JP2011244095A - Network monitoring system and network monitoring method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform existence confirmation at a short time without increasing a load on a network and a monitoring controller.SOLUTION: In a network monitoring system including a plurality of monitored apparatuses connected to a network and a monitoring controller monitoring the monitored apparatuses, the monitoring controller MS1 stores attribute information of the plurality of the monitored apparatuses in a monitored apparatus data storage MS112, executes grouping for the plurality of the monitored apparatuses in accordance with the attribute information, and stores it in a grouping correspondence table MS113. The monitoring controller MS1 sets IP address of the other monitored apparatuses in the same group to each of the grouped monitored apparatuses in accordance with the grouping correspondence table MS113. Each of the monitored apparatuses confirms the existence of the other monitored apparatuses in the same group in accordance with the set IP address.

Description

  Embodiments described herein relate generally to a network monitoring system and a network monitoring method for confirming the existence of a plurality of monitored devices connected to a network.

  When the monitoring and control device checks the existence of a large number of monitored devices on the network, if the number of monitored devices increases, the load on the monitoring and control device that must be checked within a certain period of time increases. Since many packets flow through the network, the network load increases. For this reason, when the number of monitored devices is extremely large, measures such as improving the performance of the monitoring control device or widening the network bandwidth are taken, and the monitored device acts as a survivor confirmation function in response to an instruction from the monitoring control device. In other words, it is devised that the monitored device autonomously confirms the existence of other monitored devices.

JP-A-6-175944

  However, in the conventional technology, when the number of monitored control devices becomes enormous, the load on a specific monitored control device increases, or when the monitored devices are grouped, the number of groups increases and the load on the monitoring control device increases. As a result, the failure detection / recovery time for confirmation of survival takes a long time.

  An object of the present embodiment is to provide a network monitoring system and a network monitoring method capable of performing survival confirmation in a short time without increasing the load on the network or the monitoring control device.

  The network monitoring system according to the present embodiment is a network monitoring system including a plurality of monitored devices connected to a network and a monitoring control device that monitors the monitored devices. Storage means for storing the attribute information of the monitored devices, grouping means for grouping the plurality of monitored devices based on the attribute information, and each of the grouped monitored devices in the same group Setting means for setting an IP (Internet Protocol) address of another monitored device, and each of the monitored devices is configured to have another monitored device in the same group based on the set IP address. A confirmation means for confirming survival is provided.

  The network monitoring method according to the present embodiment is a method used in a network monitoring system including a plurality of monitored devices connected to a network and a monitoring control device that monitors the monitored devices. In the control device, a storage step of storing attribute information of the plurality of monitored devices, a grouping step of grouping the plurality of monitored devices based on the attribute information, and the grouped monitored devices A setting step of setting an IP (Internet Protocol) address of another monitored device in the same group, and in the monitored device, the other device in the same group based on the set IP address. It has the confirmation step which confirms survival of a to-be-monitored apparatus, It is characterized by the above-mentioned.

It is a figure which shows the structure of the network monitoring system which concerns on this embodiment. It is a block diagram which shows the structure of a monitoring control apparatus. It is a figure which shows the survival confirmation operation | movement in this system. It is a figure which shows the group matching table of Example 1. FIG. It is a figure which shows the group matching table of Example 2. FIG. It is a figure which shows the group matching table of Example 3. It is a figure which shows the group matching table of Example 4. It is a figure which shows the group matching table of Example 5. It is a figure which shows the survival confirmation operation | movement of Example 6. FIG. FIG. 10 is a diagram illustrating a survival confirmation operation according to the seventh embodiment.

  Hereinafter, a network monitoring system and a network monitoring method according to the present embodiment will be described with reference to the drawings.

  FIG. 1 is a diagram illustrating a configuration of a network monitoring system according to the present embodiment.

  A large number of monitored devices and a monitoring control device MS1 for confirming their existence are connected by a network NW. The monitoring control device MS1 includes means for setting an IP (Internet Protocol) address in the monitored device, and the monitored device periodically transmits a survival confirmation packet to the IP address set by the monitoring control device MS1, Means is provided for notifying the monitoring control device MS1 when there is no normal response.

  In FIG. 1, a network NW is connected to base stations BS1 and BS2, IP exchanges EX1 and EX2, separated base stations (control unit: BBU) B1, separated base station (radio unit: RRU) via switches SW1 and SW2. R1 and R2 and radio terminals PS1, PS2 and PS3 are connected to constitute a radio network. The monitoring control device MS1 performs monitoring control of the base stations BS1 and BS2, the IP exchanges EX1 and EX2, and the separated base stations B1, R1 and R2 via the network NW as monitored devices.

  FIG. 2 is a block diagram showing a configuration of the monitoring control device MS1. The monitoring control device MS1 is composed of an active server MS11, a standby server MS12, and a display / operation unit MS13. In FIG. 2, the redundant configuration includes the active server MS11 and the standby server MS12. However, the redundant configuration may include only the active server MS11. In FIG. 2, since the active server MS11 and the standby server MS12 have the same configuration, the redundant description is omitted, and the standby server MS12 is described only when necessary. The operational server MS11 includes an arithmetic unit MS111, a monitored device data storage unit MS112, a group association table storage unit MS113, and an IP interface MS114 that performs communication with the display / operation unit MS13 and communication with the monitored device.

  The monitoring control device MS1 creates a database of attribute information including the device type of the monitored device, the exchange installed / accommodated, the ID of the monitored device, the IP address of the monitored device, and the monitored device data storage unit MS112. , MS122. The group association table storage unit MS113 stores data and group information necessary for grouping monitored devices, and the survival confirmation operation is performed by the arithmetic units MS111 and MS121 based on this information. Further, the monitoring control device MS1 transmits a survival confirmation packet to the monitored device, and determines whether or not a normal response has been received from the monitored device.

  The monitored device sets the IP address of the monitored device that is the subject of the life confirmation by the monitoring control device MS1 in order to confirm the existence of the other monitored devices, and stores the IP address for this life confirmation. . When the monitoring control device MS1 sets the survival confirmation IP address, the monitored control device periodically transmits the survival confirmation packet to the IP address and receives a normal response. Determine. When the normal response is not received, the monitored device notifies the monitoring control device MS1 of a failure.

  When the monitoring control device MS1 updates the group association table stored in the group association table storage units MS113 and MS123, the monitoring device MS1 assigns the monitored device to any group and applies to other monitored devices in the group. An IP address for existence confirmation is set in the monitored apparatus so that the existence confirmation is performed. For example, when a new monitored device is added, the following procedure is used.

(11) The monitoring control device MS1 adds a new monitored device to the monitored device data storage unit MS112.
(12) Assign a new monitored apparatus to any one group.
(13) Select one existing monitored device registered in the group.
(14) The survival confirmation IP address set in the existing monitored device is set in the new monitored device.
(15) A new IP address of the monitored device is set as the survival confirmation IP address of the existing monitored device.

  Since the monitoring control device MS1 holds the group association table and sets the survival confirmation IP address in the monitored device in this way, all monitored devices perform the survival confirmation of different monitored devices. The existence confirmation of a large number of monitored devices can be performed without increasing the load on the monitoring control device MS1.

  FIG. 3 shows the survival confirmation operation of the system configured by the above procedure. The monitored devices NE1, NE2, NE3 are assigned to group number 1 by the above procedure. The monitoring control device MS1 sets the IP address of the other monitored device in the group (for example, the monitored device NE2) as the survival confirmation IP address for the monitored device NE1. Similarly, the IP address of the monitored device NE3 is set as the survival confirmation IP address of the monitored device NE2, and the IP address of the monitored device NE1 is set as the survival confirmation IP address of the monitored device NE3. In this way, all the monitored devices in the group perform the survival confirmation operation, so that the survival confirmation can be performed in a short time without increasing the load on the monitored devices and the monitoring control device due to the increase in the number of monitored devices. Is possible.

Next, a method for automatically performing grouping will be described according to each embodiment.
Example 1
The monitored device is connected to the network NW via a LAN, and is a table (hereinafter referred to as ARP (Address Resolution Protocol)) that associates an IP address for transmitting an IP packet with a physical address (MAC (Media Access Control) address). ) Is called a table. The monitoring control device MS1 reads out the ARP table held by each monitored device, and associates the physical address included in the ARP table with the monitored device ID and the assigned group (hereinafter referred to as an ARP-group correspondence table). Are stored in the group association table storage units MS113 and MS123 of the monitoring control device MS1. The allocation procedure is as follows.

(21) Read the ARP table from the monitored device NE1.
(22) The ARP-group correspondence table stores the physical address included in the ARP table and the monitored device ID of the monitored device NE1, and assigns group number 1.
(23) The ARP table is read from the next monitored device NE2.
(24) The physical address stored in the ARP-group correspondence table is compared with the physical address described in the newly read ARP table, and if there is a duplicate, the group number 1 indicates the monitored device NE2 Add a monitored device ID and a physical address that does not overlap. If there is no duplicate physical address, a new group number 2 is assigned.
(25) All monitored devices are assigned to groups by repeating the above (23) and (24).

  FIG. 4 shows an example in which the ARP table is read from the monitored devices NE1, NE2, NE3 and assigned to a group. According to the above procedure, first the ARP table of the monitored device NE1 is read, the physical addresses MAC1, MAC2, MAC3 and the monitored device ID of the monitored device NE1 are registered in the ARP-group correspondence table, and group number 1 is assigned. Next, the ARP table of the monitored device NE2 is read, and the physical addresses MAC4 and MAC5 are compared with the ARP-group correspondence table. Since there is no duplication, the physical addresses MAC4 and MAC5 and the monitored device ID of the monitored device NE2 are newly set. Is assigned to registration group number 2. Of the physical addresses included in the ARP table of the monitored device NE3, MAC2 and MAC3 overlap with the physical address of the group number 1. Therefore, the physical addresses MAC6 and 6 included in the ARP table of the monitored device NE3 and the monitored device NE3. MAC7 is added to group number 1.

  According to the technique of the first embodiment, the monitored devices arranged in the same segment on the LAN can be grouped together. Therefore, when the survival confirmation packet is transmitted to the monitored device of the same group, the packet is segmented. Since it does not go outside, even if the survival confirmation packet is frequently transmitted, an increase in network traffic can be minimized.

(Example 2)
The monitored device holds a default gateway address (hereinafter referred to as a default GW) in order to communicate using the LAN. The monitoring control device MS1 has a function of setting or reading the default gateway address of the monitored device, and a table (hereinafter referred to as a GW-group correspondence table) that associates the default GW and the monitored device ID with the group number is a group. The monitored devices having the same default GW are grouped in the association table storage units MS113 and MS123.

  FIG. 5 illustrates the procedure of the second embodiment. When the default GW held by each monitored device NE1, NE2, NE3, NE4 is GW1, GW2, GW3, GW1, respectively, the monitored device NE1, Since NE2 and NE3 have different default GWs, group number 1, group number 2, and group number 3 are assigned, respectively. Since the default GW of the monitored device NE4 is GW1 and the group number 1 is assigned, the monitored device NE4 is added to the group number 1.

  According to the method of the second embodiment, monitored devices having the same default gateway address can be grouped. Therefore, when a survival confirmation packet is transmitted to a monitored device in the same group, the packet is connected to one default GW. Therefore, even if the survival confirmation packet is frequently transmitted, an increase in network traffic can be minimized.

(Example 3)
The monitored device holds an IP address and a subnet mask in order to communicate using the LAN. The monitoring control device MS1 has a function of setting or reading the IP address and subnet mask of the monitored device, and a table (hereinafter referred to as a network) that associates a network address obtained by the logical product of the IP address and the subnet mask with the monitored device. Address-group correspondence table) is held in the group association table storage units MS113 and MS123, and the monitored devices having the same network address are grouped.

  FIG. 6 illustrates the procedure of the third embodiment. The IP addresses held by the monitored devices NE1, NE2, NE3 are NE-IP1, NE-IP2, NE-IP3, respectively, and the subnet mask is all SNET1. . When the logical product of the IP address and the subnet mask is NADR1, NADR2, and NADR1, respectively, the monitored device NE1 and the monitored device NE2 have different logical products of the IP address and the subnet mask in NADR1 and NADR2, respectively. Assigned to group number 2. Since the logical product of the IP address of the monitored device NE3 and the subnet mask is the same NADR1 as the monitored device NE1, the monitored device NE3 is added to the group number 1.

  According to the technique of the third embodiment, monitored devices having the same network address can be grouped. Therefore, when a survival confirmation packet is transmitted to monitored devices in the same group, the packet does not go out to a network with a different subnet. Therefore, even if the survival confirmation packet is frequently transmitted, an increase in network traffic can be minimized.

Example 4
The ID of the monitored device is composed of, for example, 12 digits. As shown in FIG. 7, the device identifier (1 digit), prefecture code (3 digits), exchange code (4 digits), ID (3 digits), serial number (1 Digit). The monitoring control device MS1 is held in the group association table storage units MS113 and MS123 in which monitored devices installed in the same prefecture or the same switching station are grouped by the prefecture code or switching station code in the monitored device ID. To do. When the ID of the monitored device includes a municipal code, the monitored devices installed in the same municipality can be grouped by the municipal code.

  FIG. 7 shows an example of grouping by switching center code. The monitored device can incorporate the L2SW, and when a plurality of monitored devices are installed in one exchange, the monitored devices that do not incorporate the L2SW share the L2SW of the monitored device that incorporates the L2SW. When grouping by switching center code, the survival confirmation packet is transmitted to the monitored device of the same switching center sharing the L2SW, so that the survival confirmation packet is less likely to be sent outside the switching center. There is an effect to.

(Example 5)
The monitored device has a GPS (Global Positioning System) function or holds position information (latitude and longitude). The monitoring control device MS1 has a function of setting or reading latitude and longitude information (hereinafter referred to as monitored device position information) of the monitored device, and a table (hereinafter referred to as position) that associates the monitored device position information with a group. (Referred to as a group correspondence table) is held in the group association table storage units MS113 and MS123, and the monitored devices installed for each area within a certain range are grouped. FIG. 8 shows an example of the position-group correspondence table, and the group number can be uniquely determined by the monitored apparatus position information (latitude and longitude).

  According to the method of the fifth embodiment, monitored devices installed in the same area can be grouped. Therefore, when a survival confirmation packet is transmitted to a monitored device in the same group, the packet does not go out to a different area. Even if the survival confirmation packet is frequently transmitted, an increase in network traffic can be minimized.

(Example 6)
Although the monitored devices are grouped according to each of the above embodiments, when the number of monitored devices belonging to one group increases as a result of the grouping, a plurality of grouping means can be used in combination. Even if the number of monitored devices increases due to the grouping method, it is possible to suppress the load on the monitoring and control device and the load on the network traffic, but on the other hand, the problem that it is difficult to detect a wide area failure occurs, In the sixth embodiment, as shown in FIG. 9, the survival check of the monitored device by the monitoring control device MS1 is also used.

  After grouping the monitored devices, the monitoring control device MS1 determines a representative monitored device in the group, transmits a survival confirmation packet to the representative monitored device, and the response is normal. It is determined whether or not. If not normal, a survival confirmation packet is transmitted to all monitored devices belonging to the group, and it is determined whether the response is normal. According to the sixth embodiment, it is possible to detect a failure even when all monitored devices in the group cannot communicate with the monitoring control device MS1 due to a wide area failure.

(Example 7)
Further, when there are a large number of groups, it is possible to reduce the load on the monitoring control device MS1 by performing a survival check hierarchically between the groups. The monitored device stores the second survival confirmation IP address, and the monitoring control device MS1 determines a representative monitored device (hereinafter referred to as a representative monitored control device) in each group. The monitoring control device MS1 sets the address of the representative monitored device of the other group as the second survival confirmation IP address in the representative monitored control device. If this process is repeated, as shown in FIG. 10, the survival confirmation is performed in a multi-loop form, and the survival confirmation between the groups can also be performed by the monitored apparatus, so there is an effect of reducing the load on the monitoring control apparatus MS1.

  In the seventh embodiment, the second survival confirmation IP address is used in order to distinguish the survival confirmation failure detected by the monitored control device in the group from the survival confirmation failure detected by the representative monitored device. However, the first survival confirmation IP address may be set so as to perform the survival confirmation between groups without using the second survival confirmation IP address.

  As described above, according to the present embodiment, the load on a specific monitored device or monitoring control device is increased even if the number of monitored devices increases, by confirming the existence of all monitored devices equally. Therefore, failure detection / recovery by survival confirmation can be performed in a short time.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

  MS1 ... monitoring control device, NW ... network, SW1, SW2 ... switch, B1 ... separated base station (control unit), R1, R2 ... separated base station (radio unit), BS1, BS2 ... base station, EX1, EX2 ... IP exchange, MS11 ... active server, MS12 ... standby server, MS13 ... display / operation unit, MS111, MS121 ... calculation unit, MS112, MS122 ... monitored device data storage unit, MS113, MS123 ... group association table storage Part, MS114, MS124... IP interface.

Claims (16)

A network monitoring system comprising a plurality of monitored devices connected to a network and a monitoring control device for monitoring the monitored devices,
The monitoring and control device includes:
Storage means for storing attribute information of the plurality of monitored devices;
Grouping means for grouping the plurality of monitored devices based on the attribute information;
Setting means for setting an IP (Internet Protocol) address of another monitored device in the same group for each of the grouped monitored devices,
Each of the monitored devices is
A network monitoring system comprising: confirmation means for confirming the existence of other monitored devices in the same group based on the set IP address. The monitoring control device further includes a reading unit that reads an ARP (Address Resolution Protocol) table from each of the monitored devices,
The storage means stores a MAC (Media Access Control) address included in the ARP table in the attribute information,
The network monitoring system according to claim 1, wherein the grouping unit groups monitored devices that hold an ARP table including the same MAC address based on the attribute information. The storage means stores a default gateway address of the monitored device in the attribute information,
The network monitoring system according to claim 1, wherein the grouping unit groups monitored devices having the same default gateway address based on the attribute information. The storage means stores the network address of the monitored device in the attribute information;
The network monitoring system according to claim 1, wherein the grouping unit groups monitored devices having the same network address based on the attribute information. The storage means stores, in the attribute information, a device identifier including any of an exchange, a prefecture, a municipality where the monitored device is installed,
2. The network monitoring system according to claim 1, wherein the grouping means groups monitored devices belonging to the same exchange, prefecture or municipality based on the attribute information. The storage means stores position information of the monitored device in the attribute information,
The network monitoring system according to claim 1, wherein the grouping unit groups monitored devices installed for each area within a certain range based on the attribute information.   The monitoring control device performs survival confirmation for any one monitored device in the grouped monitored devices, and when there is no normal response, all the monitored devices in the group to which the monitored device belongs The network monitoring system according to claim 1, further comprising means for confirming the existence of the network. The setting means further sets an IP address of a monitored device of another group for the monitored device,
The network monitoring system according to claim 1, wherein the confirmation unit further confirms the existence of the monitored device of the other group based on the set IP address of the monitored device of the other group. A method used in a network monitoring system comprising a plurality of monitored devices connected to a network and a monitoring control device for monitoring the monitored devices,
In the monitoring control device,
A storage step of storing attribute information of the plurality of monitored devices;
A grouping step of grouping the plurality of monitored devices based on the attribute information;
A setting step of setting an IP (Internet Protocol) address of another monitored device in the same group for each of the grouped monitored devices,
In the monitored device,
A network monitoring method comprising a confirmation step of confirming the existence of other monitored devices in the same group based on the set IP address. The monitoring control device further includes a reading step of reading an ARP (Address Resolution Protocol) table from each of the monitored devices,
The storing step stores a MAC (Media Access Control) address included in the ARP table in the attribute information,
The network monitoring method according to claim 9, wherein the grouping step groups monitored devices that hold an ARP table including the same MAC address based on the attribute information. The storing step stores a default gateway address of the monitored device in the attribute information;
The network monitoring method according to claim 9, wherein the grouping step groups monitored devices having the same default gateway address based on the attribute information. The storing step stores a network address of the monitored device in the attribute information;
The network monitoring method according to claim 9, wherein the grouping step groups monitored devices having the same network address based on the attribute information. The storing step stores, in the attribute information, a device identifier including any of an exchange, a prefecture, and a municipality where the monitored device is installed,
10. The network monitoring method according to claim 9, wherein the grouping step groups monitored devices belonging to the same exchange, prefecture, or municipality based on the attribute information. The storing step stores position information of the monitored device in the attribute information;
The network monitoring method according to claim 9, wherein the grouping step groups monitored devices installed for each area within a certain range based on the attribute information.   In the supervisory control device, all the monitored devices in the group to which the monitored device belongs are checked for survival for any one of the grouped monitored devices and there is no normal response. The network monitoring method according to claim 9, further comprising a step of performing survival confirmation on the network. The setting step further sets an IP address of a monitored device of another group for the monitored device,
The network monitoring method according to claim 9, wherein the confirmation step further confirms the existence of the monitored device of the other group based on the set IP address of the monitored device of the other group.

Images