JP4558662B2 - IP network path diagnosis device and IP network path diagnosis system - Google Patents

Description

  The present invention relates to an IP network route diagnosis apparatus and an IP network route diagnosis system for diagnosing a route state of an IP (Internet Protocol) network.

  FIG. 13 is a diagram schematically showing an outline of a conventional network monitoring system. In this network monitoring system, a client or server used by a user is connected to an IP network via a network device such as a router, and a monitoring center having a monitoring device for managing the network device is provided. In this network monitoring system, the monitoring equipment installed in the monitoring center observes the MIB (Management Information Base) of the network equipment under management of the monitoring center, and pings (Packet Internet Groper) to the network equipment under management It is common to monitor the status of network devices by doing so. However, as shown in FIG. 13, when the route of the network used by the user is different from the route for accessing the device to be monitored from the monitoring center, even if the user is facing a problem, It can be missed.

  In order to avoid this problem, it is necessary for the monitoring apparatus to monitor not only the status of the managed “network device” but also the status of the “path” used by the user. As a device and method for monitoring such a route, a communication performance measurement system has been conventionally proposed (for example, see Patent Document 1). FIG. 14 is a diagram illustrating a conventional example of a network communication performance measurement system. This communication performance measurement system includes a client 401, an access point 403 that accommodates the client 401, and servers 404a and 404b. In a network that is mutually connected by a router 402, a communication environment equivalent to that of the client 401 is established. The performance measuring apparatus 410 provided is arranged at the access point 403. By measuring the time required to establish a connection with the server 404a or 404b or the time required for downloading a file from the server 404a or 404b by the performance measuring device 410, the client 401 The service quality experienced by the user is accurately evaluated. However, in today's rapidly increasing number of network users (clients 401) and servers 402 that provide services, the above-described performance measuring devices 410 are used to measure the communication performance of individual clients 401 and individual servers 402, respectively. In other words, the installation and operation of the performance measuring apparatus 410 is expensive.

  Therefore, a path diagnosis method that eliminates the need for the additional performance measuring device 410 as shown in FIG. 14 is proposed in Patent Document 1. FIG. 15 is a diagram showing a conventional example of a system configuration for executing this route diagnosis method. In this system, a communication performance measuring device 510 capable of communicating with a branch point node is arranged in a network system including a branch point node 503 existing on a path between a client 501 and a server 502. In this method, the server 502 is accessed from the communication performance measuring apparatus 510 via the branch point node 503, and the performance of the path from the client 501 to the server 502 is measured from a predetermined delay model based on the response time as a result. ing.

Japanese Patent No. 3696806

  However, in the technique of Patent Document 1 shown in FIG. 15 described above, it is possible to diagnose the performance of a route if the network configuration is known and if it is known that it matches a predetermined delay model. However, when the network configuration is unknown, there is a problem that it is difficult to diagnose the path performance.

  The present invention has been made in view of the above, and enables the diagnosis of a route even when the network configuration on the route to be diagnosed is not grasped, and does not require the arrangement of the device at the user site, and the route diagnosis is inexpensive. An object of the present invention is to obtain an IP network path diagnosis apparatus and an IP network path diagnosis system that can perform the above.

In order to achieve the above object, an IP network path diagnosis apparatus according to the present invention is an IP network path diagnosis apparatus that diagnoses a communication path between network devices of an IP network to which a plurality of network devices that relay communication are connected. Route information storage means for storing route information including a start point address and an end point address of the route for a route between network devices under the management of the own device in the IP network, and the route information at a predetermined timing. A path information reading function for reading path information from the storage means and a network device at the start address in the path information provided from the path information reading function, provided according to the type of path diagnosis executable by the network apparatus. And the end point address in the route information from the network device A source address to configure the route monitoring instruction function to execute the route diagnostics to network equipment to the network equipment of the source address, and the route monitor indicating means having, the route information in the route information storage means, above start point address Device type management information for managing the association with the type of network device corresponding to the device type, and the device type-route monitoring instruction for managing the association between the type of network device and the route monitoring instruction function usable for that type Function correlation information; model information storage means for storing; and result evaluation means for determining whether or not a route corresponding to the route information is normal using a diagnosis result from the network device at the start address. wherein the route information reading function, after reading the route information from the route information storage means, contained in the route information The network device type corresponding to the point address is acquired from the device type management information of the model information storage unit, and the device type path monitoring function usable for the acquired device type is the device type-path of the model information storage unit. The route information acquired from the monitoring instruction function association information is transferred to the acquired type of route monitoring instruction function .

  According to the present invention, it is possible to diagnose a route even if the network configuration on the route to be diagnosed is not grasped, and it is not necessary to arrange a device for monitoring a dedicated network state at a user site or server. . As a result, an inexpensive IP network route monitoring device can be obtained.

  Exemplary embodiments of an IP network path diagnosis device and an IP network path diagnosis system according to the present invention will be explained below in detail with reference to the accompanying drawings. Note that the present invention is not limited to these embodiments.

Embodiment 1 FIG.
1-1 is a diagram schematically showing a network configuration having an IP network path diagnosis apparatus according to the present invention, and FIG. 1-2 is a configuration of Embodiment 1 of the IP network path diagnosis apparatus according to the present invention. It is a block diagram which shows typically. As shown in FIG. 1-1, a network device 2 such as a router or a switch is connected to each other, and an IP network path diagnosis device 10 is connected to an IP network 1 that can communicate by TCP (Transmission Control Protocol) / IP. It is the composition which becomes. A network device 2 such as a router or a switch has a remote operation function for remote operation such as TELNET or SSH (Secure SHell) for setting and maintenance of the device, and a specific one from itself such as PING and TRACEROUTE And a path diagnosis function for evaluating the continuity of the network to the destination address and the response time.

  Also, as shown in FIG. 1-2, the IP network route diagnosis apparatus 10 includes a communication unit 11, a timekeeping unit 12, a route information database 13, a route monitoring instruction unit 14, a result evaluation unit 15, And a control unit 16.

  The communication unit 11 performs communication based on TCP / IP with other communication devices such as the network device 2 connected to the IP network 1. Further, the time measuring unit 12 measures a predetermined time and notifies the route monitoring instruction unit 14 of the time measurement result. The timekeeping unit 12 is constituted by a timer, for example, and activates the route monitoring instruction unit 14 at a predetermined timing. Further, the control unit 16 has a function of controlling each processing unit constituting the IP network path diagnosis device 10.

  The route information database 13 is a database that stores a list of route information indicating routes to be observed by the IP network route diagnosis apparatus 10. The route information includes address information including the start point address of the network device 2 constituting the start point of the route and the end point address of the network device 2 constituting the end point. This route information database 13 corresponds to the route information storage means in the claims.

  When the route monitoring instruction unit 14 receives the timing result from the timing unit 12, the route monitoring instruction unit 14 reads the route information from the route information database 13 one by one, and logs in to the network device 2 (device) of the read start address by TELNET or SSH. The path diagnosis from the logged-in device to the network device 2 (device) corresponding to the end point address is sequentially executed using PING, TRACEROUTE, or the like. The route monitoring instruction unit 14 corresponds to the monitoring instruction means in the claims.

  The result evaluation unit 15 acquires a route diagnosis result executed by the network device 2 corresponding to the start point address, and evaluates the route diagnosis result with reference to the route diagnosis determination information. As a result of executing PING or TRACEROUTE, generally, packet loss rate, response time, or numerical value of arrival time for each section is returned, or there is some abnormality in the route, meaning that the packet could not reach Message string to be returned. The route diagnosis determination information includes a threshold value indicating a preset abnormality level for a route diagnosis result represented by a numerical value such as a packet loss rate, a response time, or an arrival time for each section, and is represented by a message character string. The path diagnosis result includes a message character string indicating an error. Therefore, the result evaluation unit 15 compares the route diagnosis result represented by a numerical value such as the packet loss rate, the response time, or the arrival time for each section with the threshold indicating the abnormal level in the route diagnosis determination information. It is determined whether the diagnosis result is normal or abnormal, and the route diagnosis result represented by the message character string is compared with the message character string in the route diagnosis determination information to determine whether the route diagnosis result is normal or abnormal. For example, when a message character string indicating an error is stored in the route diagnosis determination information, if the message character string matches the route diagnosis result, the route diagnosis result is determined to be abnormal. Further, when a message character string that does not mean an error is stored in the route diagnosis determination information, if the message character string matches the route diagnosis result, it is determined that the route diagnosis result is normal. The result evaluation unit 15 corresponds to the result evaluation means in the claims.

  Next, the procedure of the route diagnosis method by the IP network route diagnosis apparatus 10 having such a configuration will be described. FIG. 2A is a flowchart illustrating an example of a procedure of a route diagnosis process of the IP network, and FIG. 2B is a flowchart illustrating an example of a procedure of a route diagnosis result determination process by the diagnosis process of FIG. FIG. 3 is a diagram schematically showing an outline of the processing procedure of the IP network route diagnosis method.

  First, route diagnosis processing by the route monitoring instruction unit 14 will be described with reference to FIGS. First, the route monitoring instruction unit 14 of the IP network route diagnosis apparatus 10 determines whether or not a predetermined time has elapsed based on the presence / absence of a signal from the time measuring unit 12 (step S11), and the signal from the time measuring unit 12 is received. If not (No in step S11), the process enters a waiting state.

  Here, the time measuring unit 12 measures a predetermined time, and, for example, when a predetermined time has elapsed since the last diagnosis process, a signal indicating that the predetermined time has elapsed to the route monitoring instruction unit 14 Notice. Thereafter, when receiving a signal from the time measuring unit 12 (Yes in Step S11), the route monitoring instruction unit 14 acquires one piece of route information from the route information database 13 (Step S12). The route monitoring instruction unit 14 remotely logs in to the network device 2 having the start point address in the obtained route information via the communication unit 11 (step S13). Further, path diagnosis for evaluating network continuity and response time is executed from the network device 2 of the start point address to the network device 2 corresponding to the end point address in the route information (step S14). Then, the route monitoring instruction unit 14 determines whether route diagnosis has been performed for all route information in the route information database 13 (step S15). If route diagnosis has not been performed for all route information (No in step S15), the process returns to step S12 and the above-described processing is repeated. In addition, when route diagnosis is executed for all route information (Yes in step S15), the route diagnosis processing by the route monitoring instruction unit 14 ends.

  Next, the route diagnosis result determination process by the result evaluation unit 15 will be described with reference to FIGS. First, the result evaluation unit 15 of the IP network route diagnosis apparatus 10 receives the communication unit 11 from the network device 2 corresponding to the start point address on the IP network 1 on which the route diagnosis is performed by the route monitoring instruction unit 14 in FIG. The route diagnosis result is acquired via (step S31). The result evaluation unit 15 determines whether the route is normal based on the acquired route diagnosis result based on the route diagnosis determination information (step S32).

  Here, for example, when the route diagnosis result includes numerical values such as packet loss rate, response time, and arrival time for each section, the numerical values of the corresponding items in the route diagnosis determination information (hereinafter, Compared to the threshold). When the numerical value included in the route diagnosis result is present in a normal range as compared with the numerical value in the route diagnosis determination information, the numerical value is determined to be normal, and the numerical value included in the route diagnosis result is not present in the normal range. Determines that the numerical value is abnormal. For example, when a message character string is included in the route diagnosis result, the message character string is compared with a message character string indicating an error included in the route diagnosis determination information. When the message character string included in the route diagnosis result matches the message character string included in the route diagnosis determination information, it is determined that the message character string indicates an abnormality, and the route diagnosis determination information is If it does not match the included message character string, it is determined that the message character string is normal.

  As a result of the determination, if the path is normal (Yes in step S32), the path diagnosis result determination process for the path information corresponding to the message device that has transmitted the path diagnosis result ends. On the other hand, if the result of the determination is that the path is abnormal (No in step S32), the result evaluating unit 15 notifies the network administrator that the path corresponding to the path diagnosis result is abnormal. (Step S33), the route diagnosis result determination process ends.

  In step S33, as means for notifying the network administrator of the abnormality, a message is transmitted to another management device (not shown) used by the network administrator, or a predetermined device is displayed on the display device of the IP network path diagnosis device 10. Known means such as displaying on the screen or sending an e-mail for notifying the network administrator of the abnormality can be used.

  The contents to be notified are none other than the result of the route diagnosis. However, in the IP network route diagnosis apparatus 10 according to the first embodiment, various network devices 2 are accessed by TELNET or the like, and the route diagnosis is performed using a command such as PING. Therefore, for example, it is possible to notify the network administrator of the following contents as a diagnosis result. According to these notifications, it is possible to notify the network administrator that there is a possibility that the abnormality described below “→” has occurred.

(1) When accessing the network device 2, no response is returned from the network device 2.
→ For example, it indicates that the password for logging in with TELNET is wrong, or that an abnormality has occurred on the monitoring path or in the network device 2.

(2) During the route diagnosis, the network device 2 that was accessed is forcibly disconnected.
→ In the network function of the access destination, for example, when the TELNET server function is not operating, or the function for access is occupied other than the system of the first embodiment, or the system based on the first embodiment There may be a case where an abnormality has occurred in itself.

(3) Although the network device 2 can be accessed, no response is returned from the network device 2 during route diagnosis.
→ Indicates that an abnormality has occurred on the monitoring path or in the network device 2 during diagnosis.

(4) Violation of threshold → As a result of route diagnosis, the response time and the packet loss rate in a specific route exceeded predetermined thresholds.

(5) Abnormality based on comparison with statistical values → By accumulating past observation results, “A worse value than the past worst value”, “Average + standard deviation exceeded”, etc. Diagnosis can be made. As this statistical value, past observations may be calculated uniformly, but for example, the statistical calculation is performed by subdividing, for example, statistics for the same time on different days, statistics only for weekday or holiday data, etc. You may make it leave. In this way, detailed management according to the time and day of the week becomes possible, for example, “Normally, the response time is short around 23:00 but the response time at 23:00 today is long”. .

(6) The time limit for diagnosis was exceeded.
→ A time limit for diagnosis is set, and a case where a predetermined diagnosis result is not obtained within that time is shown. In this case, the result evaluation unit 15 needs to grasp the time when the route monitoring instruction unit 14 performs the route diagnosis.

  In addition, if the observation results are accumulated in the database in time series, the transition of the response time, the packet loss rate, etc. can be disclosed to the network manager or user in a graph or the like.

  The route diagnosis process and the route diagnosis result evaluation process described above do not necessarily have to be executed on one device as shown in FIG. FIG. 4 is a block diagram schematically showing a schematic configuration of the IP network path diagnosis system. This IP network route diagnosis system has a configuration in which a route monitoring instruction device 50 that executes route diagnosis processing and a result evaluation device 60 that evaluates a route diagnosis result are connected to the IP network 1. Here, the route monitoring instruction device 50 is a communication unit 51 corresponding to the communication unit 11, the time measuring unit 12, the route monitoring instruction unit 14, the route information database 13 and the control unit 16 of the IP network route diagnosis device 10 of FIG. , A time measurement unit 52, a route information database 53, a route monitoring instruction unit 54, and a control unit 55, and is a device that performs route diagnosis processing shown in the flowchart of FIG. The result evaluation device 50 includes a communication unit 61, a result evaluation unit 62, and a control unit 63 corresponding to the communication unit 11, the result evaluation unit 15, and the control unit 16 of the IP network path diagnosis device 10 of FIG. It is an apparatus that performs a route diagnosis result determination process shown in the flowchart of FIG. As described above, the above-described processing can be executed in the same manner even in a system configuration in which devices for performing route diagnosis and route diagnosis result determination are separately provided.

  According to the first embodiment, even if the network configuration on the route to be diagnosed is not grasped, the route can be diagnosed, and a dedicated network state monitoring device is arranged at the user site or server. There is no need. As a result, an inexpensive IP network route monitoring device can be obtained.

Embodiment 2. FIG.
FIG. 5 is a block diagram schematically showing a schematic configuration of the second embodiment of the IP network path diagnosis apparatus according to the present invention. In the IP network route diagnosis apparatus 10A according to the second embodiment, the route monitoring instruction unit 14 according to the first embodiment is started from the time measuring unit 12, and the route information reading unit 17 that periodically reads the route information, and the route information reading A plurality of route monitoring instruction units 14A, 14B, 14C,... That receive the route information read by the unit 17 and access the network device 2 that constitutes the IP network 1 to diagnose the route as in the first embodiment. .. characterized in that it is provided separately. In addition, the same code | symbol is attached | subjected to the component same as Embodiment 1, and the description is abbreviate | omitted.

  The route information reading unit 17 is activated when a signal at a predetermined time is received by the time measuring unit 12, acquires one route information from the route information database 13, and a plurality of route monitoring instruction units 14A, 14B, 14C, To pass to one route monitoring instruction unit 14. When the route information is passed to the route monitoring instruction unit 14, the next route information is acquired from the route information database 13, and another one of the plurality of route monitoring instruction units 14A, 14B, 14C,. A process of passing the route information to the monitoring instruction unit 14 is performed. The route information reading unit 17 corresponds to the route information reading function in the claims.

  A plurality of route monitoring instruction units 14A, 14B, 14C,... Are provided. When route information is acquired from the route information reading unit 17, the network device 2 (device) of the acquired start address is logged in with TELNET or SSH, It has a function of executing path diagnosis from the logged-in device to the network device 2 (device) corresponding to the end point address using PING, TRACEROUTE, or the like. The route monitoring instruction units 14A, 14B, 14C,... Correspond to the route monitoring instruction function in the claims.

  Here, the route diagnosis processing will be described. The route information reading unit 17 starts one route monitoring instruction unit 14A immediately after reading one route information from the route information database 13, and does not wait for the processing. The next route information in 13 is read, and similarly, the other route monitoring instruction unit 14B is activated. That is, a plurality of route monitoring instruction units 14A, 14B, 14C,... Can be activated at the same time, and a plurality of routes can be diagnosed simultaneously (in parallel). Note that the processing contents of the IP network path diagnosis apparatus according to the second embodiment are the same as those described in the first embodiment, and thus the description thereof is omitted.

  Usually, in order to perform diagnosis by PING or TRACEROUTE, a predetermined time is set as a waiting time and a response from the destination device is waited. Therefore, it takes time for diagnosis when there is an abnormality in the diagnosis path. However, as in the second embodiment, a plurality of routes are provided by providing a route information reading unit 17 that reads route information and a plurality of route monitoring instruction units 14A, 14B, 14C,. Diagnosis can be performed in parallel.

  According to the second embodiment, since the path diagnosis is performed in parallel, the diagnosis process can proceed without delaying the diagnosis process due to an abnormality in a part of the diagnosis paths. In addition to the effects of the first embodiment, This has the effect that more paths can be diagnosed within a unit time.

  Also in the case of the second embodiment, as in the first embodiment, the route information reading unit 17, the route monitoring instruction units 14A, 14B, 14C,... And the result evaluation unit 15 are divided into different devices. Thus, an IP network route diagnosis system can be configured. In this case, the route monitoring instruction device needs to be configured so that a plurality of route monitoring instruction units can be executed simultaneously so that diagnosis of a plurality of routes can be executed.

Embodiment 3 FIG.
In the first and second embodiments described above, data serving as a basis for path diagnosis is acquired using a function installed in the network device 2. However, in practice, there are differences in the functions that can be used and how to use them due to differences in the implementation of the network device 2 for each model. For example, SSH is installed in model A but SSH is not installed in model B, or both model C and model D have PING, but model C has a response time and packet loss as an execution result. Although the rate is returned, the model D may return only the packet loss rate. In the third embodiment, a method for absorbing such a difference in the model of the network device 2 will be described.

  FIG. 6 is a block diagram schematically showing a configuration of the third embodiment of the IP network path diagnosis apparatus according to the present invention. This IP network path diagnosis apparatus 10B is provided with a model information database 19 in the IP network path diagnosis apparatus 10A of FIG. 5, and a plurality of model types are substituted for the plurality of path monitoring instruction units 15A, 15B, 15C,. The route monitoring instruction units 18A, 18B, 18C,... Are provided. In addition, the same code | symbol is attached | subjected to the component same as Embodiment 1, 2, and the description is abbreviate | omitted.

  The model information database 19 has model information indicating the type of the network device 2 corresponding to the start point address constituting the route information, and corresponds to the start point address constituting the route information in the route information database 13 and its start point address. The device type management information for managing the association with the type of the network device 2 to be associated with the type of the network device 2 and the type-specific route monitoring instruction unit 18 (name) that can be used for that type Device type to be managed-route monitoring instruction unit association information.

  The route information reading unit 17 is activated when a signal at a predetermined time is received by the time measuring unit 12, and after acquiring one route information from the route information database 13, the network device corresponding to the start point address included in the route information 2 is acquired from the device type management information in the model information database 19, and the device type route monitoring instruction units 18A, 18B, 18C,... It has a function of obtaining the type-route monitoring instruction unit association information and passing the acquired route information to the acquired model-specific route monitoring instruction unit 18. The route information reading unit 17 corresponds to the route information reading function in the claims.

  The number of model-specific route monitoring instruction units 18A, 18B, 18C,... Is provided according to the number of device types of the network device 2 constituting the start point address in the route information stored in the route information database 13. The model-specific route monitoring instruction units 18A, 18B, 18C,... Are different in the diagnostic process to be executed for each device type in charge, except for the route monitoring instruction units 15A, 15B, 15C, FIG. Are the same. For example, as described above, the device type route monitoring instruction unit 18A is used for a network device 2 of a model in which SSH is installed, and the device type route monitoring unit 18B is a network of a model in which SSH is not installed. Used for the device 2... And provided for each device type of the network device 2. The model-specific route monitoring instruction units 18A, 18B, 18C,... Correspond to the route monitoring instruction means or the route monitoring instruction function in the claims.

  Here, an example of a route information reading process in the route information reading unit of the IP network route diagnosis apparatus will be described with reference to the flowchart of FIG. First, the route information reading unit 17 of the IP network route diagnosis apparatus 10B determines whether or not a predetermined time has elapsed based on the presence / absence of a signal from the time measuring unit 12 (step S51), and the signal from the time measuring unit 12 is received. If there is not (No in step S51), a waiting state is entered.

  Here, the time measuring unit 12 measures a predetermined time, for example, when a predetermined time has elapsed since the last diagnosis process, a signal indicating that the predetermined time has elapsed with respect to the path information reading unit 17. Notice. Thereafter, when receiving the signal from the time measuring unit 12 (Yes in Step S51), the route information reading unit 17 acquires one piece of route information from the route information database 13 (Step S52).

  Next, the route information reading unit 17 acquires the device type of the network device 2 corresponding to the start address in the route information from the device type management information in the model information database 19 (step S53). Further, the route information reading unit 17 acquires the device type route monitoring instruction unit 18 corresponding to the acquired device type of the network device 2 from the device type / route monitoring instruction unit association information of the model information database 19 (step S54). . Thereafter, the route information reading unit 17 passes the route information acquired in step S52 to the acquired model-specific route monitoring instruction unit 18 (step S55). As a result, the model-specific route monitoring instruction unit 18 of the transmission destination is activated.

  Then, the route information reading unit 17 determines whether all the route information in the route information database 13 has been read (step S56). If all the route information has not been read (No in step S56), the step information is read. Returning to S52, the above-described processing is repeatedly executed, and when all the route information has been read (Yes in step S56), the route information reading processing ends.

  According to the third embodiment, when the route information reading unit 17 reads the route information, the device type route monitoring instruction unit 18A, using the model information database 19 from the device type corresponding to the start point address of the route information, 18B, 18C,... Are acquired, and the model-specific route monitoring instruction units 18A, 18B, 18C,... Are activated, so that there are many types of network devices 2 constituting the IP network 1. Even in this case, there is an effect that path diagnosis corresponding to each model can be executed.

  The third embodiment can also be implemented in combination with the second embodiment described above. In other words, a plurality of device type route monitoring instruction units 18A, 18B, 18C,. Further, as described in the first and second embodiments, the route information reading unit 17, the model-specific route monitoring instruction units 18A, 18B, 18C,. A network path diagnosis system can also be configured. In this case, the model-specific route monitoring instruction apparatus needs to have a configuration in which a plurality of model-specific route monitoring instruction units are provided so that route diagnosis can be executed for a plurality of models.

Embodiment 4 FIG.
In the fourth embodiment, a case will be described in which the diagnosis result is determined according to the response situation in which a plurality of packets are transmitted to a predetermined destination in the diagnosis result determination process in the first to third embodiments. Specifically, this is a case where a command such as PING is used to send a plurality of packets to a predetermined destination and perform path diagnosis according to the response status.

  FIG. 8 is a flowchart illustrating an example of a processing procedure for diagnosing and determining a route according to a response situation in which a plurality of packets are transmitted. Here, for example, when a plurality of packets are sent and a determination is made based on the response, in general, when the ratio between the number of transmitted packets and the number of packets that have responded exceeds a predetermined threshold. Will be described with an example of diagnosing an abnormality.

  First, the route monitoring instruction unit 14 or the route information reading unit 17 reads route information from the route information database 13 (step S71). Thereafter, the route monitoring instruction unit 14 remotely logs in to the network device 2 corresponding to the start point address included in the route information. Here, the route monitoring instruction unit 14 determines whether or not a predetermined number of packets destined for the network device 2 corresponding to the end point address included in the route information have been transmitted (step S72). If a predetermined number of packets have not been transmitted (No in step S72), one packet destined for the end point address is transmitted (step S73).

  Thereafter, the network device 2 having the start point address waits for a response to the packet transmitted from the network device 2 having the end point address. The route monitoring instruction unit 14 of the IP network route diagnosis apparatus 10 determines whether or not there is a response from the network device 2 having the end point address via the communication unit 11 (step S74). If there is a response from the network device 2 with the end point address (Yes in step S74), the process returns to step S72. On the other hand, if there is no response from the network device 2 at the end point address (No in step S74), the number of failures is counted (step S75). Then, it is determined whether or not the number of failures has become larger than a predetermined value (step S76).

  If the number of failures is equal to or less than the predetermined value as a result of the determination (No in step 76), the process returns to step S72. On the other hand, if the number of failures is greater than a predetermined value (Yes in step S76), a final determination is made. For example, as described above, when the ratio between the number of transmission packets and the number of response packets exceeds a predetermined value, the final determination is that the number of packets set by the network device 2 at the start address is not sent. Also means performing an abnormality determination. More specifically, in the case of a criterion such as “send 10 packets, and if there are 8 or fewer packets with a response, it is diagnosed as abnormal”, three failures are detected even during route diagnosis. By doing so, it is possible to diagnose an abnormality without actually transmitting the remaining seven packets from the network device 2 having the start address to the network device 2 having the end address. That is, when the number of failures exceeds a predetermined value in step S76 (in the case of Yes in step S76), the result evaluation unit 15 aborts the route diagnosis process and makes a final determination. Thereafter, the route diagnosis / determination process ends.

  On the other hand, if a predetermined number of packets have already been transmitted in step S72 (Yes in step S72), the process goes to step S77, and the route diagnosis result evaluation process by the result evaluation unit 15 is performed based on the contents. After being performed, the route diagnosis / determination process ends.

  In the fourth embodiment, it is described that an abnormality is diagnosed only when “no response”. However, this is an example, and a response over a predetermined time is regarded as abnormal. By defining the judgment standard according to the monitoring standard, it can be applied to various types of monitoring.

  According to the fourth embodiment, for a path determined to be abnormal, the number of packets sent for performing an abnormality diagnosis is reduced, and the diagnosis time per path can be reduced. As a result, the number of paths that can be diagnosed per unit time can be increased.

Embodiment 5 FIG.
FIG. 9 is a block diagram showing a schematic configuration of the fifth embodiment of the IP network path diagnosis apparatus according to the present invention. This IP network path diagnostic device 10C is an additional diagnostic information storage unit that stores additional diagnostic information including items to be additionally diagnosed when the path is determined to be abnormal in the IP network path diagnostic device 10C of FIG. 20 and an additional diagnosis unit 21 that executes additional diagnosis to be performed from the additional diagnosis information based on the diagnosis result of the result evaluation unit 15. In addition, the same code | symbol is attached | subjected to the component same as FIG. 1 of Embodiment 1, and the description is abbreviate | omitted.

  The additional diagnosis information storage unit 20 includes an additional confirmation definition database 211 indicating information for performing an additional diagnosis when a diagnosis result by the result evaluation unit 15 matches a predetermined condition, and an additional diagnosis. It consists of an additional program group 212 consisting of programs. The additional diagnostic information storage unit 20 corresponds to additional diagnostic information storage means in the claims. FIG. 10 is a diagram schematically illustrating a configuration of information stored in the additional diagnosis information storage unit. As described above, the additional diagnosis information storage unit 20 includes the additional confirmation definition database 211 and the additional program group 212. The addition confirmation definition database 211 is a list for defining what is to be additionally performed when an abnormality is found in a specific route. In the example of FIG. 10, in the additional confirmation definition database 211, “path name” that is the name of the path where the abnormality has occurred, “abnormality type” that indicates the content of the abnormality, and “addition confirmation name” that indicates the content to be additionally diagnosed The additional confirmation definition information including is stored. The “addition confirmation name” stores the contents diagnosed by the program name in the program group to be additionally diagnosed.

  The additional program group 212 stores a program to be executed when a diagnosis result corresponding to the additional confirmation definition information stored in the additional confirmation definition database 211 is obtained. Examples of the type of program include an MIB confirmation program, a log confirmation program, a traceroute program, and the like, but will be created as necessary.

  The additional diagnosis unit 21 searches the additional check definition database 211 of the additional diagnosis information storage unit 20 for additional check definition information corresponding to the combination of the diagnostic content indicating the abnormality obtained by the result evaluation unit 15 and the route thereof. If it exists, an additional program corresponding to the content included in the “addition confirmation name” is acquired from the additional program group 212, and additional diagnosis is performed on the network device at the starting point address of the route. The additional diagnostic unit 21 corresponds to additional diagnostic means in the claims.

  Next, an example of additional diagnosis processing after the result evaluation unit determines that the result of the route diagnosis is abnormal will be described with reference to the flowchart of FIG. First, when the additional diagnosis unit 21 acquires an abnormality diagnosis result from the result evaluation unit 15 (step S91), the additional diagnosis unit 21 extracts route information from the route information database 13 corresponding to the diagnosis result, and acquires a route name from the route information. (Step S92). FIG. 12 is a diagram illustrating an example of a data configuration of the route information database. In this example, the route information includes a route name, a transmission source address (corresponding to the start point address), and a destination address (corresponding to the end point address).

  Next, the additional diagnosis unit 21 searches the additional confirmation definition database 211 for additional confirmation definition information corresponding to the combination of the acquired path name and the abnormality content of the diagnostic result acquired in step S91 (step S93). If there is no combination of the acquired path name and abnormality content (No in step S93), the process ends without performing additional diagnosis. On the other hand, if there is additional confirmation definition information corresponding to the acquired combination of the path name and the abnormality content (Yes in step S93), the additional confirmation name corresponding to the combination is extracted from the additional confirmation definition database 211. (Step S94) The contents described in the additional confirmation name are executed using the additional confirmation program in the additional confirmation program group (Step S95). And the additional diagnostic result performed using the additional confirmation program is acquired (step S96), and an additional diagnostic process is complete | finished.

  In the above description, the case where the additional diagnosis unit 21 and the additional diagnosis information storage unit 20 are provided in the IP network path diagnosis apparatus 10C according to the first embodiment is illustrated, but the IP network path according to the second and third embodiments is illustrated. You may provide in 10 C of diagnostic apparatuses. Also in the case of the fifth embodiment, as described in the first to third embodiments, the route monitoring instruction unit 14, the result evaluation unit 15, and the additional diagnosis unit 21 are divided into different devices, respectively, so that the IP network A route diagnosis system can also be configured.

  According to the fifth embodiment, for example, when the diagnosis result is a violation of the threshold value, additional diagnostic information about the corresponding network device 2 such as the CPU usage rate is further obtained, and the corresponding network device 2 is loaded with high load. There is an effect that a more detailed diagnosis of a path abnormality such as determining whether or not a condition has occurred can be performed.

  As described above, the IP network route diagnosis apparatus according to the present invention is useful for route diagnosis in an IP network in which a plurality of network devices are connected to each other.

It is a figure which shows typically the network structure which has the IP network path | route diagnostic apparatus by this invention. It is a block diagram which shows typically the structure of Embodiment 1 of the IP network path | route diagnostic apparatus by this invention. It is a flowchart which shows an example of the procedure of the diagnostic process of the path | route of an IP network. It is a flowchart which shows an example of the procedure of the determination process of the path | route diagnosis result by the diagnostic process of FIGS. It is a figure which shows typically the outline | summary of the process sequence of an IP network path | route diagnostic method. It is a block diagram which shows typically schematic structure of an IP network path | route diagnostic system. It is a block diagram which shows typically schematic structure of Embodiment 2 of the IP network path | route diagnostic apparatus by this invention. It is a block diagram which shows typically the structure of Embodiment 3 of the IP network path | route diagnostic apparatus by this invention. It is a flowchart which shows an example of the procedure of the reading process of route information. It is a flowchart which shows an example of the process sequence which diagnoses and determines a path | route according to the response condition which transmitted the several packet. It is a block diagram which shows schematic structure of Embodiment 5 of the IP network path | route diagnostic apparatus by this invention. It is a figure which shows typically the structure of the information stored in an additional diagnostic information storage part. It is a flowchart which shows an example of the additional diagnosis process after it determines with the result of a route diagnosis being abnormal. It is a figure which shows an example of a data structure of a route information database. It is a figure which shows typically the outline | summary of the conventional network monitoring system. It is a figure which shows the prior art example of a network communication performance measurement system. It is a figure which shows the prior art example of the system configuration for performing this path | route diagnostic method.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 IP network 2 Network equipment 10, 10A, 10B, 10C IP network path | route diagnostic apparatus 11, 51, 61 Communication part 12, 52 Time measuring part 13, 53 Path | route information database 14, 14A, 14B, 14C, 54 Path | route monitoring instruction | indication part 15 , 62 Result evaluation unit 16, 55, 63 Control unit 17 Route information reading unit 19 Model information database 18A, 18B, 18C Model-specific route monitoring instruction unit 20 Additional diagnosis information storage unit 21 Additional diagnosis unit 50 Route monitoring instruction device 60 Result evaluation Device 211 Additional confirmation definition database 212 Additional program group

Claims (6)

An IP network path diagnosis device that diagnoses a communication path between the network devices of an IP network to which a plurality of network devices that relay communication is connected,
Route information storage means for storing route information including a start point address and an end point address of the route for a route between network devices under the management of the own device in the IP network;
The route information reading function that reads the route information from the route information storage means at a predetermined timing and the route information that is provided according to the type of route diagnosis that can be executed by the network device and that is passed from the route information reading function. Route monitoring instruction means having a route monitoring instruction function for accessing the network device at the start address of the network, and causing the network device at the start address to execute a route diagnosis from the network device to the network device of the end address in the route information. When,
Device type management information for managing the correspondence between the start point address constituting the route information in the route information storage means and the type of network device corresponding to the start point address, and used for the type of network device and its type Model information storage means for storing device type-route monitoring instruction function association information for managing association with the possible route monitoring instruction function;
Result evaluation means for determining whether or not the route corresponding to the route information is normal using a diagnosis result from the network device of the start point address;
Equipped with a,
The route information reading function reads the route information from the route information storage unit, and then obtains the type of the network device corresponding to the start address included in the route information from the device type management information of the model information storage unit. The device type route monitoring function that can be used for the acquired device type is acquired from the device type-route monitoring instruction function association information of the model information storage means, and the route read by the acquired type of route monitoring instruction function An IP network path diagnosis apparatus characterized by passing information . Before Stories route information reading function, after passing the path information read to a plurality of one path monitor indicating function of the path being monitored instruction function, perform the reading of the other path information in the route information storage unit The IP network path diagnosis apparatus according to claim 1, wherein: When the route monitoring instruction means transmits a packet to the network device of the end point address and determines whether or not there is an abnormality using the number of responses to the packet or the time until the response, the route monitoring instruction means Count the number of failures,
The result evaluation means, according to claim 1 or 2 wherein the number of failures is determined to be abnormal if it becomes more than a predetermined number of times during the execution of the route diagnostics, characterized in that aborted path diagnosis process being executed IP network path diagnosis device. Stores additional confirmation definition information including details of the abnormality of the route under the control of the own device and additional diagnosis contents to be performed on the contents of the abnormality, and an additional confirmation program for executing the additional diagnosis contents Additional diagnostic information storage means;
When the route corresponding to the route information is abnormal by the result evaluation unit, the additional diagnostic content corresponding to the combination of the route determined to be abnormal and the content of the abnormality is used in the additional diagnostic information storage unit. Additional diagnostic means that is extracted from the additional confirmation definition information, acquires an additional confirmation program corresponding to the additional diagnostic content from the additional diagnostic information storage means, and causes the network device at the start address to be executed,
IP network path diagnostic apparatus according to any one of claims 1-3, characterized in that it further comprises a. An IP network path diagnosis system for diagnosing a communication path between the network devices of an IP network to which a plurality of network devices that relay communication are connected,
Route information storage means for storing route information including a start point address and an end point address of the route for a route between network devices under the management of the own device in the IP network;
Device type management information for managing the correspondence between the start point address constituting the route information in the route information storage means and the type of network device corresponding to the start point address, and used for the type of network device and its type Model information storage means for storing device type-route monitoring instruction function association information for managing association with possible route monitoring instruction means;
Route information reading means for reading route information from the route information storage means at a predetermined timing ; and
Provided according to the type of path diagnosis that can be executed by the network device, accessing the network device at the start address in the route information passed from the route information reading means, and from the network device to the end address in the route information Route monitoring instruction means for causing the network device of the start address to execute route diagnosis to the network device of
The route information reading function reads the route information from the route information storage unit, and then obtains the type of the network device corresponding to the start address included in the route information from the device type management information of the model information storage unit. The device type route monitoring function that can be used for the acquired device type is acquired from the device type-route monitoring instruction function association information of the model information storage means, and the route read by the acquired type of route monitoring instruction function A route monitoring instruction device for passing information ;
A result evaluation device for determining whether or not a route corresponding to the route information is normal, using a diagnosis result from the network device of the start point address;
An IP network path diagnosis system comprising: Stores additional confirmation definition information including details of the abnormality of the route under the control of the own device and additional diagnosis contents to be performed on the contents of the abnormality, and an additional confirmation program for executing the additional diagnosis contents Additional diagnostic information storage means;
When the route corresponding to the route information is abnormal by the result evaluation unit, additional diagnostic content corresponding to the combination of the route determined to be abnormal and the content of the abnormality is added to the additional diagnostic information storage unit. Additional diagnostic means that is extracted from the definition information, acquires an additional confirmation program according to the additional diagnostic content from the additional diagnostic information storage means, and causes the network device at the start address to be executed;
The IP network path diagnosis system according to claim 5 , further comprising: an additional diagnosis device including:

Images