JP2008171077A - System and method for monitoring network system, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To flexibly monitor and diagnose various network systems without requiring any high level technical knowledge of a network. <P>SOLUTION: This monitoring system 1 for monitoring a process control system configured by connecting a control server 100, switching hubs 200 and pieces of network equipment 300, is provided with: a ping issue part 14 for transmitting a response request to equipment on a process control system based on a network definition sheet 13d prepared by Excel; a diagnostic part 15 for diagnosing the state of each equipment based on a response from each equipment on the process control system to the ping issue by the ping issue part 14; and a display control part 16 for displaying the diagnostic result by the diagnostic part 15 on the display device 11 by reflecting it on a network configuration diagram sheet 13c prepared by Excel. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a monitoring system, method, and computer program suitable for monitoring and diagnosing a process control system in, for example, the steel industry.

  In process control systems in the steel industry and the like that require high reliability in 24-hour operation, dedicated computers and networks have been used so far, but there have been difficulties in terms of cost reduction and scalability.

  Therefore, in recent years, specifications have been released, and the introduction of open systems using general-purpose products is progressing. However, the scale of application increases, and the number and combination of general-purpose products becomes enormous when the needs to realize a high-functional system applying the latest IT technology from the operation department are met. In particular, since the network affects the entire system, and the phenomenon is irregular and non-reproducible, the difficulty of investigating the cause of the failure and the recovery work becomes high.

  Because it is unrealistic for highly specialized network specialists to wait 24 hours on multiple distributed process control systems, network specialists can remotely monitor and diagnose multiple systems Attempts were made to introduce dedicated systems and tools. However, in monitoring and diagnosing the process control system, it is indispensable to carry out operations while grasping the operation of field operators who are not on the computer, hearing the operation status, and the status of facilities with limitations in ITV.

  As this type of technology, for example, Patent Document 1 discloses a network system performance diagnosis method and apparatus for linking network design information and device operation statistical information. However, it can be used by network specialists, but it requires expert knowledge, and it has not been solved that it is difficult to master the tools of the high-function system.

JP 2002-99469 A

  Operators working 24 hours on site and workers in maintenance departments who are waiting for the maintenance of the entire facility, while looking at the situation at the site, do not require advanced network expertise. There was no inexpensive, versatile and easy-to-use tool that could flexibly monitor and diagnose complex process control systems.

  The present invention has been made in view of the above points, and an object thereof is to enable flexible monitoring and diagnosis of various network systems without requiring advanced network expertise.

The network system monitoring system according to the present invention is a network system monitoring system for monitoring and diagnosing a network system configured by connecting a plurality of devices, and the network configuration diagram showing the configuration of the network system is represented by spreadsheet software. A network configuration diagram storing means for storing the network configuration diagram sheet created in step 1 and a network for storing a network definition sheet in which network information and a definition including the device information set for the device set in the network configuration diagram sheet are created by spreadsheet software Based on a definition storage means, a response request issuing unit for transmitting a response request to the devices on the network system based on the network definition sheet, and diagnosing the status of each device based on a response from each device to the response request You And diagnostic means, having said diagnostic result by the diagnosis means in that a display control means for displaying on the display device is reflected on the network configuration diagram sheet.
The network system monitoring method of the present invention is a network system monitoring method for monitoring and diagnosing a network system configured by connecting a plurality of devices. Using the storage means for storing the network configuration sheet created in the spreadsheet, and the network definition sheet created by using spreadsheet software for the network information and the definition including the device information for the devices set in the network configuration diagram sheet. Based on a network definition sheet stored in the means, a response request issuance process for transmitting a response request to a device on the network system, and a state of each device is diagnosed based on a response from each device to the response request Diagnostic process and the diagnostic process That has a characteristic diagnostic results in that it has a display control process of displaying on the display device to reflect the network configuration diagram sheet stored in said storage means.
A computer program according to the present invention is a computer program that causes a computer to execute processing for monitoring and diagnosing a network system configured by connecting a plurality of devices, and represents a network configuration diagram that illustrates the configuration of the network system. Using a storage means for storing a network configuration sheet created with calculation software, and a network definition sheet created with spreadsheet software, including network information and a definition including the device information about the devices set in the network configuration diagram sheet; Based on the network definition sheet stored in the storage means, a response request issuance process for transmitting a response request to a device on the network system, and a status of each device based on a response from each device to the response request Diagnostic processing to diagnose, Serial having said diagnosis result of the diagnostic process in that to execute a display control process of displaying on the display device to reflect the network configuration diagram sheets stored in the storage unit to the computer.

  According to the present invention, the state of each device is diagnosed based on the network configuration diagram sheet or network definition sheet created by the spreadsheet software, and the diagnosis result is displayed on the display device. Various network systems can be flexibly monitored and diagnosed without the need. As a result, even a field worker who is not a network expert can easily monitor and diagnose the network system by changing the monitoring and diagnosis parameters as needed while grasping the situation of the field. Furthermore, since the network configuration diagram sheet and the network definition sheet are created by spreadsheet software, it is inexpensive and versatile, and can be easily applied to a plurality of distributed network systems.

Preferred embodiments of the present invention will be described below with reference to the accompanying drawings.
FIG. 1 shows a configuration example of a process control system including a monitoring system to which the present invention is applied. A plurality of switching hubs 200 are connected to the control server 100 that controls the entire process. In FIG. 1, the control server 100 is illustrated as a single device, but may be configured by a plurality of devices.

  The switching hub 200 is installed for each system such as a manufacturing process control system, an HMI (Human Machine Interface) system, and an upper system that supervises the manufacturing process control system. A plurality of network devices 300 such as sensors, personal computers, and hubs are connected.

  A monitoring system 1 for monitoring and diagnosing the process control system is connected to these switching hubs 200 via the switching hub 2. As described in detail below, the monitoring system 1 functions as (1) a ping issue monitoring tool, (2) a CRC error monitoring tool, and (3) a packet capture tool.

(Functional configuration of the monitoring system 1)
FIG. 2 shows a functional configuration of the monitoring system 1. Reference numeral 11 denotes a display device. Reference numeral 12 denotes an input device such as a keyboard or a pointing device.

  A worksheet storage unit 13 stores a worksheet created by spreadsheet software (for example, Excel (registered trademark)). As the worksheet, a common definition sheet 13a, an execution schedule sheet 13b, a network configuration diagram sheet 13c, a network definition sheet 13d, a ping result sheet 13e, a ping log sheet 13f, an SW list sheet 13g, and an SW monitoring log sheet 13h are created. Yes.

  A ping issuing unit 14 transmits a response request to a device on the process control system based on the network definition sheet 13d (ping issuance). Note that ping is generally the most basic command used in a TCP / IP network to check whether an IP packet has reached a transmission destination or whether it can be reached in IP.

  Reference numeral 15 denotes a diagnosis unit, which diagnoses the state of each device based on a response from each device on the process control system to the ping issuance by the ping issuing unit 14. In this embodiment, not only the presence / absence of a response but also the time until the response is returned is checked. Then, the diagnosis result is output to the ping result sheet 13e.

  Reference numeral 16 denotes a display control unit which reflects the diagnosis result of the diagnosis unit 15 on the network configuration diagram sheet 13c and displays it on the display device 11. For example, on the network configuration diagram sheet 13c, a non-response device is displayed in red, and a slow response device is displayed in yellow.

  Reference numeral 17 denotes a CRC (Cyclic Redundancy Check) error monitoring unit that performs CRC error monitoring based on the SW list sheet 13g. CRC is called cyclic redundancy check, and is one of error detection / correction methods for checking whether data is correctly transmitted by data transmission or the like. On the process control system, there are devices for accumulating the number of occurrences of CRC errors, for example, switching hubs 200 for each system, and the number of occurrences of CRC errors that are a precursor of trouble is collected from these devices.

  A log output unit 18 outputs a log to the ping log sheet 13f when the result of ping issue monitoring is NG, and logs to the SW monitoring log sheet 13h when a CRC error occurs during CRC error monitoring. Output.

  A capture unit 19 collects packets on the process control system via the switching hub 200 of each system.

  The monitoring system 1 may be configured by a plurality of devices or a single device. For example, (1) a ping issue monitoring tool and (2) a personal computer functioning as a CRC error monitoring tool, and (3) a personal computer functioning as a packet capture tool may be configured.

(worksheet)
As shown in FIG. 3, the common definition sheet 13a is for setting a ping issue default designation, a diagnosis execution mode, and a batch file when an error occurs. Specifically, as shown in Table 1 below, set the number of ping repetitions, execution interval, block size, timeout, TTL, execution mode, and execution file name (path, batch file, startup number limit) when an error occurs .

  As shown in FIG. 4, the execution schedule sheet 13b is for designating execution schedules for ping issue monitoring and CRC error monitoring. Specifically, as shown in Table 2 below, the execution cycle, execution day, start interval, start time, and execution mode are set. Also, whether the schedule is currently being executed or stopped is displayed.

  The network configuration diagram sheet 13c is a diagram showing the configuration of the process control system as shown in FIG. As described above, the display control unit 16 displays the corresponding device on the network configuration diagram sheet 13c by enclosing the color corresponding to the diagnosis result by the diagnosis unit 15, so that the portion to be discolored is surrounded by the cell combination. Leave in. The network configuration diagram sheet 13c is always created at the design stage of the process control system and is also used at the maintenance operation stage, and is taken in for network monitoring.

  As shown in FIG. 6, the network definition sheet 13d has network information (host name, IP address, connected device code) and device information (device type, manufacturer, model name) for each device set in the network configuration diagram sheet 13c. And so on. Specifically, as shown in Table 3 below, the connection number, device code, network information, device information, design information (row, column), installation location, size, and timeout are set. As described above, the ping issuing unit 14 transmits a response request to the device on the process control system based on the network definition sheet 13d.

  As shown in FIG. 7, the ping result sheet 13e is for outputting the result of ping issuance monitoring, and displays not only the NG count and OK count but also the success rate. As described above, the diagnosis unit 15 outputs a diagnosis result to the ping result sheet 13e.

  Although not specifically illustrated, the ping log sheet 13f outputs a log when the result of ping issue monitoring is NG, and sets the items of the result, date, target, IP address, status, and remarks. . As described above, when the result of ping issue monitoring is NG, the log output unit 18 outputs a log to this ping log sheet 13f.

  The SW list sheet 13g is for setting switching hub information for monitoring a CRC error, as shown in FIG. Specifically, the CRC error monitoring period is set, and the IP address of each switching hub and the row and column of the switching hub arranged in the network configuration diagram sheet are set. Also, an object ID in which the number of CRC errors is stored is set.

  Although not specifically shown, the SW monitoring log sheet 13h is for outputting a log when a CRC error occurs during CRC error monitoring. As described above, when a CRC error occurs during CRC error monitoring, the log output unit 18 outputs a log to the SW monitoring log sheet 13h.

((1) PING issue monitoring tool)
When a command button (not shown) is operated on the display device 11, a ping issue operation screen 900 is displayed on the display device 11, as shown in FIG. In the ping issue operation screen 900, reference numeral 901 denotes a selection button for selecting whether to execute “all node diagnosis (infinite)”, “all node diagnosis (schedule)”, or “all node diagnosis (once)”. . Reference numeral 902 denotes a diagnosis stop button for instructing to stop the diagnosis. Reference numeral 903 denotes a setting field for setting a device code when performing a trace route search. Here, the trace route is a path of a node for returning a response at the time of executing ping. Reference numeral 904 denotes a search start button for instructing start of trace route search. Reference numeral 905 denotes a ping button for instructing execution of ping when performing a trace route search. Reference numeral 906 denotes a button for referring to the ping result sheet 13e. Further, the ping issuance operation screen 900 indicates that the initial state is white, the ping issuance is blue, the abnormality (no response) is red, and the unstable (slow response) is yellow. .

  FIG. 10 shows the flow of the ping issue process. First, the data of the network definition sheet 13d is acquired (step S1001). Next, the device code of the own terminal is acquired based on the network definition sheet 13d (step S1002). If the device code of the own terminal cannot be acquired, an error message is output, and then the process ends. Next, all combinations of the own terminal and other terminals are acquired based on the network definition sheet 13d (step S1003). Next, if the search start button 904 and the PING button 905 are pressed, each process is executed (step S1004 (see FIG. 12), S1005 (see FIG. 13)). If the search is not a trace route search, the processes in steps S1004 and S1005 are repeated for the number of acquisitions without pressing the search start button 904 and the PING button 905. Then, the PING result is reflected on the network configuration diagram sheet 13c and displayed, and a PING log sheet 13f is created (step S1006).

  When the “all node diagnosis (one time)” button of the selection buttons 901 on the ping issue operation screen 900 is pressed, if the execution mode set in the common definition sheet 13a is PING or both, FIG. As shown, a PING issue process is executed (step S1101 (see FIG. 10)). Further, when the execution mode set in the common definition sheet 13a is CRC or both, the CRC error accumulation is acquired (step S1102).

  When the “all node diagnosis (infinite)” button of the selection buttons 901 on the ping issue operation screen 900 is pressed, the processing of FIG. 11 is repeated until the diagnosis stop button 902 is pressed.

  When the “all node diagnosis (schedule)” button among the selection buttons 901 on the ping issue operation screen 900 is pressed, the schedule is set according to the schedule set in the execution schedule sheet 13b until the diagnosis stop button 902 is pressed. Repeat the process.

  FIG. 12 shows processing when the search start button 904 is pressed in step S1004. When the search start button 904 is pressed, a trace route search of the ping issue destination device code is performed from the input ping issue source device code. First, it is checked whether the device code set in the setting field 903 of the ping issue operation screen 900 is set in the internal information of the network configuration diagram sheet 13c, and whether the device code input to the issuer device code is the local terminal. Is checked (step S1201). Next, the trace route from the ping issuing source device code to the ping issuing destination device code is acquired from the internal information (step S1201).

  FIG. 13 shows processing when the ping button 905 is pressed in step S1005. When the ping button 905 is pressed, a ping is issued between the trace routes acquired by the processing when the search start button 904 is pressed. First, the trace route of the ping issue destination is output from the ping issue source acquired by the processing when the search start button 904 is pressed to the search route of the ping result sheet 13e (step S1301). Next, an IP address is acquired from the ping issue destination device code from the internal information (step S1302). Next, a ping is issued to the IP address acquired in step S1302 (step S1303). Next, the network configuration diagram sheet 13c is displayed based on the output result, and if it is NG, a log is output to the ping log sheet 13f (step S1304).

((2) CRC error monitoring tool)
When a command button (not shown) is operated on the display device 11, an SNMP SW monitoring screen 800 is displayed on the display device 11 together with the SW list sheet 13g as shown in FIG. The SNMP SW monitoring screen 800 displays a list of devices that accumulate the number of CRC error occurrences set in the SW list sheet 13g.

  When the CRC error number acquisition button 801 is pressed, the number of CRC errors (counter total value) in the SW list sheet 13g is updated. When the CRC error monitoring button 802 is pressed, the network configuration diagram sheet 13c is displayed, and CRC error monitoring is started every monitoring period. If a CRC error is detected during CRC error monitoring, a log is output to the SW monitoring log sheet 13h. When the monitoring stop button 803 is pressed, CRC error monitoring is stopped.

((3) Packet capture tool)
The capture unit 19 extracts, outputs, and analyzes a message that matches a specified condition using data obtained by capturing a packet on the process control system. For the analysis, Ethereal can be used, and Excel analysis is also possible. In the analysis by Excel, the result converted into the csv format can be read and displayed. As a linkage function, the analysis result can be output in the message trace tool format.

  First, the capture method will be described. In the capture setting screen 1400 shown in FIG. 14, the network adapter 1401 used for capture is selected in the setting column 1401. Next, the IP address and port number of the transmission source / destination are designated in the setting column 1402. In this case, if "*" is specified, it is executed for all values. Next, the protocol (TCP, UDP, all) to be captured is selected in the setting column 1403. Next, “capture” is selected with the radio button 1404. Next, the save destination of the capture result is designated in the setting field 1405. Thereafter, when a capture execution button 1406 is pressed, capture is executed. To stop the capture, a capture stop button 1407 is pressed.

  Next, an analysis setting method will be described. As shown in FIG. 15, when “Excel analysis” is selected with the radio button 1404, the screen changes according to the setting as described below. To start the analysis, the analysis button 1408 is pressed after setting each condition.

  When a protocol is selected in the setting field 1403, a message type list 1409 is displayed as shown in FIG. Therefore, when a message type (Csemi standard transmission, Csemi PIO transmission) is selected, a filter condition setting field 1410 is displayed. FIG. 15 shows a state in which a filter condition setting field 1410 is displayed when Csemi standard transmission is selected. Csemi is an abbreviation for “NS SEMI SYSTEM (registered trademark)” and is an application that acts as a bridge between application software that performs process control and Windows (registered trademark) NT (registered trademark), a general-purpose software. It is a middleware for human control. With regard to Csemi, the technology is disclosed in Nippon Steel Technical Bulletin No363 1997 and Nippon Steel Technical Bulletin No379 2003 by the present applicant.

  In this embodiment, in the case of “Csemi standard transmission” of the protocol “TCP”, as shown in FIG. 15, in the output setting column 1411, the output setting (record size, logical) of the binary file (.bin) for the message trace tool Line number, number of records, transmission / reception type).

  Further, as shown in FIG. 15, an Excel analysis setting field 1412 becomes valid, and options for analysis are designated there. Here, you can select the capture date and time, the analysis method, and the output format. In other words, the capture date and time (start point) and the capture date and time (end point) are designated (the start and end points of automatic merging). In addition to selecting whether to start automatically or not, the software to be used for analysis is specified. Select the check box to output a dump of the data part when outputting the csv file. In the setting field 1405, the name of the target file to be searched is specified. If the beginning of the file name matches, it becomes a search target. (Files that meet the conditions are subject to automatic merging).

  A display filter is applied under the conditions of the analysis tab, and the result is displayed. When the automatic activation check box in the Excel analysis setting field 1412 is turned on, Excel or Ethereal is automatically activated. In the case of Excel automatic activation, the csv output result can be confirmed. Since there is an inquiry about whether to enable the macro after starting Excel, enable it. Thereafter, a csv file to be read is browsed to display a list of analysis data (see FIG. 16). In the case of the automatic startup of Ethereal, the result of applying the display filter under the conditions of the analysis tab can be confirmed on the Ethereal.

  Next, an example of using the message trace tool will be described. As shown in FIG. 17A, on the message trace tool, a file output in the message trace format (for example, xxx_TraceTool.bin) and a destination for saving the definition document are designated. A message definition document must be created in advance.

  Then, as shown in FIG. 17B, the message to be displayed is selected in the following manner. First, a definition re-read button 1701 is pressed to read a definition document, and a message No. is selected in a column 1702 to display a list of messages in a column 1703. When a message to be displayed in the field 1703 is selected, the message content is displayed as shown in FIG.

  FIG. 18 is a block diagram illustrating an example of a computer system that can configure the monitoring system 1 described above. In FIG. 18, 1800 is a computer (PC). A PC 1800 includes a CPU 1801 and executes device control software stored in a ROM 1802 or a hard disk (HD) 1811 or supplied from a flexible disk drive (FD) 1812 to collectively control each device connected to the system bus 1804. To control. Each functional unit of the present embodiment is configured by a program stored in the CPU 1801, the ROM 1802, or the hard disk (HD) 1811 of the PC 1800.

  Reference numeral 1803 denotes a RAM which functions as a main memory, work area, and the like of the CPU 1801. Reference numeral 1805 denotes a keyboard controller (KBC), which controls to input a signal input from the keyboard (KB) 1809 into the system main body. Reference numeral 1806 denotes a display controller (CRTC) which performs display control on a display device (CRT) 1810. A disk controller (DKC) 1807 stores a boot program (startup program: a program for starting execution (operation) of hardware and software of a personal computer), a plurality of applications, an edit file, a user file, a network management program, and the like. Access to the hard disk (HD) 1811 and the flexible disk (FD) 1812 is controlled. Reference numeral 1808 denotes a network interface card (NIC), which performs bidirectional data exchange with other network devices or other PCs via the LAN 1813.

  An object of the present invention is to supply a program of software that realizes the functions of the above-described embodiments to a system or apparatus, and a computer code (or CPU or MPU) of the system or apparatus stored in a storage medium. Needless to say, this can also be achieved by reading and executing.

  In this case, the program itself read from the storage medium realizes the functions of the above-described embodiments, and the program itself and the storage medium storing the program constitute the present invention. As a storage medium for supplying the program, for example, a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a nonvolatile memory card, a ROM, or the like can be used.

It is a figure which shows the structural example of the process control system containing the monitoring system to which this invention is applied. It is a figure which shows the function structure of the monitoring system which monitors a process control system. It is a figure for demonstrating a common definition sheet | seat. It is a figure for demonstrating an execution schedule sheet | seat. It is a figure for demonstrating a network block diagram sheet. It is a figure for demonstrating a network definition sheet. It is a figure for demonstrating a ping result sheet | seat. It is a figure for demonstrating SW list sheet. It is a figure which shows a ping issuing operation screen. It is a flowchart which shows the flow of a ping issuing process. It is a flowchart which shows the process at the time of pushing down the "all node diagnosis (once)" button. It is a flowchart which shows the process at the time of pressing of a search start button. It is a flowchart which shows the process at the time of pressing of a ping button. It is a figure which shows a capture setting screen. It is a figure which shows a capture setting screen. It is a figure which shows the list display screen of analysis data. It is a figure which shows the screen at the time of message trace tool use. It is a block diagram which shows an example of the computer system which can comprise a monitoring system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Control server 200 Switching hub 300 Network apparatus 11 Display apparatus 12 Input device 13 Worksheet storage part 14 Ping issuing part 15 Diagnosis part 16 Display control part 17 CRC error monitoring part 18 Log output part 19 Capture part

Claims (7)

In a network system monitoring system that monitors and diagnoses a network system configured by connecting multiple devices,
A network configuration diagram storing means for storing a network configuration diagram sheet created by a spreadsheet software that represents the configuration of the network system in a diagram;
Network definition storage means for storing a network definition sheet in which network information and a definition including the device information for the device set in the network configuration diagram sheet are created by spreadsheet software;
A response request issuing unit that transmits a response request to a device on the network system based on the network definition sheet;
Diagnostic means for diagnosing the state of each device based on the response from each device to the response request;
A monitoring system for a network system, comprising: a display control means for reflecting a diagnosis result by the diagnosis means on the network configuration diagram sheet and displaying the result on a display device.   2. The network system monitoring system according to claim 1, wherein the display control unit displays the corresponding device on the network configuration diagram sheet in a color according to a diagnosis result by the diagnosis unit.   3. The network system monitoring system according to claim 1, wherein a transmission execution schedule of the response request command can be set by an execution schedule sheet created by spreadsheet software.   4. A CRC error monitoring means for monitoring a CRC error based on a device list sheet in which a list for setting device information for monitoring a CRC error is created with spreadsheet software. The network system monitoring system according to claim 1.   The network system monitoring system according to claim 1, further comprising capture means for collecting data on the network system. In a network system monitoring method for monitoring and diagnosing a network system configured by connecting a plurality of devices,
A network configuration diagram sheet in which a network configuration diagram that represents the configuration of the network system is created by spreadsheet software, and a definition including network information and device information for the devices set in the network configuration diagram sheet by spreadsheet software Use storage means to store the created network definition sheet,
A response request issuing process for transmitting a response request to a device on the network system based on the network definition sheet stored in the storage unit;
Diagnostic processing for diagnosing the state of each device based on the response from each device to the response request;
A network system monitoring method comprising: a display control process in which a diagnosis result of the diagnosis process is reflected on a network configuration diagram sheet stored in the storage unit and displayed on a display device. A computer program that causes a computer to execute processing for monitoring and diagnosing a network system configured by connecting a plurality of devices,
A network configuration diagram sheet in which a network configuration diagram that represents the configuration of the network system is created by spreadsheet software, and a definition including network information and device information for the devices set in the network configuration diagram sheet by spreadsheet software Use storage means to store the created network definition sheet,
A response request issuing process for transmitting a response request to a device on the network system based on the network definition sheet stored in the storage unit;
Diagnostic processing for diagnosing the state of each device based on the response from each device to the response request;
A computer program for causing a computer to execute a display control process in which a diagnostic result of the diagnostic process is reflected on a network configuration diagram sheet stored in the storage unit and displayed on a display device.

Images