JP4705904B2 - Network monitoring system - Google Patents

Description

  The present invention relates to a network monitoring system, and more particularly to a network monitoring system capable of automatically detecting an abnormality in a network device or a network cable connected to a network.

  When performing network monitoring using a network monitoring device, the network monitoring device uses a ping (Packet Internet Groper) or SNMP (Simple Network Management Protocol) to check the network device status or inquire about the status of the network device. It is common to diagnose the location.

  As a method for automating the diagnosis of such a fault location, for example, in Patent Document 1, before performing network monitoring, configuration information related to a network is determined in advance, and connection-related information between communication devices is determined from the configuration information. It is shown that when a plurality of failures occur in a communication device, it is determined which failure caused the plurality of failures, and the highest failure is detected.

  Patent Document 2 includes a failure information database in which communication path patterns between a network monitoring device and a monitoring target device and failure patterns expected to occur in the communication paths are stored in association with each other and collected from monitoring agents. Match the communication confirmation result to the communication route pattern in the failure information database and match the route monitoring information table that associates the communication confirmation result with the communication route pattern to the failure information database and match the communication confirmation result in the same communication route pattern. It is shown that a failure pattern to be detected is detected and a faulty device corresponding to the detected fault pattern is specified as a faulty device.

Etc. have been proposed.
JP 2001-86117 A JP 2006-186633 A

  In the prior art, only the network device on the network path is the monitoring target, and the failure of the network cable connecting the network devices is not the monitoring target. For this reason, when a failure occurs in the network cable on the network path, it is difficult to identify the failure portion.

  In addition, in the prior art, network devices are polled from a network monitoring device or monitoring agent to check communication, so if there are many network devices, the number of polls increases in proportion to the number, and the load on the network increases. To do.

  The present invention has been made in view of these problems, and provides a network monitoring system that can reduce a load on a network device and reliably identify a faulty device.

  In order to solve the above problems, the present invention employs the following means.

  A network monitoring system for monitoring a failure of a network device in a network in which a plurality of network monitoring devices are connected in a loop via a network device, wherein the network monitoring device sends a communication confirmation signal to the network A communication confirmation unit for confirming a communication state of the network, a path information table storing information indicating a connection state of each network device in the network, and a failure information table storing information of a network device whose communication cannot be confirmed in the network And a communication unit that sends the failure information stored in the failure information table to the network, and when failure information from one adjacent network monitoring device cannot be received, the communication confirmation unit is activated to establish communication with the one network. Check status Receiving failure information from the other network monitoring device adjacent Rutotomoni, identifies the network device that has failed by combining the fault information received with the confirmation was traffic state.

  Since the present invention has the above configuration, it is possible to provide a network monitoring system that can reduce a load on a network device and reliably identify a faulty device.

  Hereinafter, the best embodiment will be described with reference to the accompanying drawings. FIG. 1 is a diagram illustrating a network monitoring system according to the present embodiment. This system has a configuration in which the networks 100, 200, 300, and 400 are monitored by the network monitoring devices 1-A, 1-B, 1-C, and 1-D.

  The network monitoring apparatus 1-A stores path information table 11 that holds information (connected device information) of each device (including network cables) installed on the network, and device failure information stored in the path information table 11. Failure information exchange comprising a failure information table 12 to be held, a transmission unit 14 that extracts device information from the failure information table 12 and transmits it to other network monitoring devices, and a reception unit 15 that receives failure information from other network monitoring devices Unit 16, failure information received from another network monitoring device and information in the failure information table 12, a failure verification unit 13 that identifies a failure unit, a communication confirmation unit 17 that confirms communication with a network device, and other Communication interface 18 for executing communication with network monitoring device and network device Provided.

  Although not shown, the network monitoring device 1-B, the network monitoring device 1-C, and the network monitoring device 1-D have the same configuration as the network monitoring device 1-A.

  As shown in FIG. 1, in this embodiment, the network monitoring apparatus 1-A and the network monitoring apparatus 1-B are connected via a network 100 including network cables 110, 111, 112 and network devices 101, 102. Has been. Similarly, between the network monitoring device 1-B and the network monitoring device 1-C, between the network monitoring device 1-C and the network monitoring device 1-D, and between the network monitoring device 1-D and the network monitoring device 1-A, respectively. They are connected via networks 00, 300, and 400 having network cables and network devices. In the figure, reference numerals 101a, 101b, 102a, 102b, 201a,... 402b are connection terminals as network devices for connecting network devices and network cables.

  FIG. 2 is a diagram illustrating the route information table 11 provided in the network monitoring device 1-A. Information on connected devices connected to the monitoring device is set in the route information table 11. In the example of FIG. 2, as connection device information for connecting the network monitoring devices 1-A and 1-B, a network cable 110, a network device 101a, a network device 101b, a network cable 111, a network device 102a, The network device 102b and the network cable 112 are stored.

  Similarly, the network monitoring device 1-B and the network monitoring device 1-C, the network monitoring device 1-C and the network monitoring device 1-D, and the network monitoring device 1-D and the network monitoring device 1-A are connected. As connection device information, network cables and network devices constituting the networks 200, 300, and 400 are stored.

  FIG. 3 is a diagram illustrating the failure information table 12 provided in the network monitoring device 1-A. In the example of FIG. 3, among the network devices stored in the failure information table 12, “1” is assigned to a network device determined to be normal (no failure), and “0” is assigned to a network device determined to be abnormal (failed). Set as status information.

  When setting the state information indicating the presence or absence of a failure, the failure information is exchanged between the network monitoring devices.

  Here, FIG. 10 is a diagram for explaining fault information exchange and fault verification processing in the network monitoring system.

  For example, the network monitoring device 1-B transmits failure information to the network monitoring device 1-A at a predetermined cycle. In the normal state of the network 100, the failure information transmitted by the network monitoring device 1-B includes the network cable 112, the network device 102b, the network device 102a, the network cable 111, the network device 10lb, the network device 101a, and the network cable 110. Via the network monitoring device 1-A. For this reason, the receiving unit 15 of the network monitoring device 1-A receives the failure information from the network monitoring device 1-B (step 1010). As a result, the network devices 101a, 101b, 102a, and 102b and the network cables 110, 111, and 112 on the network 100 are all determined to be normal (step 1010: YES), and the status information of each device in the failure information table 12 is “1”. "Is set (step 1030). In this way, it is possible to confirm the state of the network device on the route only by receiving the failure information without performing communication confirmation individually for each device on the route.

  Similarly, the network monitoring apparatus 1-A transmits failure information to the network monitoring apparatus 1-B at a predetermined cycle, and the network monitoring apparatus 1-B that has received the failure information receives the network devices 101a, 101b, 102a on the network 100. , 102b and the network cables 110, 111, 112 are all determined to be normal.

  Similar processing can be executed between the network monitoring devices 1-B and 1-C, between 1-C and 1-D, and between 1-D and 1-A.

  FIG. 4 is a diagram illustrating an example of failure information transmitted from the network monitoring apparatus 1-B to the network monitoring apparatus 1-A, for example. As described above, the status of each device on the network 100 can be determined by receiving the failure information. For this reason, the transmission unit 14 of the network monitoring apparatus 1-B extracts the failure information of each device on the network 200, the network 300, and the network 400 from the failure information table 12, and the transmission source is the network monitor in the extracted information. Header information indicating that the device is the device 1-B is added, and the failure information is transmitted to the network monitoring device 1-A (step 1060).

  Here, the exchange of failure information between the network monitoring device 1-A and the network monitoring device 1-B has been described. However, the network monitoring device 1-C and the network monitoring device 1-C, Similarly, the fault information is exchanged between the network monitoring apparatus 1-D and between the network monitoring apparatus 1-D and the network monitoring apparatus 1A.

  Next, the failure part specifying method will be described by taking as an example a case where a failure occurs in the network cable 111 shown in FIG.

  In FIG. 10, when the network monitoring device 1-A does not receive the monitoring information from the network monitoring device 1-B for a predetermined time (step 1010: NO), it is determined that a failure has occurred in the network 100, The communication confirmation unit 17 is activated to confirm communication with the network devices 101a, 101b, 102a, and 102b on the network 100 (step 1020).

  At this time, referring to the route information table 11, communication confirmation is performed from a network device close to the network monitoring device 1-A. With this implementation order, when there is no communication confirmation response from the network device in the middle of the route, all subsequent network devices are judged to be abnormal, and the subsequent network device communication confirmation can be omitted. Convenient.

  That is, first, a communication check is performed toward the network device 101a. If there is a response, the network device 101a and the network cable 110 are determined to be normal, and the status of the network device 101a and the network cable 110 in the failure information table 12 is indicated as status information. Set “1”.

  Subsequently, a communication check is performed toward the network device 101b. If there is a response, the network device 10lb is determined to be normal, and “1” is set as the state information in the state of the failure information table 12.

  Subsequently, a communication check is performed toward the network device 102a. If there is no response, the network device 102a and the network cable 111 are determined to be abnormal, and the status information on the status of the network device 102a and the network cable 111 in the failure information table 12 is displayed. Is set to “0”.

  Here, referring to the route information table 11, it is apparent that there is no response even if the communication confirmation is performed for the network device installed before the network device 102a. For this reason, the communication confirmation with respect to the network device 102b is not carried out and it is determined that the network device 102b and the network cable 111 are in the state information, and “0” is set as the state information.

  FIG. 3 shows an example of the failure information table 12 that stores the status signals set in this way. That is, the failure information table 12 after the communication confirmation in the network monitoring apparatus 1-A is shown.

  Similarly, if the network monitoring device 1-B does not receive monitoring information from the network monitoring device 1-A within a predetermined time, it is determined that a failure has occurred in the network 100, and the network monitoring on the network 100 is performed. The network devices 102b, 102a, 101b, and 101a close to the device 1-B are sequentially checked for communication, the network device that does not respond and the network cable leading to the network device are determined to be abnormal, and the failure information table 12 “0” is set as the state information in the state.

  FIG. 5 is a diagram showing the failure information table 12 after the communication confirmation in the network monitoring device 1-B.

  The network monitoring device 1-B extracts the failure information of the network 100, the network 300, and the network 400 from the failure information table 12 in the same manner as transmitting the failure information to the network monitoring device 1-A. (FIG. 6) is transmitted to the network monitoring apparatus 1-C.

  Similarly, the network monitoring device 1-C extracts the failure information of the network 100, the network 200, and the network 400 from the failure information table 12, and transmits the extracted failure information (FIG. 7) to the network monitoring device 1-D.

  Similarly, the network monitoring device 1-D extracts the failure information of the network 100, the network 200, and the network 300 from the failure information table 12, and transmits the extracted failure information (FIG. 8) to the network monitoring device 1-A.

  The reception unit 15 of the network monitoring device 1-A that has received the failure information from the network monitoring device 1-D activates the failure verification unit and sets the received failure information in the failure information table 12 in the network monitoring device 1-A. (Step 1040).

  FIG. 9 is a diagram illustrating a setting result of failure information related to the network 100. 9, the failure information of the network monitoring device 1-A is the failure information of the network monitoring device 1-A shown in FIG. 3, and the failure information received from the network monitoring device 1-D is the network monitoring device shown in FIG. This is information stored in the failure information table after confirmation of communication in the apparatus 1-B.

  Of the failure information stored in the failure information table 12 and the received failure information, either the network monitoring device 1-A or the network monitoring device 1-B is directly connected to the device set to “1” (normal). The device is confirmed to be normal. For this reason, it can be determined that these devices are normal.

  Therefore, it is determined that the network devices 101a, 101b, 102a, and 102b and the network cables 110 and 112 are normal, and the network cable 111 that is determined to be abnormal by both the network monitoring device 1-A and the network monitoring device 1-B is abnormal. Can be determined. The same determination can be made for the network 200, the network 300, and the network 400. The determination result obtained here is set as the latest failure information in the failure information table 12 (step 1050).

  The method for confirming communication between the network monitoring apparatus 1-A and the network monitoring apparatus 1-B has been described above. The network monitoring apparatus 1-B, the network monitoring apparatus 1-C, the network monitoring apparatus 1-C, and the network monitoring are described. Similar processing can be performed between the device 1-D, the network monitoring device 1-D, and the network monitoring device 1-A. As a result, it is possible to specify that the network cable 111 is an obstacle in the network monitoring device 1-B, the network monitoring device 1-C, and the network monitoring device 1-D.

  As described above, according to the present embodiment, in a network monitoring system that monitors a failure of a network device in a network in which a plurality of network monitoring devices are connected in a loop form via a network device, the information is accumulated for each network. A failure information exchange unit is provided for exchanging failure information of network devices between adjacent network monitoring devices. In addition, a failure verification unit is provided that identifies the location of the failure from the exchanged information and the accumulated information. As a result, it is possible to identify the location where a failure has occurred in a network device and a network cable on the network. In addition, it is possible to identify the location where a failure has occurred for a failure on the network that cannot be directly detected by the network monitoring device.

It is a figure explaining the network monitoring system of this embodiment. It is a figure explaining the path | route information table with which a network monitoring apparatus is provided. It is a figure explaining the failure information table with which a network monitoring apparatus is provided. It is a figure which shows the example of the failure information which a network monitoring apparatus transmits toward another network monitoring apparatus. It is a figure which shows the failure information table after the communication confirmation in a network monitoring apparatus. It is a figure which shows the transmission content of failure information. It is a figure which shows the transmission content of failure information. It is a figure which shows the transmission content of failure information. It is a figure which shows the setting result of the failure information regarding a network. It is a figure which shows the setting result of the failure information regarding a network.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Network monitoring apparatus 11 Path | route information table 12 Fault information table 13 Fault verification part 14 Transmission part 15 Reception part 16 Fault information exchange part 17 Communication confirmation part 18 Communication interface 100 Network 101,102 Network equipment 110,111,112 Network cable

Claims (3)

A network monitoring system for monitoring a failure of a network device in a network formed by connecting a plurality of network monitoring devices in a loop via a network device,
The network monitoring device transmits a communication confirmation signal to the network to confirm a communication state of the network;
A path information table storing information representing a connection state of each network device in the network;
A failure information table storing information of network devices that cannot be confirmed in the network; and
A communication unit that sends the failure information stored in the failure information table to the network;
When failure information from one adjacent network monitoring device cannot be received, the communication confirmation unit is activated to confirm the communication state of the one network and receive failure information from the other adjacent network monitoring device, A network monitoring system characterized by identifying a network device in which a failure has occurred by combining the confirmed communication state and the received failure information. The network monitoring system according to claim 1,
The network monitoring system, wherein the communication unit adds failure information held by itself to failure information received from one adjacent network monitoring device, and transmits the added failure information to the other adjacent network monitoring device. A network monitoring system for monitoring a failure of a network device in a network in which a plurality of network monitoring devices are connected in a loop via a network device,
The network monitoring device transmits a communication confirmation signal to the network to confirm a communication state of the network;
A path information table storing information representing a connection state of each network device in the network;
A failure information table storing information of network devices that cannot be confirmed in the network; and
A communication unit that sends the failure information stored in the failure information table to the network;
Activating the communication confirmation unit to confirm the communication state of the one network, receiving failure information from the other adjacent network monitoring device, and generating a failure by combining the confirmed communication state and the received failure information A network monitoring system for identifying a network device that has been selected.

Images