CN108667655A - Alarm method, device, Network Management System and the computer-readable medium of interface - Google Patents

Alarm method, device, Network Management System and the computer-readable medium of interface Download PDF

Info

Publication number
CN108667655A
CN108667655A CN201810365310.1A CN201810365310A CN108667655A CN 108667655 A CN108667655 A CN 108667655A CN 201810365310 A CN201810365310 A CN 201810365310A CN 108667655 A CN108667655 A CN 108667655A
Authority
CN
China
Prior art keywords
flash
interface
target
flash analysis
analysis
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201810365310.1A
Other languages
Chinese (zh)
Other versions
CN108667655B (en
Inventor
冯林蛟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New H3C Technologies Co Ltd
Original Assignee
New H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by New H3C Technologies Co Ltd filed Critical New H3C Technologies Co Ltd
Priority to CN201810365310.1A priority Critical patent/CN108667655B/en
Publication of CN108667655A publication Critical patent/CN108667655A/en
Application granted granted Critical
Publication of CN108667655B publication Critical patent/CN108667655B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

This application provides a kind of alarm method of interface, device, Network Management System and computer-readable mediums, are related to the technical field of the network equipment, and this method includes：After monitoring that DOWN events occur for target interface, the connection attribute of target interface is determined；Judged in flash analysis rule with the presence or absence of the flash analysis operation that matches with target interface based on connection attribute, wherein flash analysis rule includes：Correspondence between the connection attribute and flash analysis operation of interface；If there is the flash analysis operation to match, flash analysis then is carried out to target interface according to the flash analysis operation to match, and determine whether to generate interface flash alarm signal based on flash analysis result, the application alleviates the technical issues of can not making different alarm reactions according to the different connection attributes of distinct interface due to being all made of caused by identical flash alarm mode for each interface in existing flash alarm technology.

Description

Alarm method, device, Network Management System and the computer-readable medium of interface
Technical field
This application involves the technical fields of the network equipment, more particularly, to a kind of alarm method of interface, device, network pipe Reason system and computer-readable medium.
Background technology
Interface is the resource of equipment in network and equipment interconnection.For example, can by interface be connected an equipment and Another equipment links together so that their mutually coordinated work, wherein the interface of an equipment and another equipment Interface between the channel of data transmission of formation be properly termed as link, stabilization can be provided for production by stablizing constant link Service.The stability of link greatly depends on the stability of interface, so interface is Network Management System The resource that must be monitored in (Network Management System, abbreviation NMS), wherein interface DOWN events are (that is, connect Mouth not work event) and interface UP events (that is, interfaces event) event is very important in Network Management System. Wherein, when interface DOWN events occur, show that interface is in DOWN states；When interface UP events occur, then show interface In UP states.When the state of interface is frequently switched to DOWN states by UP states, and UP states are switched to from DOWN states When, referred to as interface flash.Interface flash can reduce the stability of link, to influence the transmission of data.Therefore, it is necessary to dock Mouth carries out flash analysis, and carries out flash alarm, to ensure the stability of link.
In existing flash alarm technology, by time interval, DOWN and the DOWN in pairs of alarm between DOWN and UP Between time interval make time window, wherein alarm refers to that interface switches to UP states by DOWN states in pairs, then by UP shapes State switches to DOWN states.When alarm switching meets time window in pairs as the DOWN-UP-DOWN, flash alarm is generated. In existing technical solution, the flash analysis strategy of above-mentioned interface can be brought into flash network analysis, by interface State monitors to find the flash event of interface, and generates flash alarm and analyzed for webmaster personnel, is safeguarded to push The flash of interface.But above-mentioned flash alarm technology cannot make different reactions according to the connection attribute of distinct interface.It is existing Internet include a large amount of network equipment, include a large amount of interface again in the network equipment, so, if to each interface It is analyzed all in accordance with above-mentioned flash alarm technology, while wasting a large amount of resource, also increases Network Management System Workload.
Invention content
In view of this, the application's is designed to provide a kind of alarm method of interface, device, Network Management System and meter Calculation machine readable medium, to alleviate due to being all made of identical flash alarm for each interface in existing flash alarm technology The technical issues of different alarm reactions can not be made caused by mode according to the different connection attributes of distinct interface.
In a first aspect, the embodiment of the present application provides a kind of alarm method of interface, including：Monitoring target interface hair After raw DOWN events, determine that the connection attribute of the target interface, the connection attribute are connected according to the target interface What the type of the opposite equip. connect determined；Based on the connection attribute judge in the flash analysis rule with the presence or absence of with it is described The flash analysis operation that target interface matches, wherein the flash analysis rule includes：The connection attribute and flash of interface Correspondence between analysis operation；If including the flash analysis operation to match, according to the sudden strain of a muscle to match Disconnected analysis operation carries out flash analysis to the target interface, and determines whether that generating interface flash accuses based on flash analysis result Alert signal.
Further, the flash analysis operation includes flash analysis threshold value, and the flash analysis threshold value includes：Interface Flash alarm threshold value and/or flash analysis time window；The flash analysis time window is used to determine that time of flash to occur for interface Number, the number that the flash alarm threshold value is used to occur according to interface flash determine whether to carry out flash alarm.
Further, carrying out flash analysis to the target interface according to the flash analysis operation to match includes： According to the target flash alarm threshold value and target flash analysis time window in the flash analysis operation to match, to the mesh Tag splice mouth carries out flash analysis.
Further, according to the target flash alarm threshold value and target flash point in the flash analysis operation to match Time window is analysed, carrying out flash analysis to the target interface includes：Since the DOWN events, based on the target flash point Analysis time window counts the continuous flash number of the target interface；When the continuous flash number is more than or equal to the target When flash alarm threshold value, then the interface flash alarm signal is generated.
Further, the target flash analysis time window includes：First time window and the second time window；From the DOWN Event starts, and the continuous flash number that the target interface is counted based on the target flash analysis time window includes：From described DOWN events start, and count the target interface and continuously perform object run number, wherein it is described to execute an object run Target interface switches to UP states in the first time window by DOWN states, and by the UP in second time window State switches to next DOWN states；Using the number of target interface performance objective operation as the company of the target interface Continuous flash number, wherein the time interval between the operation of any two adjacent target is less than represented by the first time window Time.
Further, determine whether that generating interface flash alarm signal includes based on flash analysis result：If based on institute It states flash analysis result and determines that flash has occurred in the target interface, then judge whether based on the DOWN events monitored Generate interface DOWN alarm signals；If it is judged that being then to continue to determine whether to generate based on the flash analysis result to connect Mouth flash alarm signal.
Further, it is determined that the connection attribute of the target interface includes：Determine pair being connected with the target interface The equipment identification information of end equipment, wherein the equipment identification information is connected for uniquely expression with the target interface The type information of opposite equip.；The equipment identification information is converted into default identification information, and by the default identification information Connection attribute as the target interface.
Further, the method further includes：If it is judged that being not present and the connection in the flash analysis rule The flash analysis operation that attribute matches then does not carry out flash analysis to the target interface.
Further, after the connection attribute for determining the target interface, the method further includes：Determine the target Hierarchical role of the opposite equip. that interface is connected in the network architecture, wherein the hierarchical role is access layer equipment or converges Poly layer equipment or core layer equipment；Judge to whether there is and the mesh in the flash analysis rule based on the connection attribute The flash analysis operation that tag splice mouth matches includes：Judge the flash analysis in conjunction with the connection attribute and the hierarchical role With the presence or absence of the flash analysis operation to match with the target interface in rule.
Further, it is determined that hierarchical role of the opposite equip. that is connected of the target interface in the network architecture includes： Obtain the facility information and link information of the opposite equip.；Wherein, include in the facility information equipment identification information and Device attribute information, includes the identification information of target device in the link information, and the target device is that the target connects Equipment where mouthful；According to the facility information and link information, the device attribute information of the target device is determined；According to described Device attribute information determines each hierarchical role of the opposite equip. in the network architecture.
Second aspect, the embodiment of the present application provide a kind of alarm device of interface, including：Determination unit, for supervising After measuring target interface generation DOWN events, determine that the connection attribute of the target interface, the connection attribute are according to institute State the type determination for the opposite equip. that target interface is connected；Judging unit, described in being judged based on the connection attribute With the presence or absence of the flash analysis operation to match in the target interface in flash analysis rule, wherein the flash analysis rule Include then：Correspondence between the connection attribute and flash analysis operation of interface；Determination unit is analyzed, for judging Including in the case of the flash analysis operation to match, the target is connect according to the flash analysis operation to match Mouth carries out flash analysis, and determines whether generation interface flash alarm signal based on flash analysis result.
The third aspect, the embodiment of the present application provide a kind of Network Management System, including memory, processor and are stored in On the memory and the computer program that can run on the processor, when the processor executes the computer program Realize method described above.
Fourth aspect, the embodiment of the present application provide a kind of meter for the non-volatile program code that can perform with processor Calculation machine readable medium, said program code make the processor execute method described above.
In the embodiment of the present application, after monitoring that DOWN events occur for target interface, the connection of target interface is determined Attribute, wherein connection attribute is that the type of the opposite equip. connected according to target interface determines；Judged based on connection attribute With the presence or absence of the flash analysis operation that matches with target interface in flash analysis rule, wherein flash analysis rule includes： Correspondence between the connection attribute and flash analysis operation of interface；If including according to the flash to match point Analysis operation carries out flash analysis to target interface, and determines whether generation interface flash alarm signal based on flash analysis result. In the embodiment of the present application, by above-mentioned set-up mode, it is corresponding to determine to accomplish the connection attribute according to each interface Flash analysis operation to obtain different flash analysis results, and is made different alarm reactions, and then is alleviated due to existing Being all made of for each interface in some flash alarm technologies can not be according to distinct interface caused by identical flash alarm mode Different connection attributes the technical issues of making different alarms reaction.
Other feature and advantage of the application will illustrate in the following description, also, partly become from specification It obtains it is clear that being understood by implementing the application.The purpose of the application and other advantages are in specification, claims And specifically noted structure is realized and is obtained in attached drawing.
To enable the above objects, features, and advantages of the application to be clearer and more comprehensible, preferred embodiment cited below particularly, and coordinate Appended attached drawing, is described in detail below.
Description of the drawings
It, below will be to specific in order to illustrate more clearly of the application specific implementation mode or technical solution in the prior art Embodiment or attached drawing needed to be used in the description of the prior art are briefly described, it should be apparent that, in being described below Attached drawing is some embodiments of the application, for those of ordinary skill in the art, before not making the creative labor It puts, other drawings may also be obtained based on these drawings.
Fig. 1 is the flow chart according to a kind of alarm method of interface of the embodiment of the present application；
Fig. 2 is the flow chart according to the alarm method of the first interface of the embodiment of the present application；
Fig. 3 is the flow chart of step S203 in the alarm method according to a kind of interface of the embodiment of the present application；
Fig. 4 is the flow chart according to the alarm method of second of interface of the embodiment of the present application；
Fig. 5 is the flow chart according to the alarm method of the third interface of the embodiment of the present application；
Fig. 6 is the flow chart according to the alarm method of the 4th kind of interface of the embodiment of the present application；
Fig. 7 is the schematic diagram according to a kind of alarm device of interface of the embodiment of the present application；
Fig. 8 is the schematic diagram according to the alarm device of the first interface of the embodiment of the present application；
Fig. 9 is the schematic diagram according to the alarm device of second of interface of the embodiment of the present application；
Figure 10 is the schematic diagram according to the alarm device of the third interface of the embodiment of the present application；
Figure 11 is the schematic diagram according to the alarm device of the 4th kind of interface of the embodiment of the present application；
Figure 12 is the schematic diagram according to a kind of Network Management System of the embodiment of the present application.
Specific implementation mode
To keep the purpose, technical scheme and advantage of the embodiment of the present application clearer, below in conjunction with attached drawing to the application Technical solution be clearly and completely described, it is clear that described embodiment is some embodiments of the present application, rather than Whole embodiments.Based on the embodiment in the application, those of ordinary skill in the art are not making creative work premise Lower obtained every other embodiment, shall fall in the protection scope of this application.
It in large-scale network environment, and include a large amount of network equipment under complicated network environment, and each network The quantity for the interface that equipment is included is also very more, and the connection attribute of each interface is multifarious in the network equipment.Wherein, The connection attribute of interface refers to the device type of interface opposite equip., for example, the opposite equip. of current interface is server, then The connection attribute of this interface is the interface of Connection Service device；If the opposite equip. of current interface is interchanger, this interface Connection attribute be connect interchanger interface.
Since the diversity of the connection attribute of each interface should also want area when carrying out flash analysis to each interface Tap the connection attribute of mouth.Because in some scenarios, the flash of interface can endure or ignore, connect under certain scenes The flash analysis of mouth is to have to timely.Therefore, it is necessary to a kind of based on the connection attribute of interface to be dodged to each interface The method of disconnected analysis.
Based on this, in the embodiment of the present application, a kind of alarm method of interface is provided, this method is a kind of according to interface Connection attribute configures the method that the flash analytic intensity of interface analyzes necessity with flash.It can be to different by this method Interface can accomplish selectively to generate the flash alarm of interface according to the connection attribute of interface when doing flash analysis, under The alarm method of the interface will be introduced in conjunction with specific embodiments in face.
According to the embodiment of the present application, a kind of embodiment of the alarm method of interface is provided, it should be noted that in attached drawing Flow the step of illustrating can be executed in the computer system of such as a group of computer-executable instructions, although also, Logical order is shown in flow charts, but in some cases, can with different from sequence herein execute it is shown or The step of description.
Fig. 1 is according to a kind of flow chart of the alarm method of interface of the embodiment of the present application, as shown in Figure 1, this method packet Include following steps：
Step S102 determines the connection attribute of the target interface after monitoring that DOWN events occur for target interface, Wherein, the connection attribute is that the type of the opposite equip. connected according to the target interface determines；
For example, device A and equipment B.Wherein, interface A is provided in device A1, interface B is provided on equipment B1, at this point, setting It is standby to pass through interface A between A and equipment B1With interface B1It interconnects.At this point, if target interface is interface A1, then target connects The connection attribute of mouth is the type information of equipment B；If target interface is interface B1, then the connection attribute of target interface is For the type information of device A.
It should be noted that if when target interface does not have connected opposite equip., show the target interface Temporarily without connection attribute.When the target interface is connected to corresponding opposite equip., at this point, can setting according to opposite equip. Standby type determines its connection attribute.
Step S104 judges to whether there is and the target interface phase in flash analysis rule based on the connection attribute The flash analysis operation matched, wherein the flash analysis rule includes：Between the connection attribute and flash analysis operation of interface Correspondence；If it is judged that comprising S106 is thened follow the steps；If it is judged that not including, S108 is thened follow the steps；
Step S106 carries out flash analysis, and base according to the flash analysis operation to match to the target interface Determine whether to generate interface flash alarm signal in flash analysis result；
Step S108 does not execute the operation that flash analysis is carried out to the target interface.
In the embodiment of the present application, after monitoring that DOWN events occur for target interface, the connection of target interface is determined Attribute, wherein connection attribute is that the type of the opposite equip. connected according to target interface determines；Judged based on connection attribute With the presence or absence of the flash analysis operation that matches with target interface in flash analysis rule, wherein flash analysis rule includes： Correspondence between the connection attribute and flash analysis operation of interface；If it is present according to the flash to match point Analysis operation carries out flash analysis to target interface, and determines whether generation interface flash alarm signal based on flash analysis result.
In the embodiment of the present application, by above-mentioned set-up mode, the connection attribute according to each interface can be accomplished come really Fixed corresponding flash analysis operation to obtain different flash analysis results, and is made different alarm reactions, and then is alleviated It can not basis caused by identical flash alarm mode due to being all made of for each interface in existing flash alarm technology The different connection attributes of distinct interface make the technical issues of different alarm reactions.
In the embodiment of the present application, the flash analysis rule described in step S104 is preconfigured analysis rule. Flash analysis rule includes：Correspondence between the connection attribute and flash analysis operation of interface.In flash analysis operation Threshold value is analyzed including flash, flash analysis threshold value includes：The flash alarm threshold value and/or flash analysis time window of interface；Flash Analysis time window is used to determine that the number that flash occurs for interface, the number that flash alarm threshold value is used to occur according to interface flash to be true It is fixed whether to carry out flash alarm.
In an optional embodiment, the connection attribute of interface can be pre-configured with.For example, determining the connection of interface Attribute AA, connection attribute BB and connection attribute CC.Wherein, connection attribute AA is used to show that the interface to be to connect connecing for interchanger Mouthful, connection attribute BB is used to show that the interface to be the interface for connecting router, and connection attribute CC is for showing that the interface is connection The interface of server.In the connection attribute for being pre-configured with interface, can selectively be selected based on the importance of business Connection attribute.For example, in some company, the importance of interchanger and router is higher, then can determine the connection category of interface Property AA (show the interface be connect interchanger interface), connection attribute BB (show the interface be connection router interface). For example, in another company, the importance of interchanger, router and server is higher, then can determine the connection of interface Attribute AA (shows that the interface is the interface for connecting interchanger), and connection attribute BB (shows that the interface is the interface for connecting router) With connection attribute CC (showing that the interface is the interface of Connection Service device).
After the connection attribute (for example, connection attribute AA, connection attribute BB and connection attribute CC) for determining outgoing interface, just Can be that each connection attribute formulates corresponding flash analysis operation, which includes when carrying out flash analysis Required flash analyzes threshold value, specifically includes：The flash alarm threshold value and/or flash analysis time window of interface, wherein flash Analysis time window is used to determine the number that flash occurs for interface.Flash analysis time window includes that interface switches to UP by DOWN states The interval time (that is, first time window in following embodiments) of state and interface switch to next DOWN by UP states The interval time (that is, second time window in following embodiments) of state.Flash alarm threshold value refers to that interface is allowed most Small flash number, wherein when an Interface status by DOWN state transformations to UP states, then, then by UP state transformations to When the time interval of DOWN states meets the flash analysis time window of setting, then it is assumed that a flash has occurred in this interface.
In the embodiment of the present application, flash analysis rule is configured through the above way, can be accomplished according to each interface Connection attribute determine corresponding flash analysis rule, to obtain different flash analysis results, and make different announcements Alert reaction, and then alleviate due to being all made of identical flash alarm mode for each interface in existing flash alarm technology Caused the technical issues of different alarm reactions can not be made according to the different connection attributes of distinct interface.
It should be noted that by foregoing description it is found that connection attribute is the equipment for the opposite equip. being connected with interface Type.The device type can be determined by the sysOID of the network equipment；Wherein, the sysOID of the network equipment refers to supporting simple net The system definition character of the equipment of network management agreement (Simple Network Management Protocol, abbreviation SNMP) String, the character string can uniquely identify the type of a network equipment.Network Management System is adding the network equipment, with right When the network equipment is managed, it can be operated by the get of snmp protocol to obtain the sysOID of the network equipment, you can with logical Cross the device type that snmp protocol obtains the network equipment.It is of course also possible to obtain setting for the network equipment by other network management protocols Standby type, the present embodiment do not limit this.
That is, in the embodiment of the present application, when being pre-configured with flash analysis rule, Network Management System can lead to The get for crossing snmp protocol is operated and is obtained the sysOID of each network equipment, in turn, according to the sysOID of each network equipment come It determines the device type of each network equipment, finally, determines the connection attribute of outgoing interface.It should be noted that same company The sysOID of the network equipment of same model can be identical.
In another optional embodiment, it may be predetermined that interface to be analyzed and its flash analysis rule. Specifically, the flash analysis rule of each interface in a complete network environment can be configured in flash analysis rule, this When, show to analyze each interface according to its corresponding flash analysis rule.It can also be in advance in flash analysis rule The flash analysis rule of specified interface in one complete network environment of middle configuration, at this point, showing only to specified interface according to it Corresponding flash analysis rule is analyzed.For example, the sudden strain of a muscle of the interface A1 of device A can be configured in flash analysis rule in advance Disconnected analysis rule, and configure the flash analysis rule of the interface B1 of equipment B.At this point, showing the interface A1 to device A according to it Corresponding flash analysis rule carries out flash analysis, and to the interface B1 of equipment B according to its corresponding flash analysis rule into Row flash is analyzed.
In this case, it is possible to be the corresponding identification information of interface assignment to be analyzed, and any two is to be analyzed connects The identification information of mouth is different.For example, if interface to be analyzed is the interface A of device A1With the interface B of equipment B1, at this point it is possible to For the interface A of device A1Distribute corresponding identification information, and the interface B for equipment B1Distribute corresponding identification information.To wait for After the corresponding identification information of interface assignment of analysis, so that it may to configure corresponding flash analysis rule for interface to be analyzed Particular content.
Wherein, include flash analysis time window and flash alarm threshold value in the particular content.Flash analysis time window packet Include that interface switches to the interval time of UP states by DOWN states and interface switches to next DOWN states by UP states Interval time.Flash alarm threshold value refers to interface minimum flash number allowed, wherein when an Interface status is by DOWN State transformation is to UP states, then, then by the time interval of UP state transformations to DOWN states meet setting flash analyze when Between window, then it is assumed that a flash has occurred in this interface.
In the embodiment of the present application, flash analysis rule is configured through the above way, it in one case, can be to net While each interface in network environment carries out flash analysis, additionally it is possible to flash analysis is carried out to specified interface, to do Different flash analysis results is obtained when carrying out flash analysis based on corresponding flash analysis rule to different interfaces, and is made Different alarm reactions.
In the present embodiment, after determining flash analysis rule in the manner described above, so that it may with according to above-mentioned flash Analysis rule carries out flash analysis to interface, and detailed process is described as follows：
After monitoring that DOWN events occur for target interface, the connection attribute of target interface is determined；Then, it is based on connection With the presence or absence of the flash analysis operation to match with target interface in determined property flash analysis rule；If including matched Flash analysis operation, then according in the flash analysis operation to match target flash alarm threshold value and target flash analysis time Window carries out flash analysis to target interface.
The above-mentioned target flash alarm according in the flash analysis operation to match is introduced below in conjunction with specific embodiment Threshold value and target flash analysis time window, to target interface carry out flash analysis the step of detailed process.
In an alternative embodiment, Fig. 2 is the stream according to the alarm method of another interface of the embodiment of the present application Cheng Tu, as shown in Fig. 2, this method comprises the following steps：
Step S201 determines the connection attribute of target interface after monitoring that DOWN events occur for target interface, In, the connection attribute is that the type of the opposite equip. connected according to the target interface determines；This step and above-mentioned step Rapid S102 is identical, and details are not described herein again.
Step S202 is judged in flash analysis rule based on connection attribute with the presence or absence of the flash to match with target interface Analysis operation, wherein flash analysis rule includes：Correspondence between the connection attribute and flash analysis operation of interface； This step is identical as above-mentioned steps S104, and details are not described herein again.
Since DOWN events, target interface is counted based on target flash analysis time window if identical by step S203 Continuous flash number；
Step S204 then generates interface flash alarm when continuous flash number is more than or equal to flash alarm threshold value Signal.
In the embodiment of the present application, monitor that target interface is transformed to not work by normal operating conditions in Network Management System When making state (that is, DOWN states), then DOWN events are generated.That is, interface normal operation for a period of time after, if It is DOWN states by UP state transformations, then will generates DOWN events.After generating DOWN events, the connection of target interface is determined Attribute.Wherein, since Network Management System is when being managed the equipment in network environment, each equipment can be obtained sysOID.Therefore, at this point, Network Management System can extract the target after determining the opposite equip. of the target interface The sysOID of the opposite equip. of interface determines the connection attribute of target interface according to the sysOID of opposite equip. in turn.
It should be noted that when extracting the sysOID of opposite equip., if the opposite equip. does not have sysOID, it is determined that The opposite equip. is PC (Personal Computer) machine.When the interface does not have opposite equip., then the connectionless category of the interface Property.
After getting the connection attribute of target interface, so that it may judged with to be based on connection attribute be in flash analysis rule The no flash analysis operation for being present in target interface and matching.If it is judged that in the presence of then from step S201 (that is, step S102) In the DOWN events that monitor start, the continuous flash number of target interface, and base are counted based on target flash analysis time window Determine whether to generate interface flash alarm signal in continuous flash number.
By the description in above-described embodiment it is found that including the flash alarm threshold value of interface in flash analysis operation. In the present embodiment, Network Management System after counting the continuous flash number of target interface, by continuous flash number with it is right The flash alarm threshold value (that is, above-mentioned target flash alarm threshold value) answered is compared.When comparison result is that continuous flash number is big When corresponding flash alarm threshold value, then interface flash alarm signal is generated.
For example, the interchanger and router of certain company are more important equipment, at this point, carrying out flash analysis to interface When, can pair interface being connected with interchanger and router carry out flash analysis, at this point, interchanger (or router) is should The opposite equip. that interface is connected.At this point, the flash analysis rule of the interface can be pre-configured with.For example, flash analysis rule Then 1 includes the following contents：Identification information " 1 "；Flash analysis time window t1With flash alarm threshold value k1.In flash analysis rule 2 Including the following contents：Identification information " 2 "；Flash analysis time window t2With flash alarm threshold value k2.Wherein, identification information " 1 " indicates The connection attribute of interface is the interface for connecting interchanger, and identification information " 2 " indicates that the connection attribute of interface is connection router Interface, flash analysis time window include interface by DOWN states switch to UP states interval time and interface by UP states Switch to the interval time of next DOWN states.
If monitoring that interface A occurs DOWN events and determines the connection attribute of interface A after this, for example, really The connection attribute of the interface A made is the interface for connecting interchanger.Wherein, Network Management System can be by obtaining interface A The sysOID of the opposite equip. connected determines the device type of the opposite equip., in turn, obtains the connection category of interface A Property.
Next, it is judged that whether the connection attribute of interface A matches in advance with flash analysis rule 1 and flash analysis rule 2 The connection attribute for the interface set is identical.By judging it is found that the connection attribute of interface A is pre-configured with flash analysis rule 1 Interface connection attribute it is identical.At this point, since the DOWN events that interface A occurs, the continuous flash number of statistics interface A. And by the flash alarm threshold value k in the continuous flash number and flash analysis rule 11It is compared.If comparing continuous sudden strain of a muscle Disconnected number is more than or equal to flash alarm threshold value k1, it is determined that generate the interface flash alarm signal of interface A.If compared Continuous flash number is less than flash alarm threshold value k1, then the interface flash alarm signal of interface A is not generated.
By foregoing description it is found that the data in flash analysis rule 1 and flash analysis rule 2 are preconfigured, Therefore, different data be can be configured to.Based on this, the flash of each interface can be analyzed based on flash analysis rule and be carried out Refinement.For example, important interface can be done to more frequent flash analysis, and flash alarm signal is reported in time；It can also subtract The generation of few interface DOWN alarms；And to edge interface (interface for wherein, connecting PC is called edge interface) and unessential The flash analysis of (for example, being connected to the interface of the lower equipment of frequency of use) interface stops, and can provide Network Management System Calculating and concern to critical event, the performance of system for recycling.
In an optional embodiment of the present embodiment, as shown in figure 3, step S203, since the DOWN events, The continuous flash number that the target interface is counted based on the target flash analysis time window is included the following steps：
Step S301 counts the target interface and continuously performs object run number since the DOWN events, In, it executes an object run and is that the target interface switches to UP states by DOWN states in the first time window, and the Next DOWN states are switched to by the UP states in two time windows；
Step S302, using the number of target interface performance objective operation as the continuous flash of the target interface time Number, wherein the time interval between the operation of any two adjacent target is less than the time represented by the first time window.
Since target interface generate DOWN events, show target interface by normal condition be converted to off position (that is, DOWN states).If target interface is in the first time window, UP states are switched to by DOWN state transformations, and in the second time Next DOWN states are switched to by the UP states in window, it is determined that detect a flash, that is, execute an object run. After detecting a flash, if target interface is in the first time window, and switches to UP states by DOWN state transformations, And next DOWN states are switched to by the UP states in the second time window, it is determined that detect secondary flash, that is, execute Object run twice.
Wherein, above-mentioned first time window and the second time window are the flash analysis time described in above-described embodiment Window.The size of first time window and the second time window can be arranged in user according to actual needs.For example, when can be arranged first Between window be 3 seconds, and be arranged the second time window be 1 minute.In the case, if target interface is in 3 seconds, by DOWN shapes State transformation switches to UP states, and switches to DOWN states by UP states in 1 minute, it is determined that detects a flash, i.e., Execute an object run.After detecting a flash, if target interface in 3 seconds, and by DOWN state transformations UP states are switched to, and DOWN states are switched to by UP states in 1 minute, it is determined that detects secondary flash, that is, executes two Secondary object run.
In another embodiment, Fig. 4 be according to the flow chart of the alarm method of another interface of the embodiment of the present application, As shown in figure 4, this method comprises the following steps：
Step S401 determines the connection attribute of target interface after monitoring that DOWN events occur for target interface, In, the connection attribute is that the type of the opposite equip. connected according to the target interface determines；This step and above-mentioned step Rapid S102 is identical, and details are not described herein again；
Step S402 is judged in flash analysis rule based on connection attribute with the presence or absence of the flash to match with target interface Analysis operation, wherein flash analysis rule includes：Correspondence between the connection attribute and flash analysis operation of interface； This step is identical as above-mentioned steps S104, and details are not described herein again.If including thening follow the steps S403；It is no to then follow the steps S406；
Step S403 carries out flash analysis to the target interface according to the flash analysis operation to match, obtains Flash analysis result；
Step S404 judges if determining that flash has occurred in the target interface based on the flash analysis result Whether interface DOWN alarm signals are generated based on the DOWN events monitored；If it is judged that being to then follow the steps S405, it is no to then follow the steps S406；
Step S405 continues to determine whether to generate interface flash alarm signal based on the flash analysis result；If sentenced Breaking, it is no, and thens follow the steps S406；
Step S406 does not execute the operation that flash analysis is carried out to the target interface.
In the embodiment of the present application, monitor that target interface is transformed to not work by normal operating conditions in Network Management System When making state (that is, DOWN states), then DOWN events are generated.After generating DOWN events, the connection category of target interface is determined Property.Wherein, since Network Management System is when being managed the equipment in network environment, each equipment can be obtained SysOID, therefore, at this point, Network Management System can extract the target after determining the opposite equip. of the target interface The sysOID of the opposite equip. of interface determines the connection attribute of target interface according to the sysOID of opposite equip. in turn.
It should be noted that when extracting the sysOID of opposite equip., if the opposite equip. does not have sysOID, it is determined that The opposite equip. is PC (personal computer) machine.When the interface does not have opposite equip., then the connectionless category of the interface Property.
After getting the connection attribute of target interface, so that it may judged with to be based on connection attribute be in flash analysis rule It is no to there is the flash analysis operation to match with target interface.If it is judged that in the presence of then behaviour is analyzed according to the flash to match Make to carry out flash analysis to target interface, obtains flash analysis result.If determining that the target connects based on flash analysis result Flash at least once has occurred in mouth, then judges whether to generate interface DOWN alarm signals based on the DOWN events monitored；Such as Fruit is judged, then continues to determine whether to generate interface flash alarm signal based on flash analysis result.
It should be noted that being in the case where judging that flash has occurred in target interface, judgement is in the present embodiment It is no that interface DOWN alarm signals are generated based on DOWN events.If it is, flash analysis is continued to target interface, if It is no, then flash analysis is not continued to target interface.
In another embodiment, Fig. 5 be according to the flow chart of the alarm method of another interface of the embodiment of the present application, As shown in figure 5, this method comprises the following steps：
Step S501, after monitoring that DOWN events occur for target interface, what determination was connected with the target interface The equipment identification information of opposite equip., wherein the equipment identification information is connected for uniquely indicating with the target interface Opposite equip. type information；
The equipment identification information is converted to default identification information, and the default identification information is made by step S502 For the connection attribute of the target interface；
Step S503 judges to whether there is and the target interface phase in flash analysis rule based on the connection attribute The flash analysis operation matched, wherein the flash analysis rule includes：Between the connection attribute and flash analysis operation of interface Correspondence；This step is identical as step S104, is no longer described in detail herein；
Step S504 carries out flash analysis according to the flash analysis operation to match if identical to target interface, and Determine whether to generate interface flash alarm signal based on flash analysis result；This step is identical as step S106, herein no longer in detail Carefully repeat.
In the embodiment of the present application, monitor that target interface is transformed to not work by normal operating conditions in Network Management System When making state (that is, DOWN states), then DOWN events are generated.After generating DOWN events, the connection category of target interface is determined Property.In the present embodiment, it may be determined that the equipment identification information for the opposite equip. being connected with target interface.Then, by equipment Identification information is converted to default identification information, finally, using default identification information as the connection attribute of the target interface.Example Such as, the sysOID of each equipment is obtained, and using the sysOID as the equipment identification information of opposite equip..At this point, network management System is converted to pre- bidding after the sysOID for the opposite equip. for extracting the target interface, by the sysOID of the opposite equip. Know information and determines the connection attribute of target interface according to default identification information in turn.
It should be noted that when extracting the sysOID of opposite equip., if the opposite equip. does not have sysOID, it is determined that The opposite equip. is PC (personal computer) machine.When the interface does not have opposite equip., then the connectionless category of the interface Property.
After getting the connection attribute of target interface, so that it may judged with to be based on connection attribute be in flash analysis rule It is no to there is the flash analysis operation to match with target interface.If it is judged that in the presence of, then since the DOWN events monitored, Count the continuous flash number of target interface.And determine whether to generate interface flash alarm signal based on continuous flash number.
It should be noted that in the present embodiment, in addition to being determined according to the connection attribute of interface and flash analysis operation Except flash analysis rule, it is also based on the connection attribute of interface, the hierarchical role and flash analysis operation of opposite equip. To determine flash analysis rule.
May include access layer equipment, convergence-level equipment and core layer equipment for the opposite equip. of above-mentioned a certain type. Therefore, in the present embodiment, flash analysis rule can also be determined according to the hierarchical role belonging to opposite equip..
For example, if it is considered that the connection attribute of interface and the hierarchical role of opposite equip., then can be position in interchanger Corresponding flash analysis rule is determined in the interchanger of access layer；And determine corresponding flash analysis for the interchanger of convergence-level Rule；And determine corresponding flash analysis rule for the interchanger of core layer.
In the embodiment of the present application, flash analysis rule is configured through the above way, specified interface can be carried out Flash is analyzed, to obtain different flash when accomplishing that different interfaces carries out flash analysis based on corresponding flash analysis rule Analysis result, and make different alarm reactions；It can also be analyzed according to the significance level of interface to formulate different flash Rule reduces the flash analysis times etc. of edge interface and unessential interface for example, important interface does more frequent analysis Deng.
In another embodiment, Fig. 6 be according to the flow chart of the alarm method of another interface of the embodiment of the present application, As shown in fig. 6, this method comprises the following steps：
Step S601 determines the connection attribute of the target interface after monitoring that DOWN events occur for target interface, The connection attribute is that the type of the opposite equip. connected according to the target interface determines；
Step S602 determines the hierarchical role of opposite equip. that the target interface is connected in the network architecture, wherein The hierarchical role is access layer equipment or convergence-level equipment or core layer equipment；
Step S603 judges to whether there is in the flash analysis rule in conjunction with the connection attribute and the hierarchical role The flash analysis operation to match with the target interface, wherein the flash analysis rule includes：The connection attribute of interface Correspondence between the hierarchical role and the flash analysis operation；
Step S604, if including the flash analysis operation to match, is analyzed according to the flash to match Operation carries out flash analysis to the target interface, and determines whether that generating interface flash alarm believes based on flash analysis result Number.
In the present embodiment, after monitoring that DOWN events occur for target interface, the connection attribute of target interface is determined. And determine hierarchical role of the opposite equip. that is connected of target interface in the network architecture.
After determining connection attribute and hierarchical role, flash analysis rule is judged in conjunction with connection attribute and hierarchical role In with the presence or absence of the flash analysis operation that matches with target interface.If it is present according to the flash analysis operation to match Flash analysis is carried out to target interface.
For example, in the case, flash analysis rule can be expressed as：
Flash analysis rule 1：
Identification information " 11 "；Flash analysis time window t11With flash alarm threshold value k11；
Identification information " 12 "；Flash analysis time window t12With flash alarm threshold value k12；
Identification information " 13 "；Flash analysis time window t13With flash alarm threshold value k13。
Flash analysis rule 2：
Identification information " 21 "；Flash analysis time window t21With flash alarm threshold value k21。
Wherein, above-mentioned flash analysis rule 1 is the flash analysis rule of interchanger；Above-mentioned flash analysis rule 2 is routing The flash analysis rule of device.
It is assumed that in flash analysis rule 1, " identification information ' 11 '；Flash analysis time window t11With flash alarm threshold value k11" be access-layer switch flash analysis rule；" identification information ' 12 '；Flash analysis time window t12With flash alarm threshold value k12" it is the flash analysis rule for converging layer switch；" identification information ' 13 '；Flash analysis time window t13With flash alarm threshold value k13" be core layer switch flash analysis rule.
It is assumed that in flash analysis rule 2, " identification information ' 21 ' "；Flash analysis time window t21With flash alarm threshold value k21For the flash analysis rule of router.
According to the step described in above-mentioned steps S601 to step S604.First, the connection attribute of target interface is determined, if It determines that the opposite equip. of target interface is interchanger, then flash point can be carried out to target interface by flash analysis rule 1 Analysis.In flash analysis rule 1, include the flash analysis rule of access-layer switch, convergence layer switch and core layer switch Then.Therefore, in the present embodiment, hierarchical role of the interchanger determining target interface connected in the network architecture, if Determine that the hierarchical role of the interchanger is core layer switch, it is determined that pass through " identification information ' 13 '；Flash analysis time window t13With flash alarm threshold value k13" flash analysis is carried out to target interface.
In conclusion in the present embodiment, it can be according to the connection attribute of interface (alternatively, the class of the opposite equip. of interface Type) formulate flash analysis rule.In addition to this it is possible to the hierarchical role according to the opposite equip. of interface in the network architecture Flash analysis rule is formulated, for example, the equipment for core layer formulates one group of flash analysis rule, it is that the equipment of convergence-level is formulated First flash analysis rule can also be that access layer equipment formulates one group of flash analysis rule.In addition to this it is possible in conjunction with connecing Mouthful the type and opposite equip. hierarchical role in the network architecture of opposite equip. formulate flash analysis rule.By above-mentioned A variety of modes for formulating flash analysis rule enable to the mode that interface flash is analyzed more flexible various.
In an optional embodiment, determine opposite equip. that the target interface is connected in the network architecture Hierarchical role includes：
Obtain the facility information and link information of the opposite equip.；Wherein, in the facility information include equipment mark Know information and device attribute information, includes the identification information of target device in the link information, the target device is institute Equipment where stating target interface；
According to the facility information and link information, the device attribute information of the target device is determined；
According to the device attribute information, each hierarchical role of the opposite equip. in the network architecture is determined.
In the present embodiment, the facility information and link information of opposite equip. can be obtained；Then, according to facility information and The device attribute information of equipment (i.e. target device) where link information determines target interface；Finally, believed according to the device attribute It ceases to determine hierarchical role of the opposite equip. in the network architecture.
In another embodiment, a kind of alarm device of interface is additionally provided, the alarm device of the interface is mainly used for The alarm method for executing the interface that the embodiment of the present application the above is provided, below to interface provided by the embodiments of the present application Alarm device does specific introduction.
Fig. 7 is according to a kind of schematic diagram of the alarm device of interface of the embodiment of the present application, as shown in fig. 7, the interface Alarm device mainly include determination unit 10, judging unit 20 and analysis determination unit 30, wherein：
Determination unit 10, for after monitoring that DOWN events occur for target interface, determining the company of the target interface Attribute is connect, the connection attribute is that the type for the opposite equip. being connected according to the target interface determines；
Judging unit 20, for being judged in the flash analysis rule with the presence or absence of in the mesh based on the connection attribute The flash analysis operation that tag splice mouth matches, wherein the flash analysis rule includes：The connection attribute and flash of interface point Correspondence between analysis operation；
Determination unit 30 is analyzed, in the case where judging comprising the flash analysis operation to match, according to The flash analysis operation to match carries out flash analysis to the target interface, and is determined whether based on flash analysis result Generate interface flash alarm signal.
In the embodiment of the present application, by above-mentioned set-up mode, the connection attribute according to each interface can be accomplished come really Fixed corresponding flash analysis rule to obtain different flash analysis results, and is made different alarm reactions, and then is alleviated It can not basis caused by identical flash alarm mode due to being all made of for each interface in existing flash alarm technology The different connection attributes of distinct interface make the technical issues of different alarm reactions.
Optionally, the flash analysis operation includes flash analysis threshold value, and the flash analysis threshold value includes：Interface Flash alarm threshold value and/or flash analysis time window；The flash analysis time window is used to determine the number of interface generation flash, The number that the flash alarm threshold value is used to occur according to interface flash determines whether to carry out flash alarm.
Optionally, as shown in figure 8, analysis determination unit 30 includes：Analysis module 81, for according to the sudden strain of a muscle to match Target flash alarm threshold value in disconnected analysis operation and target flash analysis time window carry out flash point to the target interface Analysis；First determining module 82 determines whether to generate interface flash alarm signal for being based on flash analysis result.
Optionally, as shown in figure 9, analysis module 81 includes：Statistical module 91, for since the DOWN events, base The continuous flash number of the target interface is counted in the target flash analysis time window；First determining module 82, for working as When the continuous flash number is more than or equal to flash alarm threshold value, then the interface flash alarm signal is generated.
Optionally, statistical module 91 is used for：Since the DOWN events, counts the target interface and continuously perform target Number of operations, wherein it is that the target interface switches to UP by DOWN states in the first time window to execute an object run State, and next DOWN states are switched to by the UP states in the second time window；By the target interface performance objective Continuous flash number of the number of operation as the target interface, wherein the time between the operation of any two adjacent target Interval is less than the time represented by the first time window, and target flash analysis time window includes：First time window and when second Between window.
Optionally, as shown in Figure 10, analysis determination unit 30 further includes：Judgment module 101, for based on the flash In the case that analysis result determines that flash has occurred in the target interface, judge whether based on the DOWN events monitored Generate interface DOWN alarm signals；Second determining module 102, in the case where judging to be, being divided based on the flash Analysis result continues to determine whether to generate interface flash alarm signal.
Optionally, as shown in figure 11, determination unit 10：Third determining module 111, for determining and the target interface phase The equipment identification information of the opposite equip. of connection, wherein the equipment identification information is for uniquely indicating and the target interface The type information for the opposite equip. being connected；4th determining module 112, for the equipment identification information to be converted to pre- bidding Know information, and using the default identification information as the connection attribute of the target interface.
Optionally, which is additionally operable to：If it is judged that the connection attribute is matched in advance with the flash analysis rule The connection attribute for the interface set differs, then does not carry out flash analysis to the target interface.
Optionally it is determined that unit 10 is additionally operable to：After the connection attribute for determining the target interface, the target is determined Hierarchical role of the opposite equip. that interface is connected in the network architecture, wherein the hierarchical role is access layer equipment or converges Poly layer equipment or core layer equipment；Judging unit 20 is additionally operable to：In conjunction with described in the connection attribute and hierarchical role judgement With the presence or absence of the flash analysis operation to match with the target interface in flash analysis rule, wherein the flash analysis rule Include then：Correspondence between the connection attribute of interface and the hierarchical role and the flash analysis operation.
Optionally it is determined that unit 10 is additionally operable to：Obtain the facility information and link information of the opposite equip.；Wherein, institute It includes equipment identification information and device attribute information to state in facility information, includes the mark of target device in the link information Know information, the target device is equipment where the target interface；According to the facility information and link information, determine described in The device attribute information of target device；According to the device attribute information, determine each opposite equip. in the network architecture Hierarchical role.
The technique effect and preceding method embodiment phase of the device that the embodiment of the present application is provided, realization principle and generation Together, to briefly describe, device embodiment part does not refer to place, can refer to corresponding contents in preceding method embodiment.
The alarm method of the alarm device of interface provided by the embodiments of the present application, the interface provided with above-described embodiment has Identical technical characteristic reaches identical technique effect so can also solve identical technical problem.
In another embodiment, referring to Figure 12, the embodiment of the present application also provides a kind of Network Management System, including：Place Device 120, memory 121, bus 122 and communication interface 123 are managed, the processor 120, communication interface 123 and memory 121 are logical Cross the connection of bus 122；Processor 120 is for executing the executable module stored in memory 121, such as computer program.
Wherein, memory 121 may include high-speed random access memory (RAM, Random Access Memory), May further include non-labile memory (non-volatile memory), for example, at least a magnetic disk storage.By extremely A few communication interface 123 (can be wired or wireless) is realized logical between the system network element and at least one other network element Letter connection can use internet, wide area network, local network, Metropolitan Area Network (MAN) etc..
Bus 122 can be isa bus, pci bus or eisa bus etc..The bus can be divided into address bus, number According to bus, controlling bus etc..It for ease of indicating, is only indicated with a four-headed arrow in Figure 12, it is not intended that only one total Line or a type of bus.
Wherein, memory 121 is for storing program, and the processor 120 executes the journey after receiving and executing instruction Sequence, the method performed by device that the stream process that aforementioned the embodiment of the present application any embodiment discloses defines can be applied to handle In device 120, or realized by processor 120.
Processor 120 may be a kind of IC chip, the processing capacity with signal.It is above-mentioned during realization Each step of method can be completed by the integrated logic circuit of the hardware in processor 120 or the instruction of software form.On The processor 120 stated can be general processor, including central processing unit (Central Processing Unit, abbreviation CPU), network processing unit (Network Processor, abbreviation NP) etc.；It can also be digital signal processor (Digital Signal Processing, abbreviation DSP), application-specific integrated circuit (Application Specific Integrated Circuit, abbreviation ASIC), ready-made programmable gate array (Field-Programmable Gate Array, abbreviation FPGA) or Person other programmable logic device, discrete gate or transistor logic, discrete hardware components.It may be implemented or execute sheet Apply for disclosed each method, step and the logic diagram in embodiment.General processor can be microprocessor or the processing Device can also be any conventional processor etc..The step of method in conjunction with disclosed in the embodiment of the present application, can be embodied directly in Hardware decoding processor executes completion, or in decoding processor hardware and software module combination execute completion.Software mould Block can be located at random access memory, flash memory, read-only memory, programmable read only memory or electrically erasable programmable storage In the storage medium of this fields such as device, register maturation.The storage medium is located at memory 121, and processor 120 reads memory Information in 121, in conjunction with the step of its hardware completion above method.
In another embodiment of the application, a kind of non-volatile program generation that can perform with processor is additionally provided The computer-readable medium of code, said program code make the processor execute the method described in above method embodiment.
In addition, in the description of the embodiment of the present application unless specifically defined or limited otherwise, term " installation ", " phase Even ", " connection " shall be understood in a broad sense, for example, it may be being fixedly connected, may be a detachable connection, or be integrally connected；It can Can also be electrical connection to be mechanical connection；It can be directly connected, can also indirectly connected through an intermediary, Ke Yishi Connection inside two elements.For the ordinary skill in the art, above-mentioned term can be understood at this with concrete condition Concrete meaning in application.
In the description of the present application, it should be noted that term "center", "upper", "lower", "left", "right", "vertical", The orientation or positional relationship of the instructions such as "horizontal", "inner", "outside" be based on the orientation or positional relationship shown in the drawings, merely to Convenient for describing the application and simplify to describe, do not indicate or imply the indicated device or element must have a particular orientation, With specific azimuth configuration and operation, therefore it should not be understood as the limitation to the application.In addition, term " first ", " second ", " third " is used for description purposes only, and is not understood to indicate or imply relative importance.
It is apparent to those skilled in the art that for convenience and simplicity of description, the system of foregoing description, The specific work process of device and unit, can refer to corresponding processes in the foregoing method embodiment, and details are not described herein.
In several embodiments provided herein, it should be understood that disclosed systems, devices and methods, it can be with It realizes by another way.The apparatus embodiments described above are merely exemplary, for example, the division of the unit, Only a kind of division of logic function, formula that in actual implementation, there may be another division manner, in another example, multiple units or component can To combine or be desirably integrated into another system, or some features can be ignored or not executed.Another point, it is shown or beg for The mutual coupling, direct-coupling or communication connection of opinion can be by some communication interfaces, device or unit it is indirect Coupling or communication connection can be electrical, machinery or other forms.
The unit illustrated as separating component may or may not be physically separated, aobvious as unit The component shown may or may not be physical unit, you can be located at a place, or may be distributed over multiple In network element.Some or all of unit therein can be selected according to the actual needs to realize the mesh of this embodiment scheme 's.
In addition, each functional unit in each embodiment of the application can be integrated in a processing unit, it can also It is that each unit physically exists alone, it can also be during two or more units be integrated in one unit.
It, can be with if the function is realized in the form of SFU software functional unit and when sold or used as an independent product It is stored in the executable non-volatile computer read/write memory medium of a processor.Based on this understanding, the application Technical solution substantially the part of the part that contributes to existing technology or the technical solution can be with software in other words The form of product embodies, which is stored in a storage medium, including some instructions use so that One computer equipment (can be personal computer, server or the network equipment etc.) executes each embodiment institute of the application State all or part of step of method.And storage medium above-mentioned includes：USB flash disk, mobile hard disk, read-only memory (ROM, Read- Only Memory), random access memory (RAM, Random Access Memory), magnetic disc or CD etc. are various can be with Store the medium of program code.
Finally it should be noted that：Embodiment described above, the only specific implementation mode of the application, to illustrate the application Technical solution, rather than its limitations, the protection domain of the application is not limited thereto, although with reference to the foregoing embodiments to this Shen It please be described in detail, it will be understood by those of ordinary skill in the art that：Any one skilled in the art In the technical scope that the application discloses, it can still modify to the technical solution recorded in previous embodiment or can be light It is readily conceivable that variation or equivalent replacement of some of the technical features；And these modifications, variation or replacement, do not make The essence of corresponding technical solution is detached from the spirit and scope of the embodiment of the present application technical solution, should all cover the protection in the application Within the scope of.Therefore, the protection domain of the application shall be subject to the protection scope of the claim.

Claims (13)

1. a kind of alarm method of interface, which is characterized in that including：
After monitoring that DOWN events occur for target interface, the connection attribute of the target interface, the connection attribute are determined It is that the type of the opposite equip. connected according to the target interface determines；
Judge to analyze with the presence or absence of the flash to match with the target interface in flash analysis rule based on the connection attribute Operation, wherein the flash analysis rule includes：Correspondence between the connection attribute and flash analysis operation of interface；
If there is the flash analysis operation to match, then according to the flash analysis operation to match to the target Interface carries out flash analysis, and determines whether generation interface flash alarm signal based on flash analysis result.
2. according to the method described in claim 1, it is characterized in that, the flash analysis operation include flash analysis threshold value, The flash analyzes threshold value：The flash alarm threshold value and/or flash analysis time window of interface；The flash analysis time window For determining that the number of flash occurs for interface, the number that the flash alarm threshold value is used to occur according to interface flash determines whether Carry out flash alarm.
3. according to the method described in claim 2, it is characterized in that, according to the flash analysis operation to match to the mesh Tag splice mouth carries out flash analysis：
According to the target flash alarm threshold value and target flash analysis time window in the flash analysis operation to match, to institute It states target interface and carries out flash analysis.
4. according to the method described in claim 3, it is characterized in that, according to the target in the flash analysis operation to match Flash alarm threshold value and target flash analysis time window, carrying out flash analysis to the target interface includes：
Since the DOWN events, the continuous flash time of the target interface is counted based on the target flash analysis time window Number；
When the continuous flash number is more than or equal to the target flash alarm threshold value, then generates the interface flash and accuse Alert signal.
5. according to the method described in claim 4, it is characterized in that, the target flash analysis time window includes：At the first time Window and the second time window；
Since the DOWN events, the continuous flash time of the target interface is counted based on the target flash analysis time window Number includes：
It since the DOWN events, counts the target interface and continuously performs object run number, wherein execute a target Operation switches to UP states in the first time window for the target interface by DOWN states, and in second time window It is interior that next DOWN states are switched to by the UP states；
Using the number of target interface performance objective operation as the continuous flash number of the target interface, wherein arbitrary Time interval between two adjacent target operations is less than the time represented by the first time window.
6. according to the method described in claim 1, it is characterized in that, determining whether to generate interface flash based on flash analysis result Alarm signal includes：
If determining that flash has occurred in the target interface based on the flash analysis result, judge whether to be based on monitoring The DOWN events generate interface DOWN alarm signals；
If it is judged that being then to continue to determine whether to generate interface flash alarm signal based on the flash analysis result.
7. according to the method described in claim 1, it is characterized in that, determining that the connection attribute of the target interface includes：
Determine the equipment identification information for the opposite equip. being connected with the target interface, wherein the equipment identification information is used In the type information for the opposite equip. for uniquely indicating to be connected with the target interface；
The equipment identification information is converted into default identification information, and using the default identification information as the target interface Connection attribute.
8. according to the method described in claim 1, it is characterized in that, the method further includes：
If it is judged that there is no the flash analysis operations to match with the connection attribute in the flash analysis rule, then not Flash analysis is carried out to the target interface.
9. according to the method described in claim 1, it is characterized in that,
After the connection attribute for determining the target interface, the method further includes：Determine what the target interface was connected Hierarchical role of the opposite equip. in the network architecture, wherein the hierarchical role be access layer equipment or convergence-level equipment or Core layer equipment；
Judged in the flash analysis rule with the presence or absence of the flash to match with the target interface based on the connection attribute Analysis operation includes：Judge to whether there is and institute in the flash analysis rule in conjunction with the connection attribute and the hierarchical role State the flash analysis operation that target interface matches, wherein the flash analysis rule includes：The connection attribute of interface and institute State the correspondence between hierarchical role and the flash analysis operation.
10. according to the method described in claim 9, it is characterized in that, determining that the opposite equip. that the target interface is connected exists Hierarchical role in the network architecture includes：
Obtain the facility information and link information of the opposite equip.；Wherein, in the facility information include device identification letter Breath and device attribute information, include the identification information of target device in the link information, and the target device is the mesh Equipment where tag splice mouth；
According to the facility information and link information, the device attribute information of the target device is determined；
According to the device attribute information, each hierarchical role of the opposite equip. in the network architecture is determined.
11. a kind of alarm device of interface, which is characterized in that including：
Determination unit, for after monitoring that DOWN events occur for target interface, determining the connection attribute of the target interface, The connection attribute is that the type for the opposite equip. being connected according to the target interface determines；
Judging unit, for being judged in flash analysis rule with the presence or absence of in the target interface phase based on the connection attribute The flash analysis operation matched, wherein the flash analysis rule includes：Between the connection attribute and flash analysis operation of interface Correspondence；
Determination unit is analyzed, in the case where judging comprising the flash analysis operation to match, according to the phase Matched flash analysis operation carries out flash analysis to the target interface, and determines whether to generate based on flash analysis result and connect Mouth flash alarm signal.
12. a kind of Network Management System, including memory, processor and it is stored on the memory and can be in the processor The computer program of upper operation, which is characterized in that the processor realizes the claims 1 when executing the computer program To the method described in any one of 10.
13. a kind of computer-readable medium for the non-volatile program code that can perform with processor, which is characterized in that described Program code makes the processor execute any method in the claims 1 to 10.
CN201810365310.1A 2018-04-23 2018-04-23 Interface alarming method, device, network management system and computer readable medium Active CN108667655B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810365310.1A CN108667655B (en) 2018-04-23 2018-04-23 Interface alarming method, device, network management system and computer readable medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810365310.1A CN108667655B (en) 2018-04-23 2018-04-23 Interface alarming method, device, network management system and computer readable medium

Publications (2)

Publication Number Publication Date
CN108667655A true CN108667655A (en) 2018-10-16
CN108667655B CN108667655B (en) 2021-09-07

Family

ID=63780253

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810365310.1A Active CN108667655B (en) 2018-04-23 2018-04-23 Interface alarming method, device, network management system and computer readable medium

Country Status (1)

Country Link
CN (1) CN108667655B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113890815A (en) * 2021-10-18 2022-01-04 中国电子科技集团公司第三十四研究所 Method and system for monitoring and alarming frequent UP/DOWN of network equipment port

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101247265A (en) * 2008-03-06 2008-08-20 华为技术有限公司 Alarm processing method, device and system
CN101958803A (en) * 2010-09-09 2011-01-26 中兴通讯股份有限公司 Alarm compression system and method based on communication network
CN103326874A (en) * 2012-03-22 2013-09-25 西门子公司 System and method for alarm management
US20130254471A1 (en) * 2007-03-28 2013-09-26 Kabushiki Kaisha Toshiba Device and memory system for memory management using access frequency information
CN107026745A (en) * 2016-01-29 2017-08-08 华为技术有限公司 Alert processing method and alarming processing equipment

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130254471A1 (en) * 2007-03-28 2013-09-26 Kabushiki Kaisha Toshiba Device and memory system for memory management using access frequency information
CN101247265A (en) * 2008-03-06 2008-08-20 华为技术有限公司 Alarm processing method, device and system
CN101958803A (en) * 2010-09-09 2011-01-26 中兴通讯股份有限公司 Alarm compression system and method based on communication network
CN103326874A (en) * 2012-03-22 2013-09-25 西门子公司 System and method for alarm management
CN107026745A (en) * 2016-01-29 2017-08-08 华为技术有限公司 Alert processing method and alarming processing equipment

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113890815A (en) * 2021-10-18 2022-01-04 中国电子科技集团公司第三十四研究所 Method and system for monitoring and alarming frequent UP/DOWN of network equipment port

Also Published As

Publication number Publication date
CN108667655B (en) 2021-09-07

Similar Documents

Publication Publication Date Title
US11108619B2 (en) Service survivability analysis method and apparatus
US8510445B2 (en) System management method and system management apparatus
WO2016095516A1 (en) Complex event processing method, apparatus and system
US11887015B2 (en) Automatically-generated labels for time series data and numerical lists to use in analytic and machine learning systems
CN103378980A (en) Method for correlation analysis of layer network alarm with business and device thereof
CN103678531A (en) Friend recommendation method and friend recommendation device
CN114024884B (en) Test method, test device, electronic equipment and storage medium
EP4024765A1 (en) Method and apparatus for extracting fault propagation condition, and storage medium
US11757701B2 (en) Method for recommending similar incident, and related device
CN105025254B (en) A kind of multi-platform monitoring terminal system development approach
CN111130821B (en) Power failure alarm method, processing method and device
CN113904950B (en) Stream-based network monitoring method and device, computer equipment and storage medium
WO2015182629A1 (en) Monitoring system, monitoring device, and monitoring program
CN113452576B (en) Method and device for monitoring network environment, storage medium and electronic device
CN108667655A (en) Alarm method, device, Network Management System and the computer-readable medium of interface
KR20180130295A (en) Apparatus for predicting failure of communication network and method thereof
CN111315026B (en) Channel selection method, device, gateway and computer readable storage medium
CN109067622A (en) State detection method, apparatus and network server
CN109104376A (en) A kind of retransmission method of data, device, stack equipment and computer-readable medium
CN112532467B (en) Method, device and system for realizing fault detection
CN107566143B (en) Longitudinal stacking discovery method and device
CN109462617A (en) Device talk behavioral value method and device in a kind of local area network
CN109257348A (en) A kind of cluster bug excavation method and device based on industrial control system
CN110932975B (en) Flow table issuing method, data forwarding method and device and electronic equipment
CN112637119A (en) Host scanning method and device, storage medium and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant