either the higher-level monitoring device 20a or the higher-level monitoring device 20b that transmits the failure information. Which is indicated depends on the result of the comparison of the lower reception rate stored in the reception number comparison unit 33 and the transmission destination change specified value in the transmission destination flag switching operation shown in the flowchart of FIG.

  As a result of the confirmation in step S55, when the transmission destination flag indicates the higher-level monitoring device 20a, the failure information transmission unit 32 transmits the failure information whose format has been converted in step S53 to the higher-level monitoring device 20a (step S56).

  On the other hand, as a result of the confirmation in step S55, if the transmission destination flag indicates the higher-level monitoring device 20b, the failure information transmitting unit 32 transmits the failure information whose format has been converted in step S53 to the higher-level monitoring device 20b (step S57). .

  When the failure information is transmitted to the higher-level monitoring device 20a by the operation of step S56, the failure information receiving unit 21 of the higher-level monitoring device 20a receives the failure information (step S58).

  Then, the failure information reception unit 21 of the higher-level monitoring device 20a outputs the failure information received from the lower-level monitoring device 30a to the failure information transmission unit 22.

  The failure information transmitting unit 22 of the higher-level monitoring device 20a compares the monitored device ID included in the failure information output from the failure information receiving unit 21 with the monitored device ID stored in the station data unit 23. It is determined that a failure has occurred in the monitored device 40a.

  Then, the failure information transmission unit 22 of the host monitoring device 20a acquires the name of the monitored device 40a from the station data unit 23, and transmits failure occurrence information including the name of the monitored device 40a to the monitoring terminal 10a (step S59). ).

  On the other hand, when the failure information is transmitted to the higher-level monitoring device 20b by the operation of step 57, the failure information receiving unit 21 of the higher-level monitoring device 20b receives the failure information (step S60).

  Then, the failure information reception unit 21 of the higher-level monitoring device 20b outputs the failure information received from the lower-level monitoring device 30a to the failure information transmission unit 22.

  The failure information transmitting unit 22 of the higher-level monitoring device 20b compares the monitored device ID included in the failure information output from the failure information receiving unit 21 with the monitored device ID stored in the station data unit 23. It is determined that a failure has occurred in the monitored device 40a.

  Then, the failure information transmission unit 22 of the host monitoring device 20b acquires the name of the monitored device 40a from the station data unit 23, and transmits failure occurrence information including the name of the monitored device 40a to the monitoring terminal 10a (step S61). ).

  As described above, in this embodiment, the lower-level monitoring devices 30a to 30d use the transmission destination flag that is switched according to the lower-level reception rate, so that the number of pieces of failure information transmitted, that is, the higher-level monitoring devices 20a and 20b with a low load is reduced. Send fault information to Therefore, even when many failures occur in the monitored devices 40a to 40h, the occurrence of the failure is surely notified without squeezing the bandwidth of the line in the network monitoring system.

(Second Embodiment)
In the first embodiment described above, the case has been described in which the lower-level monitoring devices 30a to 30d determine the higher-level monitoring device 20a or the higher-level monitoring device 20b that transmits the failure information based on the transmission destination flag that is switched according to the lower-level reception rate. .

  In the second embodiment, the higher-level monitoring device stores the reception rate of the failure information received by itself, notifies the lower-level monitoring device of the reception rate, and the lower-level monitoring device notifies the failure information according to the notified reception rate. A case will be described in which a higher-level monitoring device that transmits the message is determined.

  FIG. 6 is a block diagram illustrating another configuration example of the host monitoring apparatus illustrated in FIG.

  As shown in FIG. 6, the higher-level monitoring device 120a of the present embodiment is different from the higher-level monitoring device 20a shown in FIG. 2 in that a reception number measuring unit 24 is added. In this embodiment, the other higher-level monitoring device 120b (not shown) corresponding to the higher-level monitoring device 20b shown in FIG. 1 has the same configuration as the higher-level monitoring device 120a.

  In the present embodiment, the reception number measuring unit 24 stores the number of failure information received transmitted from the lower-level monitoring devices 30a to 30d, and is the number of failure information received per unit time based on the number of failure information received. The higher reception rate which is the second reception rate is calculated and stored.

  In this embodiment, when the failure information transmission unit 32 of the lower level monitoring devices 30a to 30d receives the failure information output from the failure information reception unit 31, the failure information transmission unit 32 transmits the received failure information to the higher level monitoring device 120a or the higher level monitoring device 120b. Before receiving, a reception availability inquiry notification for inquiring whether or not failure information can be received is transmitted to a predetermined higher level monitoring device 120a or higher level monitoring device 120b.

  When the failure information receiving unit 21 of the higher-level monitoring devices 120a and 120b receives the reception availability inquiry notification transmitted from the lower-level monitoring devices 30a to 30d, the higher reception rate stored in the reception number measurement unit 24 is received. Are transmitted to the lower-level monitoring devices 30a to 30d of the transmission source. Note that the information transmitted and received by the communication using the above-described reception availability inquiry notification is very small in data amount, and is exchanged only between the lower-level monitoring device and the higher-level monitoring device. . Therefore, it does not press the bandwidth of the line in the network monitoring system.

  The failure information transmission unit 32 of the lower-level monitoring devices 30a to 30d includes the higher-level reception rate received from the higher-level monitoring devices 120a and 120b and the transmission destination determination specified value that is a predetermined threshold stored in the reception number comparison unit 33. Are compared to determine the higher-level monitoring devices 120a and 120b that transmit the failure information.

  Hereinafter, in the network monitoring system configured as described above, an operation when information on a failure that has occurred in the monitored device 40a is transmitted to the monitoring terminal 10a or the monitoring terminal 10b will be described.

  FIG. 7 is a flowchart for explaining another example of the operation when performing network monitoring in the network monitoring system shown in FIG. 1, FIG. 2, and FIG.

  First, when a failure occurs in its own device, the monitored device 40a transmits failure information to the lower-level monitoring device 30a (step S101).

  The failure information receiver 31 of the lower level monitoring device 30a receives the failure information transmitted from the monitored device 40a (step S102).

  Then, the failure information receiving unit 31 outputs the failure information received from the monitored device 40a to the failure information transmitting unit 32.

  The failure information transmitting unit 32 converts the failure information output from the failure information receiving unit 31 into a format that can be received by the higher-level monitoring devices 120a and 120b (step S103).

  Next, the failure information transmission unit 32 transmits a reception availability inquiry notification to the higher-level monitoring device 120a (step S104).

  The failure information reception unit 21 of the higher-level monitoring device 120a receives the reception availability inquiry notification transmitted from the lower-level monitoring device 30a (step S105), and acquires the higher reception rate stored in the reception number measurement unit 24 (step S105). S106).

  Then, the failure information receiving unit 21 transmits the acquired higher reception rate to the lower monitoring apparatus 30a that is the transmission source of the reception availability inquiry notification (step S107).

  The failure information transmitting unit 32 of the lower monitoring apparatus 30a receives the higher reception rate transmitted from the higher monitoring apparatus 120a (step S108).

  Then, the failure information transmission unit 32 determines whether or not the higher reception rate received from the higher monitoring device 120a is larger than the transmission destination determination specified value stored in the reception number comparison unit 33 (step S109).

  As a result of the determination in step S109, when the higher reception rate is equal to or less than the transmission destination determination specified value, the failure information transmitting unit 32 transmits the failure information whose format has been converted in step S103 to the higher monitoring apparatus 120a (step S110).

  On the other hand, if the result of determination in step S109 is that the higher reception rate is greater than the transmission destination determination specified value, the failure information transmission unit 32 transmits the failure information whose format has been converted in step S103 to the higher-level monitoring device 120b (step S111). .

  Steps S112 to S115, which are subsequent operations, are the same as the operations of steps S58 to S61 in the flowchart shown in FIG.

  In this embodiment, the lower-level monitoring device 30a is determined in advance to transmit the receivable inquiry notification to the higher-level monitoring device 120a. However, the upper-level monitoring devices 120a and 120b that transmit the receivable inquiry notification are arbitrarily selected. I can decide.

  As described above, in the present embodiment, the upper monitoring apparatuses 120a and 120b store the upper reception rate and notify the lower monitoring apparatuses 30a to 30d of the upper reception rate. Therefore, the lower-level monitoring devices 30a to 30d can accurately grasp the load state of the higher-level monitoring devices 120a and 120b, and can more reliably transmit the failure information to the higher-level monitoring devices 120a and 120b with a low load.

  In the above-described two forms, the case where the number of monitored devices connected to one lower-level monitoring device is two has been described, but the number of monitored devices connected to one lower-level monitoring device is two. It is not limited to one.

  Moreover, although the case where the monitoring apparatus has a two-stage configuration has been described in the two forms described above, the present invention is not limited to the two-stage configuration.

  In the present invention, the processing in the lower level monitoring device and the higher level monitoring device is implemented by the lower level monitoring device and the higher level monitoring device in addition to the above-described dedicated hardware. The program may be recorded on a readable recording medium, and the program recorded on the recording medium is read and executed by the lower monitoring apparatus and the upper monitoring apparatus. The recording medium readable by the lower level monitoring device and the higher level monitoring device includes a removable recording medium such as a floppy disk, a magneto-optical disk, a DVD, and a CD, as well as an HDD incorporated in the lower level monitoring device and the higher level monitoring device. Point to.

It is a figure which shows 1st Embodiment of the network monitoring system of this invention. It is a block diagram which shows the example of 1 structure of the high-order monitoring apparatus shown in FIG. It is a block diagram which shows the structure of the low-order monitoring apparatus shown in FIG. 4 is a flowchart for explaining a transmission destination flag switching operation performed by a reception number comparison unit of the lower-level monitoring apparatus illustrated in FIG. 3. 3 is a flowchart for explaining an example of an operation when network monitoring is performed in the network monitoring system shown in FIG. 1. It is a block diagram which shows the other structural example of the high-order monitoring apparatus shown in FIG. 7 is a flowchart for explaining another example of the operation when performing network monitoring in the network monitoring system shown in FIG. 1. It is a figure which shows an example of the network monitoring system in a large-scale network. It is a figure which shows the other example of the network monitoring system in a large-scale network.

Explanation of symbols

10a, 10b, 210a, 210b Monitoring terminal 20a, 20b, 120a, 120b, 220a, 220b, 320 Host monitoring device 21, 31 Fault information receiving unit 22, 32 Fault information transmitting unit 23 Station data unit 24 Received number measuring unit 30a to 30d, 230a to 230d, 330 Subordinate monitoring device 33 Received number comparison unit 40a to 40h, 240a to 240h, 340 Monitored device 325 Middle monitoring device

Claims (12)

A plurality of lower-level monitoring devices that receive failure information transmitted from network devices that constitute the network, and a plurality of higher-level monitoring devices that are connected to the plurality of lower-level monitoring devices and aggregate failure information received by the plurality of lower-level monitoring devices A network monitoring system in which the number of the upper monitoring devices is smaller than the number of the lower monitoring devices,
When receiving the failure information transmitted from the network device, the lower-level monitoring device receives a first reception rate that is the number of failure information received from the network device before receiving the failure information. And a network monitoring system for determining a higher-level monitoring device that transmits the received failure information. The network monitoring system according to claim 1,
The lower monitoring apparatus has a transmission destination flag indicating a predetermined higher monitoring apparatus as a transmission destination of failure information transmitted from the network apparatus, and the first reception rate is greater than a predetermined threshold value. In this case, the network monitoring system changes the higher-level monitoring device that is the transmission destination of the failure information by switching the transmission destination flag. In the network monitoring system according to claim 1 or 2,
The upper monitoring apparatus notifies a second reception rate that is the number of receptions per unit time of the failure information transmitted from the lower monitoring apparatus,
The network monitoring system, wherein the lower-level monitoring device determines a higher-level monitoring device that transmits the received failure information according to the second reception rate notified from the higher-level monitoring device. The network monitoring system according to claim 3, wherein
When the upper monitoring device receives a reception availability inquiry notification for inquiring whether or not the failure information transmitted from the lower monitoring device can be received, notifies the lower monitoring device of the second reception rate;
When receiving the failure information from the network device, the lower-level monitoring device transmits the reception availability inquiry notification to a predetermined higher-level monitoring device, and notifies the second reception rate from the predetermined higher-level monitoring device. When the notified second reception rate is equal to or lower than a predetermined threshold, the received failure information is transmitted to the predetermined higher-level monitoring device, and the notified second A network monitoring system that transmits the received failure information to another higher-level monitoring device when the reception rate is larger than a predetermined threshold. A lower-level monitoring device connected to a plurality of higher-level monitoring devices that receive fault information transmitted from network devices constituting a network and aggregate the fault information;
When the failure information transmitted from the network device is received, the received failure information is changed according to a reception rate that is the number of failures per unit time received from the network device before the failure information is received. A lower-level monitoring device that determines a higher-level monitoring device to transmit. In the subordinate monitoring device according to claim 5,
A transmission destination flag indicating a higher-order monitoring apparatus determined in advance as a transmission destination of failure information transmitted from the network apparatus is provided, and the transmission destination flag is switched when the reception rate is larger than a predetermined threshold. A lower-level monitoring device that changes the higher-level monitoring device that is the transmission destination of the failure information. A plurality of lower-level monitoring devices that receive failure information transmitted from network devices that constitute the network, and a plurality of higher-level monitoring devices that are connected to the plurality of lower-level monitoring devices and aggregate failure information received by the plurality of lower-level monitoring devices A network monitoring method in a network monitoring system in which the number of the upper monitoring devices is smaller than the number of the lower monitoring devices,
When the failure information transmitted from the network device is received, the received information is received according to a first reception rate that is the number of failure information received from the network device per unit time before receiving the failure information. A network monitoring method including processing for determining a higher-level monitoring device that transmits failure information. The network monitoring method according to claim 7,
When the first reception rate is larger than a predetermined threshold, the failure information is switched by switching a transmission destination flag indicating a higher-level monitoring device that is determined in advance as a transmission destination of the failure information transmitted from the network device. Monitoring method including processing for changing a higher-level monitoring device serving as a transmission destination of the network. In the network monitoring method according to claim 7 or 8,
A process of notifying a second reception rate that is the number of receptions per unit time of failure information transmitted from the lower-level monitoring device;
A network monitoring method comprising: processing for determining a higher-level monitoring device that transmits the received failure information according to the second reception rate notified from the higher-level monitoring device. The network monitoring method according to claim 9, wherein
When receiving failure information from the network device, a process of transmitting a reception availability inquiry notification for inquiring whether the failure information can be received to a predetermined higher-level monitoring device;
Upon receiving the reception availability inquiry notification, a process of notifying the lower monitoring device of the second reception rate;
Upon receiving the notification of the second reception rate, if the notified second reception rate is equal to or lower than a predetermined threshold, the received failure information is transmitted to the predetermined higher-level monitoring device. A network monitoring method comprising: a process of transmitting the received failure information to another higher-level monitoring device when the notified second reception rate is greater than a predetermined threshold value. The lower monitoring device connected to the upper monitoring device that receives the failure information transmitted from the network devices constituting the network and aggregates the failure information,
When the failure information transmitted from the network device is received, the received failure information is changed according to a reception rate that is the number of failures per unit time received from the network device before the failure information is received. A program for realizing a function for determining a higher-level monitoring device to be transmitted. The program according to claim 11,
When the reception rate is larger than a predetermined threshold value, the transmission destination of the failure information is switched by switching a transmission destination flag indicating a higher-level monitoring device determined in advance as a transmission destination of the failure information transmitted from the network device. A program for realizing the function of changing the higher-level monitoring device.

Images