JP5367002B2 - Monitoring server and monitoring program - Google Patents

Description

The present invention relates to a monitoring server and a monitoring program for inspecting a silent failure of a device in a communication system.

  With the recent development of communication networks, identification of a failed communication device and correspondence to the failed communication device have become important issues. A communication network can be stably provided by identifying a communication device that has failed at an early stage and dealing with the device.

  In order to confirm the normal operation of the communication device, there is a method of transmitting inspection data (see, for example, Non-Patent Document 1). For example, when a command such as Ethernet (registered trademark) loopback or ping is transmitted to the communication device to be inspected and there is a response, the communication device can be determined to be normal.

ITU-T Recommendation Y.1731-OAM functions and mechansims for Ethernet based networks

  However, although the above method can confirm that communication is possible, it cannot determine whether data is normally transmitted / received.

  In general, the switch includes a logic circuit, an SRAM, and the like. When high-energy neutrons collide with these semiconductor substrates, and heavy ions emitted by the collision cause current pulses, an event of data inversion may occur in these semiconductor substrates.

  If a command such as Ethernet loopback or ping is transmitted in a situation where such an event occurs, the response is returned normally. However, such a memory error in the switch cannot be detected. In this specification, such a memory error in the communication device is referred to as a silent failure.

Accordingly, an object of the present invention is to provide a monitoring server and a monitoring program for inspecting a silent failure of a device in a communication system.

In order to solve the above problems, a first feature of the present invention relates to a monitoring server in a communication system including a plurality of devices and a monitoring server that inspects a silent failure of the devices. The monitoring server according to the first aspect of the present invention includes a device data storage unit that stores device data including an identifier of a device to be inspected for silent failure, a test data storage unit that stores test data to be transmitted to the device, A plurality of inspection data is transmitted to the device to be inspected for the device data within a predetermined time, and the device is brought into a high traffic state, and the response data in which the inspection data is copied and returned by the device is acquired, and the device It is determined whether or not the inspection data transmitted to the response data and the response data match, and if they do not match, the error inspection means for storing the identifier of the device in the result data and the error inspection means When it is determined that they do not match, the upstream side and the downstream side of the target device that is determined not to match and the device adjacent to the target device. The inspection data is transmitted to each MIP, the response data is copied and returned by the target device and the adjacent device, and sent back to the upstream side and the downstream side of the target device and the adjacent device, respectively. Details for determining whether or not the inspection data and the response data match, and when the determination result does not match between the upstream side and the downstream side, details identifying the device in which the silent failure has occurred based on the identifier of the MIP An error checking means is provided.

  Here, a topology data storage unit for storing topology data indicating the topology of the communication system together with the identifier of the device, and the network configuration of the communication system based on the topology data are displayed on the display device, and the device included in the result data is displayed. There may be provided display means for extracting the identifier and displaying a warning on the display device based on the extracted identifier of the device.

  The inspection data storage unit may store a plurality of different inspection data, and the error inspection unit may transmit each of the plurality of inspection data stored in the inspection data storage unit to the inspection target device.

  Here, the detailed error inspection means refers to the result data and the topology data, and when the identifier of either one of the adjacent devices is included in the result data, the detailed error inspection means may transmit the inspection data to the MIP of the adjacent device. .

  When the information system includes an active device and a standby device, the error inspection means may transmit inspection data to the standby device.

  A second feature of the present invention is the monitoring program according to any one of the first features of the present invention.

ADVANTAGE OF THE INVENTION According to this invention, the monitoring server and monitoring program which test | inspect the silent failure of the apparatus in a communication system can be provided.

FIG. 1 is a configuration diagram of a communication system according to an embodiment of the present invention. FIG. 2 is a sequence diagram illustrating a monitoring method in the communication system according to the embodiment of the present invention. FIG. 3 is a functional block diagram illustrating the monitoring server according to the embodiment of the present invention. FIG. 4 is a diagram for explaining an error detected according to the length of the frame. FIG. 5 is a diagram for explaining an error detected by traffic. FIG. 6 is a diagram for explaining an example of the data structure and data of the device data according to the embodiment of the present invention. FIG. 7 is an example of a result display screen displayed by the monitoring server according to the embodiment of the present invention. FIG. 8 is a diagram for explaining the processing of the detailed error checking means according to the embodiment of the present invention. FIG. 9 is a flowchart for explaining processing of the monitoring server according to the embodiment of the present invention. FIG. 10 is a diagram illustrating a standby system in which the monitoring server according to the embodiment of the present invention inspects a silent failure.

  Next, embodiments of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

(Communications system)
A communication system 3 according to an embodiment of the present invention will be described with reference to FIG. The communication system 3 includes a plurality of devices and the monitoring server 1. Here, in the example shown in FIG. 1, a case will be described in which the plurality of devices are 12 switches of the first switch 2a to the twelfth switch 21. The number of devices is not limited to this, and the devices may not be switches. In the present embodiment, when it is not necessary to distinguish between these switches, they may be simply referred to as switches 2.

  In the example shown in FIG. 1, the link connecting the switches 2 indicates that the communication network is adjacent. For example, the first switch 2a is connected adjacent to the second switch 2b and the third switch 2c. The second switch 2b is connected adjacent to the first switch and the fourth switch 2d. As described above, the switches 2 shown in FIG. 1 are connected to each other so as to be able to communicate with each other in the form of a network through a bidirectionally communicable network. In the example shown in FIG. 1, the monitoring server 1 is connected only to the first switch 2a, but is not limited to this connection form.

  The monitoring server 1 inspects a silent failure of a device such as the switch 2. The monitoring server 1 transmits predetermined inspection data to the switch 2 to be inspected. The switch 2 to be inspected uses the echo request function of ICMP (Internet Control Message Protocol) to send back the inspection data as it is, and the monitoring server 1 receives the inspection data as an echo response from the switch 2 to be inspected. . The monitoring server 1 compares the transmitted inspection data with the received inspection data, and determines whether each bit matches. If they do not match, it is determined that a silent failure has occurred in any of the switches on the path from the monitoring server 1 to the switch 2 to be inspected. The monitoring server 1 transmits inspection data to all the inspection target switches 2 in the same manner, and identifies the switch 2 in which the transmitted inspection data and the received response data do not match. When only one of the adjacent switches 2 does not match as compared with the network configuration, the monitoring server 1 identifies the adjacent switch 2 as a suspected section of silent failure.

  Here, in the embodiment of the present invention, the inspection data is transmitted to the MIP of the switch 2 in the suspected section using the Ethernet loopback. Thereby, it can be detected which switch 2 has a silent failure.

  When the switch 2 receives the data including the inspection data, the switch 2 transfers the data to the destination switch. At this time, when the switch 2 receives the data, the switch 2 stores the inspection data included in the data in the memory of the switch 2, reads the inspection data from the memory, and transfers it to the destination switch. Here, there may be a case where a defect occurs in the memory in which the inspection data is stored. In this case, even if the switch 2 reads data based on the address where the inspection data is stored, there may be a difference between the data written in the switch 2 and the read data. This is because when a failure occurs in a predetermined bit in the memory, even if data is stored in that bit, the data cannot be held correctly, and an event in which the read data is different from the written data occurs. The monitoring server 1 according to the embodiment of the present invention can detect such a silent failure.

  With reference to FIG. 2, the monitoring method according to the embodiment of the present invention will be described. In FIG. 2, a case will be described in which the monitoring server 1 transmits inspection data to the destination switch 2n via the first switch 2a and the second switch 2b. Here, the destination switch 2n is the fourth switch 2d connected to the monitoring server 1 via the first switch 2a and the second switch 2b in the example shown in FIG.

  First, in step S1, the monitoring data 1 transmits data D1 to the destination switch 2n using a ping command. The data D1 includes a header indicating a destination and a transmission source, inspection data C1, and FCS (frame check sequence: error detection data) for the header and inspection data C1. This FCS is calculated by the monitoring server 1 and included in the data D1 for error detection.

  When the first switch 2a receives the data D1, in step S2, the received data D1 is stored in the memory. The switch 2a removes the FCS from the data D1, and newly calculates the FCS for the header and the inspection data C2 read from the memory. In step S3, the first switch 2a transmits inspection data C2 read from the memory and data D2 including the FCS calculated from the header and the inspection data C2.

  When the second switch 2b receives the data D2, in step S4, the received data D2 is stored in the memory. The switch 2b removes the FCS from the data D2, and newly calculates the FCS for the header and inspection data C3 read from the memory. In step S5, the second switch 2b transmits inspection data C3 read from the memory and data D3 including the header and the FCS calculated from the inspection data C3.

  When the destination switch 2n receives the data D3, in step S6, the destination switch 2n uses ICMP to switch the source and destination addresses, recalculates the FCS, and transmits the data D4 as a response to the ping command. .

  In step S7 to step S9, the inspection data is transmitted to the monitoring server 1 via the second switch 2b and the first switch 2a. The monitoring server 1 responds to the ping command by the first switch 2a. When the data D6 is received, the inspection data C6 included in the data D6 is compared with the inspection data C1 transmitted in step S1.

  Here, if no error occurs in any of the memories of the first switch 2a, the second switch 2b, and the destination switch 2n that relayed the data, the inspection data C1 of the data D1 and the inspection data C6 of the data D6 are Match. However, when a memory error occurs in any of the first switch 2a, the second switch 2b, and the destination switch 2n, and the inspection data is stored in the storage area where the error has occurred, the inspection data of the data D1 C1 and the inspection data C6 of the data D6 do not match. For example, when the inspection data C1 is “1010101” and the inspection data C6 is “1010111”, the monitoring server 1 holds the inspection data of any of the first switch 2a, the second switch 2b, and the destination switch 2n. In the fifth bit, it can be specified that a memory error has occurred.

  Thereafter, the monitoring server 1 similarly transmits inspection data to the MIP of the device suspected of silent failure using the Ethernet loopback command. Therefore, the monitoring server 1 compares the transmitted inspection data with the inspection data received as the response of the ether loop back, determines whether or not they match, and can identify the device in which the memory error has occurred. .

(Monitoring server)
The monitoring server 1 according to the embodiment of the present invention will be described with reference to FIG. The monitoring server 1 is a general computer including a storage device 10, a central processing control device 20, a communication control device 30, and a display device 40. The monitoring server 1 is realized by the monitoring program stored in the storage device 10 being read and executed by the central processing control device 20. The communication control device 30 is a LAN board, for example, and controls communication of the monitoring server 1. The display device 40 is a general display.

  The storage device 10 includes an inspection data storage unit 11, a device data storage unit 12, a result data storage unit 13, a detailed result data storage unit 14, and a topology data storage unit 15.

  The inspection data storage unit 11 is a storage area in the storage device 10 in which inspection data 11a is stored. The inspection data 11a is data transmitted to an inspection target device such as the switch 2. The inspection data 11a is frame data in which “1” and “0” are continuous by a predetermined number of bits, for example.

  The inspection data storage unit 11 may store a plurality of different inspection data 11a, 11b, 11c,. For example, a silent failure in the memory of switch 2 can occur anywhere in that memory area. Therefore, in the embodiment of the present invention, various inspection data such as short frame inspection data and long frame inspection data are stored in the inspection data storage unit 11 in advance. By transmitting such various inspection data to the device to be inspected, the monitoring server 1 can inspect a silent failure regardless of the bit position of the memory.

  For example, FIG. 4A schematically shows the memory of the switch 2 when the inspection data is a short frame. In the case of a short frame, the memory area stored is also small. Therefore, when a silent failure occurs in the bits near the maximum position, the silent failure may not be detected. However, as shown in FIG. 4B, in the case of a long frame, many bits in the memory area are used. Therefore, even when a silent failure has occurred in the bits near the maximum, the frame is communicated to the bit in which the silent failure has occurred. Thereby, the monitoring data 1 can detect a silent failure.

  The inspection data storage unit 11 may store a set of a plurality of inspection data in which a short frame and a long frame are mixed. By sending the plurality of inspection data within a predetermined time, a high traffic state can be created. As a result, the frame is communicated also to a memory area that is used only during high traffic, so that a silent failure can be inspected.

  For example, FIG. 4B schematically shows the memory of the switch 2 when the traffic is low. In the case of low traffic, the buffer accumulation amount of the switch 2 is small. Therefore, if a silent failure occurs with a bit used only when the buffer storage amount is large, the silent failure may not be detected. However, as shown in FIG. 5B, in the case of high traffic, the amount of buffer accumulation increases and many bits in the memory area are used. Therefore, even when a silent failure occurs with a bit used only when the buffer accumulation amount is large, the frame is communicated to the bit where the silent failure has occurred. Thereby, the monitoring data 1 can detect a silent failure.

  Further, the queue stored in the switch 2 differs depending on the priority. Therefore, inspection data having different priorities may be stored in the inspection data storage unit 11.

  As described above, the inspection data storage unit 11 stores various types of inspection data such as frame length, priority, and traffic necessary for the monitoring server 1 to transmit a silent failure.

  The device data storage unit 12 is a storage area in the storage device 10 in which device data 12a is stored. The device data 12a is data including the identifier of the device to be inspected for the silent failure in the monitoring data 1.

  For example, as shown in FIG. 6, the device data 12a is data in which the identifier, IP address, and MIP identifier of the switch 2 are associated with each other. Although the name of the device referred to in FIG. 1 is used as the switch identifier, an IP address may be used. The IP address is referred to by error checking means 21 and display means 23 described later. The MIP identifier is referred to by detailed error checking means 22 described later.

  The result data storage unit 13 is a storage area in the storage device 10 in which result data 13a is stored. The result data 13a is data in which an inspection result by an error inspection unit 21 described later is stored. For example, the result data 13a stores the identifier of the switch 2 in which the error has occurred and the inspection data in which the error has occurred in association with each other. For example, when long frame inspection data is transmitted to the seventh switch 2g and the inspection data transmitted by the monitoring server 1 is different from the inspection data received by the monitoring server 1, the result data 13a includes the seventh switch The 2g identifier and the inspection data in which an error has occurred are stored as a long frame.

  The detailed result data storage unit 14 is a storage area in the storage device 10 in which the detailed result data 14a is stored. The detailed result data storage unit 14a is a storage area in which the inspection result by the detailed error inspection unit 22 described later is stored. The detailed result data 14a stores the identifier of the device in which the silent failure has occurred and is specified by the detailed error checking means 22.

  The topology data storage unit 14 is data indicating the topology of the communication system 3 together with identifiers of devices such as the switch 2. The topology data 15a is referred to when the network configuration as shown in FIG. The topology data 15a includes an identifier of the switch 2 and connection information of the switch 2.

  The central processing control device 20 includes an error inspection unit 21, a detailed error inspection unit 22, and a display unit 23.

  The error inspection unit 21 transmits the inspection data 11a to the switch 2 to be inspected in the device data 12a, acquires the response data to which the inspection data is copied and returned by the switch 2, and the inspection data transmitted to the switch 2 It is determined whether 11a and the response data match. If they do not match, the error checking means 21 stores the identifier of the switch 2 in the result data 13a.

  Here, when a plurality of inspection data is stored in the inspection data storage unit 11, the error inspection unit 21 converts each of the plurality of inspection data 11a, 11b, 11c,. The data 12a is transmitted to the switch 2 to be inspected, and it is determined whether or not each inspection data and the response data for each inspection data match. If they do not match, the error checking means 21 associates the identifier of the switch 2 with the transmitted check data and stores it in the result data 13a.

  Furthermore, the error inspection means 21 transmits a plurality of inspection data within a predetermined time to create a high traffic state, and whether each inspection data transmitted in the high traffic state matches each response data received in that state. Determine whether or not. If they do not match, the error checking means 21 associates the identifier of the switch 2 in which the error has occurred with the fact that the error has occurred in the high traffic state and stores it in the result data 13a.

  When no data is stored in the result data 13a, all inspection data is normally transmitted / received, and thus the silent failure inspection by the monitoring server 1 is completed. On the other hand, if any data is stored in the result data 13a, it is considered that a silent failure has occurred in any of the switches 2 of the communication system 3. The result data 13a is displayed on the display device 40 by the display means 23.

  The display means 23 displays the network configuration of the communication system 3 on the display device 40 based on the topology data 15a, extracts the identifier of the switch 2 included in the result data 13a, and displays it based on the extracted identifier of the switch 2. A warning is displayed on the device 40.

  The display means 23 displays a result display screen P101 shown in FIG. The result display screen P101 displays the topology of the communication system 3 and hatches and displays the icon of the switch 2 in which an error is detected by the error inspection unit 21.

  For example, consider a case where the result data 13a includes the identifiers of the seventh switch 2g to the twelfth switch 2l. In this case, in the result display screen P101, icons corresponding to the seventh switch 2g to the twelfth switch 21 are hatched. As a result, the operator can confirm that the inspection data is inconsistent in the inspections addressed to the seventh switch 2g to the twelfth switch 21 and that a silent failure has occurred in the vicinity of these switches. In the example illustrated in FIG. 7, the icon of the switch in which the error has occurred is displayed by hatching, but is not limited thereto. For example, another warning display may be used as long as it can indicate to the operator that an error has occurred, such as a blinking display.

  The display unit 23 may further display the suspected section where the silent failure has occurred on the result display screen P101. When only one of the adjacent switches 2 is included in the result data 13a, the display unit 23 can specify the adjacent switch as the suspicious section. In the example shown in FIG. 7, the area between the third switch 2c and the seventh switch 2g and the area between the fourth switch 2d and the eighth switch 2h are specified as the suspected section. Therefore, the display unit 23 may display the area between the third switch 2c and the seventh switch 2g and the area between the fourth switch 2d and the eighth switch 2h as the suspected section on the result display screen P101.

  When an error occurs in the error checking means 21, the detailed error checking means 22 identifies the switch 2 in which the silent failure has occurred.

  The detailed error inspection unit 22 specifies a device in which a silent failure has occurred when any error is detected by the error inspection unit 21. Specifically, the detailed error inspection unit 22 transmits the inspection data to the device in which the error is detected, specifically, the MIP of the switch adjacent to the switch 2 included in the result data 13a. Get response data copied and returned. The detailed error inspection unit 22 determines whether the inspection data transmitted to the switch 2 matches the response data. If they do not match, the switch 2 in which the silent failure has occurred is specified based on the identifier of the MIP. When the switch 2 in which the silent failure has occurred is specified, the detailed error checking unit 22 stores the identifier of the switch 2 in the detailed result data 14a.

  Here, the detailed error checking means 22 reads out the result data 13a, acquires the identifier of the switch 2 in which the error has occurred, refers to the topology data 15a, and the identifier of one of the adjacent devices is the result data 13a. If it is included, the inspection data is transmitted to the MIP of the adjacent switch using the Ethernet loopback command.

  In the example shown in FIG. 7, the third switch 2c and the seventh switch 2g are connected by one link and are adjacent to each other. However, the identifier of the third switch 2c is not included in the result data 13a, and 7 is included in the result data 13a. Similarly, the identifier of the fourth switch 2d is not included in the result data 13a, and the identifier of the eighth switch 2h is included in the result data 13a. Therefore, the detailed error checking means 22 extracts a section in which one of the two adjacent switches is included in the result data 13a and one of the two is not included in the result data 13a as a suspected section. The inspection data is transmitted to the MIP of the switch 2 in the suspected section. In the case of the example shown in FIG. 7, the inspection data is transmitted to each MIP of the third switch 2c, the fourth switch 2d, the seventh switch 2g, and the eighth switch 2h.

  The detailed error inspection means 22 can identify the switch 2 in which the silent failure has occurred based on whether the inspection data matches the inspection data received from each MIP.

  This will be described with reference to FIG. In the error checking means 21, no error occurs when the monitoring server 1 sends to the third switch 2c, and an error occurs when sending to the seventh switch 2g. Therefore, the section of the third switch 2c and the seventh switch 2g is a suspicious section where there is a possibility that a silent failure has occurred. Therefore, the detailed error inspection means 22 transmits inspection data to the MIP of the third switch 2c and the MIP of the seventh switch 2g.

  FIG. 8 shows a case where a silent failure has occurred in the third switch 2c. When the monitoring server 1 transmits the inspection data to the MIP upstream of the third switch 2c, the transmitted data matches the received data. On the other hand, when the inspection data is transmitted to the MIP downstream of the third switch 2c, the inspection data once stored in the memory of the third switch 2c is returned, so the transmitted data and the received data are It does not match. Even if the inspection data is transmitted to the MIP upstream of the seventh switch 2g, the transmitted data and the received data do not coincide. Therefore, the detailed error inspection means 22 can specify that a silent failure has occurred in the memory of the switch 2 when the inspection results are different between the upstream MIP and the downstream MIP of one switch 2.

  Here, when the result data 13a includes the type of inspection data when an error occurs, the detailed error inspection unit 22 transmits similar inspection data to the MIP. For example, when an error occurs when the error inspection unit 21 transmits long frame inspection data, the detailed error inspection unit 22 similarly transmits long frame inspection data to the MIP. Further, when an error occurs in the high traffic state in the error inspection unit 21, the detailed error inspection unit 22 similarly transmits the inspection data to the MIP in the high traffic state.

  As described above, when the detailed error checking means 22 identifies the switch 2 in which the silent failure has occurred, the identifier of the switch 2 is stored in the detailed result data 14a. Based on the identifier of the switch 2 included in the detailed result data 14a, the display means 23 displays on the display device 40 that the device has a silent failure.

  With reference to FIG. 9, the process of the monitoring server 1 which concerns on embodiment of this invention is demonstrated.

  When it is time to inspect the silent failure of the communication system 3, Steps S101 to S103 are repeated for all target devices and all inspection data. Here, all the target devices are the first switch 2a to the twelfth switch 21 of the communication system 3 shown in FIG. All the inspection data is inspection data stored in the inspection data storage unit 11 and includes, for example, short frame inspection data, long frame inspection data, inspection data with different priorities, and the like. In order to create a high traffic state, a set of a plurality of inspection data may be included.

  First, in step S101, the monitoring server 1 transmits inspection data to the target device by pinging and receives response data. In step S102, the monitoring server 1 compares the inspection data and the response data. If they do not match, the monitoring server 1 stores the identifier of the target device and the inspection data in the result data 13a.

  When the processing of step S101 to step S103 is completed for all target devices and all inspection data, the monitoring server 1 identifies the suspicious section in which the silent failure has occurred in step S104. The monitoring server 1 refers to the topology data 15a, and when only one of the adjacent switches 2 is included in the result data 13a, the section connecting the two adjacent switches is specified as the suspected section. Can do.

  In step S105, the monitoring server 1 displays the topology of the communication system 3 on the display device 40 based on the topology data 15a. Further, the monitoring server 1 displays an error on the destination switch 2 of the inspection data whose inspection data and response data do not match based on the result data 13a, and displays the suspicious section identified in step S104 on the display device 40. . When no data is stored in the result data 13a, the monitoring server 1 may display on the display device 40 that no error has occurred in step S105.

  In step S106, the monitoring server 1 determines whether or not there is a record in the result data 13a in order to determine whether or not to perform the detailed error inspection. When there is no record, since no silent failure has occurred in any of the target devices of the communication system 3, the processing is ended as it is. On the other hand, when there is a record in the result data 13a, the processing in step S107 and step S108 is repeated for each MIP of the device in the suspected section identified in step S104.

  First, in step S107, the monitoring server 1 transmits inspection data to each MIP by Ethernet loopback. In step S108, the monitoring server 1 determines whether the inspection data and the response data match. When the inspection data is transmitted to each MIP, the suspicious device in which the silent failure has occurred is specified in step S109. Specifically, if the inspection data transmitted to the MIP on the upstream side of the device matches, and the inspection data transmitted to the MIP on the downstream side does not match, a silent failure has occurred in the device. Can be specified.

  When the suspected device is identified, the monitoring server 1 displays the name of the identified suspected device on the display device 40 in step S110. Here, the monitoring server 1 may display a warning icon of the suspected device together with the topology data.

(Application example)
As shown in FIG. 10, it is effective to detect a silent failure for a standby device by the monitoring server 1 according to the embodiment of the present invention. The system shown in FIG. 10A includes a standby A switch 200a, an active B switch 200B, and a C switch 200c that distributes processing to the A switch 200a or the B switch 200b.

  In this case, the second instance 201b connected from the C switch 200c to the B switch 200b has traffic, but the first instance 201a connected from the C switch 200c to the A switch 200a has no traffic. However, as shown in FIG. 10B, when the standby system starts operation due to a failure of the active system, a problem may occur in a situation where a silent failure has occurred in the standby system. There is.

  Therefore, it is preferable that the monitoring server 1 according to the embodiment of the present invention performs a silent failure inspection on the devices in the standby system while the active system operates normally. Thereby, the standby system can stand by in a complete state.

  Thus, according to the monitoring server 1 which concerns on embodiment of this invention, the silent failure by the malfunction of the memory of the apparatus of the communication system 3 can be discovered by transmitting test | inspection data and comparing response data. . Thereby, the high quality communication system 3 can be provided.

  In addition, the monitoring server 1 can detect in advance a silent failure of a device of the communication system 3 as a computer process. Thereby, for example, the number of obstacles passively discovered by the user's report can be reduced. In addition, it is possible to confirm steady normality by detecting a silent failure in the standby communication system.

  Furthermore, since the device in which the silent failure has occurred can be identified, the failure time can be shortened. Furthermore, by displaying the topology data on the display device 40, it is possible to prompt the operator to identify the fault location and speed up the fault recovery action.

  In addition, the monitoring server 1 according to the embodiment of the present invention specifies the suspected section using ICMP, and identifies the part of the silent failure using the Ethernet loopback for the MIP of the device in the suspected section. Can do. In this way, by specifying the failure location step by step, the inspection time for silent failure can be shortened.

  Thus, according to the monitoring server 1 which concerns on embodiment of this invention, the high quality communication system 3 can be provided and a user's reliability can be improved.

(Other embodiments)
As described above, the embodiments of the present invention have been described. However, it should not be understood that the descriptions and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples, and operational techniques will be apparent to those skilled in the art.

  For example, the application server 1 described in the best embodiment of the present invention may be configured on one piece of hardware as shown in FIG. 3, or on a plurality of pieces of hardware according to the functions and the number of processes. It may be configured.

  It goes without saying that the present invention includes various embodiments not described herein. Therefore, the technical scope of the present invention is defined only by the invention specifying matters according to the scope of claims reasonable from the above description.

DESCRIPTION OF SYMBOLS 1 Monitoring server 2 Switch 3 Communication system 10 Storage apparatus 11 Inspection data storage part 12 Equipment data storage part 13 Result data storage part 14 Detailed result data storage part 15 Topology data storage part 20 Central processing control apparatus 21 Error inspection means 22 Detailed error inspection Means 23 Display means 30 Communication control device 40 Display device

Claims (6)

A monitoring server in a communication system comprising a plurality of devices and a monitoring server for inspecting silent failures of devices,
A device data storage unit for storing device data including an identifier of a device to be inspected for silent failure;
An inspection data storage unit for storing inspection data to be transmitted to the device;
A plurality of the inspection data is transmitted to the device to be inspected for the device data within a predetermined time to be in a high traffic state in the device, and the response data in which the inspection data is copied and returned by the device is acquired. It is determined whether or not the inspection data transmitted to the device and the response data match, and if they do not match, error checking means for storing the identifier of the device in the result data;
When it is determined that any of the devices does not match in the error inspection unit, the inspection data is stored in the MIP on each of the upstream side and the downstream side of the target device determined not to match and the device adjacent to the target device. Transmitting the response data in which the inspection data is copied and returned by the target device and the adjacent device, and transmitting the inspection data transmitted to the upstream side and the downstream side of the target device and the adjacent device, respectively It is determined whether or not the response data matches, and if the determination result does not match between the upstream side and the downstream side, detailed error checking means for specifying the device in which the silent failure has occurred is determined based on the identifier of the MIP. A monitoring server comprising: A topology data storage unit that stores topology data indicating the topology of the communication system together with the identifier of the device;
A display that displays the network configuration of the communication system on a display device based on the topology data, extracts an identifier of the device included in the result data, and displays a warning on the display device based on the extracted identifier of the device The monitoring server according to claim 1, further comprising: means. The inspection data storage unit stores a plurality of different inspection data,
The monitoring server according to claim 1, wherein the error inspection unit transmits each of a plurality of inspection data stored in the inspection data storage unit to the inspection target device. The detailed error inspection means refers to the result data and the topology data, and when the identifier of any one of the adjacent devices is included in the result data, transmits the inspection data to the MIP of the adjacent device. The monitoring server according to any one of claims 1 to 3 , characterized in that: When the information system includes an active device and a standby device,
The monitoring server according to any one of claims 1 to 4 , wherein the error inspection unit transmits the inspection data to a standby device. The monitoring program according to any one of claims 1 to 5 .

Images