JP2998249B2 - Network monitoring method - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention is used in a network monitoring system. In particular, the present invention relates to a flow control unit of an interface between a network to be monitored and a network monitoring device.

[0002]

2. Description of the Related Art In order to manage a large-scale communication network, it is necessary to centrally manage fault notification of each network component occurring in the network and to notify an operator almost in real time. For this purpose, each network component device has an abnormality detecting means, and when an abnormality is detected, transmits a failure notification message to the network monitoring device via the network interface device. In the conventional network monitoring method, as shown in FIG. 2, failure notifications a from the sub-networks 1a and 1n are collected in the network interface devices 2a and 2n, where they are converted into an interface format suitable for the line to the network monitoring device 3. Then, the network monitoring device 3 is notified as it is. According to this method, when a failure occurs in the entire sub-network 1a (1n) and the traffic of the failure notification a increases and the traffic of the line exceeds the processing speed of the network monitoring device 3, the failure message is sent to the network interface device. 2a,
2n and network monitoring buffers 20a and 30
a (20n and 30n). Buffers 20a and
In order to prevent abnormal operation of the system or loss of messages due to the overflow of 30a (20n and 30n), buffer capacity sufficient to prevent buffer overflow even if individual failure notification occurs to all devices under the subnetwork 1a (1n) It is necessary to have

[0003]

In such a conventional system, a failure of the entire sub-network, particularly a failure of the central office in a sub-network having a star topology, or a heavy rain near the central office in a wireless communication network. In the case of line disconnection with all local stations due to the above, a large number of fault notifications are sent to the network monitoring device in a short time, and may exceed the processing capability of the network monitoring device. If a sufficient buffer capacity cannot be secured for the network monitoring device and the network interface device for economic reasons, there is a disadvantage that the function of the network monitoring system stops.
In order to avoid this drawback in the conventional method, it is necessary to set the input buffer of the network monitoring device and the buffer size of the network interface device to a size that can cope with the worst case. There is a disadvantage that the processing time increases due to the increase in the number of queues and the processing capacity of the network monitoring device is wasted.

An object of the present invention is to eliminate such a drawback and to provide a network monitoring system in which the buffer size in the system does not become excessive.

[0005]

SUMMARY OF THE INVENTION The present invention provides a network monitoring device for centrally monitoring a plurality of sub-networks,
A network monitoring system comprising: a network interface device for temporarily storing individual fault information of devices under the sub-network concentrated for each sub-network, and sequentially transmitting the stored content to the network monitoring device via a line; The network interface device is configured to indicate the status of one of the sub-networks as an indication of the status of the sub-network when detecting a failure throughout the sub-network.
Degeneration status information in which a plurality of pieces of fault information are bundled into one piece of fault information is generated, and degeneration status information transmitting means for transmitting this degeneration status information to the network monitoring device is provided.

[0006] The degraded status information transmitting means, the line state monitor for comparing the status management table that holds the status of a device under sub-network, the information amount and the threshold value of trouble information from one network simultaneously transferred A circuit readout unit for detecting the occurrence of a simultaneous failure when the amount of failure information exceeds a threshold value and generating degeneration status information for the subnetwork based on the contents of the state management table; simultaneous failure occurring convey individual fault notification notified from the subordinate subnetwork to the network monitoring apparatus except the event is characterized by the configuration in which a filter unit for transmitting degeneration status information to the network monitoring device.

[0007]

When a simultaneous failure has occurred, an individual failure notification from the subordinate sub-network is transmitted to the network monitoring device, and when a simultaneous failure occurs, degeneration status information is transmitted to the network monitoring device. As a result, it is possible to prevent a large amount of fault information from being generated at the same time, thereby preventing traffic from becoming excessive, and to suppress an increase in buffer size.

[0008]

An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing the configuration of this embodiment. In this embodiment, as shown in FIG. 1, a network monitoring device 3 for centrally monitoring a plurality of sub-networks 1 and individual fault information of devices under the sub-networks concentrated for each sub-network 1 are temporarily stored in a buffer 20. And a network interface device 2 for sequentially transmitting the stored contents to the buffer 30 of the network monitoring device 3 via the line 4. Further, as a characteristic feature of the present invention, the status of the devices under the sub-network 1 , A line status monitor circuit 25 that compares the information amount of fault information transferred simultaneously from one sub-network 1 with a threshold, and the line status monitor circuit 25 determines that the information amount of fault information When the number exceeds the threshold, it is detected as a simultaneous failure, and based on the contents of the state management table 23, A table reading unit 24 for creating the degeneration status information, and an individual failure notification sent from the subordinate network is transmitted to the network monitoring device 3 except when a simultaneous failure occurs, and the degeneration status information is transmitted to the network monitoring device when a simultaneous failure occurs. And a filter unit 26 that performs the filtering.

Next, the operation of this embodiment will be described. Subnetwork 1 is one of the sub-network to be monitored, and a network device identified by the identifier V ₁ ~V _n. Each network device has means for detecting its own hardware failure or line disconnection with the center station in the case of a star network.
Is notified to the network interface device 2. Further, when a failure of the network device is detected on the center station side, a similar failure notification is sent to the network interface device 2. In the network interface device 2, the failure notification a is sent from the network side to the failure notification input unit 21.
And the table writing unit 22 and the filter unit 26
And input. State management table 23, as shown in FIG. 3, has an entry for every device subnetworks 1 under each entry holds the status of the corresponding device and the device identifier V _n (fault, normal). The status is updated by the table writing unit 22. A line status monitor circuit 25 in the network interface device 2 monitors traffic flowing on the line 4 between the network interface device 2 and the network monitoring device 3, and a failure notification message of a predetermined threshold or more within a unit time is issued. When it is detected, a simultaneous failure under the subnetwork is declared, and control signals b and c are transmitted to the filter unit 26 and the table reading unit 24. When the simultaneous failure occurrence is notified by the signal c, the table reading unit 24 sets the state management table 23
The time required for all of the content to be updated (i.e.,
This is the time required for collecting all the failure notifications from the sub-network, and the status of each device is obtained by polling, so the time corresponding to the polling cycle) is read out, and the contents of the status management table 23 are read out. As shown, a degeneration status information message e including the states V ₁ , V ₂ ,..., V _n of all devices under the subnetwork is generated and transmitted to the filter unit 26. Filter section 26
Receives the individual failure notification d and the degeneration status information e shown in FIG.
Operates as a control input. If the signal b is other than the occurrence of the simultaneous failure, the filter unit 26 outputs the individual failure notification d to the network monitoring device 3, and outputs the degeneration status information e when the simultaneous failure occurs. As a result, the number of messages output to the network monitoring device 3 and the number of bytes of the entire message are greatly reduced at the time of simultaneous failure of the subnetwork, and the capacities of the buffers 20 and 30 may be small.
The network monitoring device 3 determines two types of messages from the network interface device 2, updates the status management table of the network monitoring device 3, and notifies the operator of the occurrence of a failure. FIG. 6 is a sequence diagram showing this operation. The individual faults in the time section in the figure are filter-mounted, and all the fault notifications shown in (1) are written in the state management table 23.

[0010]

As described above, according to the present invention, when a simultaneous failure of a sub-network occurs, a failure notification coming from all the devices under the sub-network is not directly sent to the network monitoring apparatus, but the state management table is used. Is used to convert a plurality of failure notifications into one degenerated status information and notify the network monitoring device.
Limit message traffic coming into the network monitor, overflow the network monitor,
This has the effect of preventing overload. Further, in the steady state, the fault of the network device is notified to the network monitoring device as it is, so that the time from the occurrence of the fault to the notification of the operator on the network monitoring device is the same as the conventional one, and the real-time property can be ensured.

[Brief description of the drawings]

FIG. 1 is a circuit diagram showing a configuration of an embodiment of the present invention.

FIG. 2 is a circuit diagram showing a configuration of a conventional example.

FIG. 3 is a configuration diagram of a state management table.

FIG. 4 is a format diagram of an individual failure notification.

FIG. 5 is a format diagram of degeneration status information corresponding to all devices under one subnetwork.

FIG. 6 is a sequence diagram showing the operation of the embodiment of the present invention.

[Explanation of symbols]

 1, 1a, 1n Subnetwork 2, 2a, 2n Network Interface Device 3 Network Monitoring Device 4 Line 20, 30 Buffer 21 Failure Notification Input Unit 22 Table Writing Unit 23 Status Management Table 24 Table Reading Unit 25 Line Status Monitoring Circuit 26 Filter Department

────────────────────────────────────────────────── ─── Continuation of the front page (56) References JP-A-4-252533 (JP, A) JP-A-4-103244 (JP, A) JP-A-3-195142 (JP, A) JP-A-2- 246554 (JP, A) JP-A-2-216931 (JP, A) JP-A-1-212138 (JP, A) JP-A-62-67950 (JP, A) JP-A-59-219053 (JP, A) (58) Field surveyed (Int.Cl. ⁷ , DB name) H04L 12/24 H04L 12/26 H04L 12/28 JICST file (JOIS)

Claims (1)

(57) [Claims] 1. Centralized monitoring of a plurality of sub-networks
Network monitoring device and each sub-network
Failure information of devices under the sub-network concentrated in the network
Is stored temporarily, and the stored contents are sequentially
Network interface transmitted to network monitoring device
In a network monitoring method including a network device, the network interface device includes:
Network for one of its networks
Of this sub-network when a failure
Multiple failures in one failure information to indicate status
Generates degeneration status information that aggregates information, and
Compression for transmitting status information to the network monitoring device
Equipped with withdrawal status information transmission means, The degeneration status information transmitting means is configured to communicate with the subnet network.
Status management table that holds the status of the devices under the network
Failure information transmitted simultaneously from one network
Line state monitor circuit that compares the information amount of
The line status monitor circuit has exceeded the threshold information amount of fault information.
Status management table
Based on the contents of the
A table reading unit that creates status information,
Individuals notified from subordinate sub-networks except when harm occurs
A separate failure notification is transmitted to the network
In case of harm, monitor the degradation status information in the network
And a filter unit for transmitting to the device. Characterized by
Network monitoring method.