JPH08115303A - Network supervising device - Google Patents

Abstract

PURPOSE: To provide a node state supervising device which monitors change in the active state of a node or failure in change in real time and easily analyzes its cause. CONSTITUTION: Control information for controlling nodes 3-1 to 3-x such as terminals is sent and received between a communication control means 11 and an FEP (communication control processor) 2, and the control information is outputted by a control information reporting means 12. A node state information generation informing means 13 stores the control information in a table 14 and judges whether the nodes change in active state or not, or fail to change or not according to the control information obtained so far, and when the criteria are met, control information relating to the changes in the active states of the nodes or failures in the change is taken out from the table 14 and node state information to which the node names of the nodes and criteria matching with the latest states are added is generated and outputted. A node state information processing means 15 stores the node state information in a file 5 and outputs a node state change report to a user terminal 4.

Description

Detailed Description of the Invention

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network monitoring device for monitoring the active state of each node in real time in a network system in which a host computer is connected to a plurality of nodes via a communication control processing device and a communication path.

Particularly, in a network system in which a host computer is connected to a plurality of terminals via communication channels, each terminal communicates with an application program on the host computer via communication control means, and an application in the host computer. The present invention relates to a session state monitoring device that monitors the active state of a session in real time when communication is performed between them via communication control means.

[0002]

2. Description of the Related Art Conventionally, the active state of a plurality of nodes such as terminals connected to a host computer via a communication path is monitored by the host computer.
For example, Japanese Patent Laid-Open No. 2-75046 discloses a node state change detection mechanism for detecting a change in the active state of a node connected to its own host, that is, a change from an activated state to a deactivated state and vice versa. And a node state management mechanism that updates the active state management information of the corresponding node to the latest state each time a change in the active state is detected by this mechanism. Further, the above-mentioned publication also describes a technique of notifying the active state of the detected node to another host.

[0003]

By the way, in order to monitor the active state of a node, in addition to the purpose of eliminating the waste of transmitting a command to a node in the inactive state as described in the above publication, there is a failure. The purpose is to monitor the occurrence of. That is, for example, if a node that should be in the activated state is in the deactivated state, it is possible that some kind of failure has occurred in the network.

As described above, the current active state of each node is known by the host computer. Therefore, when it is desired to know the active state of each node, the node state can be output by an operator command or the like and checked. However, it is difficult to know this immediately when the active state changes. On the other hand, as described in the above publication, if the latest active state is notified to the outside every time the active state of the node changes, it is possible to know that immediately when the active state changes. Even if adopted, the following problems remain. (1) Since the notification is not issued unless the activation state actually changes, for example, an event in which activation is failed due to some failure, although an activation request is issued to a node in the inactivated state When an event occurs, it cannot be monitored even if the event occurs. (2) Since only the latest active state of each node is managed, the cause of the state change (for example, due to a request from the host) cannot be known.

The object of the present invention is to monitor the latest active state of a node in real time not only when the active state of the node actually changes but also when the change of the active state fails. (EN) Provided is a network monitoring device capable of easily analyzing the cause of change or the cause of change failure.

Another object of the present invention is to provide a communication system between an application in a host computer and a terminal and a communication between applications in a host computer, when a failure occurs.
While minimizing the load on the host computer,
It is to improve the reliability and maintainability in the operation of the network system by providing the user with information that can promptly investigate the cause of the failure and deal with it in real time.

[0007]

According to a first network monitoring apparatus of the present invention, in a network system in which a host computer is connected to a plurality of nodes via a communication control processing unit and a communication path, communication in the host computer is performed. Control information notifying means for outputting control information transmitted and received to control the node between the control means and the communication control processing device, and for storing the control information output from the control information notifying means in node units Each time control information is output from the control information storage means and the control information notification means, the control information is stored in the control information storage means, and the active state of the node is changed from the control information up to the present. Whether or not the judgment criterion is satisfied or not, and whether the judgment criterion is satisfied, the node is determined. The control information related to the change of the active state or the failure of the change is extracted from the control information storage means, and the node state information including the extracted control information, the node name of the node, and the determination criterion that matches the latest state is displayed. Node status information creation notifying means for creating and outputting, node status management means for storing the node status information output from the node status information creation notifying means in node units, and node status information creation notifying means for node status Each time information is output, the node status information is stored in the node status management means, and a node status information processing means for creating and outputting a node status change notification from the node status information.

A second network monitoring device of the present invention is
In the first network monitoring device, the node state change notification includes a node name and a matching determination criterion.

A third network monitoring device of the present invention is
The second network monitoring device is characterized by including a node state search unit that searches the node state management unit in response to a node state acquisition request and notifies the request source of the search result.

A fourth network monitoring device of the present invention is
In the third network monitoring device, the control information extracted by the node state information notifying unit from the control information storing unit is the node activation request or deactivation transmitted from the communication control unit to the communication control unit processing unit. It is characterized by including a request, a response to the request transmitted from the communication control processing device to the communication control means, and a node deactivation notification transmitted from the communication control processing device to the communication control means.

A fifth network monitoring device of the present invention is
In a fourth network monitoring device, the output destination of the node state change notification is an application program operating on the host computer.

A sixth network monitoring apparatus of the present invention is
In the fourth network monitoring device, the output destination of the node state change notification is a user terminal.

A seventh network monitoring device of the present invention is
A host computer is connected to a plurality of terminals via a communication control processing unit and a communication path, and an application program in the host computer communicates with the terminal, an application program-terminal session, and communication between the application programs. In a network system having an application program-application program session to be performed, communication control means in the host computer for controlling the two types of sessions, the application program-terminal session in the communication control means, and the application A session message notifying means for acquiring and outputting a message of a program-application program session, a message information storage means for saving the message output from the session message notifying means in pair units of endpoints of the session, and the session. Message hand Each time a telegram is output from the telegram, the telegram is stored in the telegram information storage means, and the feasibility of the criteria for determining whether the active state of the session has changed or has failed is determined. However, when the judgment criterion is satisfied, a message associated with a change in the active state of the session or a failure of the change is extracted from the message information storage means, and the extracted message information and endpoint names at both ends of the session are extracted. And a session state information creation notifying unit that creates and outputs session state information including a determination criterion that matches the latest state, and a session that stores the session state information output from the session state information creation notifying unit in endpoint units. Every time the session status information is output from the status management unit and the session status information creation notifying unit, the session status information is output from the session status information creation notification unit. The Deployment state information stores the session state management unit, and a session state information processing means for outputting to create a session status change notification from the session state information.

An eighth network monitoring device of the present invention is
In the seventh network monitoring device, the session state change notification is characterized in that it includes endpoint names at both ends for identifying a session and a determination criterion that matches the latest state.

A ninth network monitoring device of the present invention is
The eighth network monitoring device is characterized by comprising session state searching means for searching the session state managing means in response to the session state acquisition request and notifying the request source of the search result.

According to a tenth network monitoring apparatus of the present invention, in the ninth network monitoring apparatus, the message information extracted by the session state information creation notifying means from the message information storage means controls session activation / deactivation. It is characterized in that it is limited to only the message information to be displayed.

According to an eleventh network monitoring apparatus of the present invention, in the ninth network monitoring apparatus, the message information extracted by the session state information creation notifying means from the message information storage means controls session activation / deactivation. It is characterized in that it is limited to the message information to be performed, the number of messages immediately after the session is activated, and the number of messages immediately before the end of the session.

A twelfth network monitoring apparatus according to the present invention is characterized in that, in the tenth network monitoring apparatus, an output destination of the session state change notification is an application program operating on the host computer.

A thirteenth network monitoring apparatus of the present invention is characterized in that, in the tenth network monitoring apparatus, an output destination of the session state change notification is a user terminal.

A fourteenth network monitoring apparatus according to the present invention is characterized in that, in the eleventh network monitoring apparatus, the output destination of the session state change notification is an application program operating on the host computer.

A fifteenth network monitoring apparatus of the present invention is characterized in that, in the eleventh network monitoring apparatus, an output destination of the session state change notification is a user terminal.

[0022]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below.
A detailed description will be given with reference to the drawings.

Referring to FIG. 1, a network monitoring apparatus according to a first embodiment of the present invention is a host computer 1
A communication control processor (hereinafter referred to as FEP) 2 connected to the host computer 1, and nodes 3-1 to 3-x connected to the FEP 2 via a communication path L. A user terminal 4 including a CRT 4a and a keyboard 4b and a node state management file 5 are further connected to the computer 1. Further, inside the host computer 1, a communication control means 11 having a control information notification means 12, a node status information creation notification means 13, a control information storage table 14, and a node status information processing means 1
5 and a node state search means 16 are provided.

Although the nodes 3-1 to 3-x are typically terminals, they may be composed of other host computers or terminal control devices. A node name that can be uniquely identified on the network is assigned to each of the nodes 3-1 to 3-x. The nodes 3-1 to 3-x are connected to the FEP 2 via a communication line L including a dedicated line, a dedicated network, a local area network, a switching network and the like. The process of establishing and releasing the data communication path necessary for communication between the host computer 1 and the nodes 3-1 to 3-x and the actual transmission / reception of data is performed by the communication control means 11 and the FEP 2 in the host computer 1. It is performed according to a predetermined communication protocol.

The control information notifying means 12 provided in the communication control means 11 is means for outputting control information exchanged between the communication control means 11 and the FEP 2 to control the node. The output control information is notified to the node state information creation notifying means 13. In this example,
Since all the control information transmitted and received to control the node between the communication control means 11 and FEP2 is notified, the node activation request and the deactivation transmitted from the communication control means 11 to FEP2. Request, F for them
Of course, the control information relating to the change of the active state of the node such as the response from the EP2 to the communication control means 11 and the deactivation notification of the node from the FEP2 to the communication control means 11,
Other control information is also notified.

Referring to FIG. 2, the control information storage table 14 constitutes a control information storage means for storing the control information output from the control information notification means 12 in node units. As shown in the figure, the control information storage table 1
4 has header structures H1 to Hx corresponding to the nodes 3-1 to 3-x on a one-to-one basis, and control information related to each node is stored in the nodes as illustrated in the header structure H1. The header structures are sequentially connected and stored. It should be noted that H in FIG. 2 is an upper header corresponding to the node name and pointing to the position of the header structure corresponding to the node. As will be described later, when the determination criterion is satisfied for a certain node, node state information is created from the control information accumulated in the control information storage table 14 for that node, and the currently accumulated control information is cleared, When the control information of the node appears again, it is newly accumulated.

The node state information creation notifying means 13 is means for storing control information in the control information storage table 14, determining whether the criteria are met, creating node state information when the criteria is met, and notifying it. An example of processing is shown in FIG.
Shown in

Here, in the case of the present embodiment, there are the following three criteria as the criteria. The node in the inactive state has changed to the activated state. The node in the inactivated state has failed to activate. The criterion for determining that the node in the activated state has changed to the inactivated state is It is determined that the node in the activated state is satisfied at the time when the communication control means 11 issues an activation request for the node to the FEP 2 and then the FEP 2 sends a response to the communication control means 11 indicating that the node has been normally completed. It The communication control means 11 sends a request for activation of the node to the FEP 2 to the inactive node, and then the communication control means 11 sends a response including the reason code indicating that the node has been terminated abnormally. It is determined that the condition is satisfied at the time of transmission. The communication control means 11 sends a request for deactivating the node to the FEP 2 to the activated node, and then the response (including both normal and abnormal) from the communication control means 1 is issued from the FEP 2.
1, or when the FEP 2 sends a deactivation notification of the node to the communication control unit 11,
It is determined that each has been established. The event in which the activated node fails to deactivate is included in.
This is because, in the communication control of the communication control means 11, the node that issued the deactivation request is managed as being deactivated not only when the response is normally terminated but also when the response is abnormally terminated.

Referring to FIG. 4, the node state information is
It is information that includes control information related to a change or failure of change in the active state of the node, the node name of the node, the latest state, and the applicable determination criteria.

Referring to FIG. 5, the node state management file 5 constitutes a node state management means for storing node state information in node units. As shown in the figure, each node 3-1 to 3-1 is included in the node state management file 5.
There is a record R1 to Rx corresponding to 3-x on a one-to-one basis.
Each of the records R1 to Rx is a variable length record and has a record length for storing a plurality of node state information. At the beginning of each of the records R1 to Rx, there is a column for storing a node name, a state, and a judgment criterion. The node name is the node name of the node, and the state is the latest state of the node (activated state, non-activated). For the activation status), the determination criteria for which the latest feasibility is determined are stored in the determination criteria, and subsequently, a plurality of node state information are stored in order from the oldest one. When some node state information is stored and new node state information cannot be stored due to the limitation of the maximum record length, the oldest node state information is ejected and the new node state information is stored, so that the new node state information is always stored. The latest plurality of node state information is held.

Referring to FIG. 6, the node state information processing means 15 uses the node state management file 5 of the node state information.
It is a means for storing in a node, creating a node state change notification, and outputting it.

Referring to FIG. 7, the node state change notification is information extracted from the information contained in the node state information, which is required to be notified to the notification destination at a minimum.
In the present embodiment, the state change notification is composed of the node name in the node state information and the matching determination criteria.

The node status searching means 16 is used by the user terminal 4
In response to a node state acquisition request from the keyboard 4b, the node state management file 5 is searched, and the search result is output to the CRT 4a of the user terminal 4 as a node state acquisition response. As search conditions, search for all node state information for all nodes, search for all node state information for each node that specifies a specific node, current state that specifies a specific node, and the control that causes that state Various searches such as information searches are possible.

A network monitoring apparatus according to the first embodiment of the present invention will be described below with reference to FIGS.

Communication control means 11 of the host computer 1
When the control information for controlling the node 3-1 is transmitted from the FEP 2 to the FEP 2, this control information is picked up by the control information notifying means 12 and notified to the node state information creation notifying means 13.

The node state information creation notifying means 13 is shown in FIG.
The notified control information is stored in the control information storage table 14 as shown in (S1). That is, as shown in FIG.
When the header structure H1 corresponding to the node 3-1 or another control information is already connected to the header structure H1, it is connected to the last control information. Then, the node state information creation notifying means 13 determines whether or not the determination criteria are satisfied (S2), and when none of the determination criteria is satisfied, the processing is ended.

Similarly, when the FEP 2 transmits the control information concerning the control of the node 3-1 to the communication control means 11, this control information is also picked up by the control information notifying means 12 and the node state information creation notifying means 13 is sent. Then, the node state information creation notifying means 13 links this control information to the header structure H1 or the last control information corresponding to the node 3-1 in the control information storage table 14. And
It is determined whether or not the determination criteria are satisfied, and if none of the determination criteria is satisfied, the processing ends.

The above operation is continued until one of the criteria for the node 3-1 is established. As a result, as shown in FIG. 2, the header structure H1 corresponding to the node 3-1 has the control information exchanged between the communication control means 11 and the FEP2 for controlling the node 3-1. ,
It is sequentially held until any of the judgment criteria is established.

Now, assuming that the node state information creation notifying means 13 determines that any one of the above-mentioned determination criteria (1) is satisfied at the time of processing the control information (N) shown in FIG. The action is taken. The case where the judgment criteria 1 to 3 are satisfied at the time when the control information (N) is processed is the following case. (A) Criteria: Control information (N-1) is an activation request for the node 3-1 sent from the communication control means 11 to FEP2, and control information (N) is a normal end response from FEP2 to it. If there was. (B) Judgment criteria; control information (N-1) is an activation request for the node 3-1 sent from the communication control means 11 to FEP2, and control information (N) is an abnormal end response from FEP2 to it. If there was. (C) Criteria: Control information (N-1) is a deactivation request of the node 3-1 sent from the communication control means 11 to FEP2, and control information (N) is a response from FEP2 (success). (Including both failures), and the control information (N) from the FEP 2 to the communication control means 11
When the deactivation notification of the node 3-1 is transmitted to the node.

First, the node state information creation notifying means 13
Node state information is created (S3 in FIG. 3). That is, of the control information linked to the header structure H1 corresponding to the node 3-1 of the control information storage table 14, the control information N, N-1 (however, F
(Only N in the case of the deactivation notification from EP2), and some control information that is connected immediately after the header structure H1 and how many control information that are connected immediately before the control information that has caused the determination criterion to be satisfied. Control information (the number of which is predetermined and information that overlaps with the control information that has caused the above-mentioned determination criteria is excluded) is extracted, and the node 3-
The node state information including the node name of 1, the current state of the node 3-1, and the determination criterion established this time is created. In the node state information illustrated in FIG. 4, two pieces of control information (1) and (2) connected immediately after the header structure H1 and the control information (N-
1) and one control information (N-2) immediately before (N) are included. In this way, the control information (1) and (2) immediately before and immediately after the previous criterion is satisfied is extracted in addition to the control information that causes the criterion that is satisfied this time. This is because it is often useful for analysis.
Of course, as another embodiment, only the control information that is the cause of the establishment of the determination criterion this time may be extracted.

Next, the node state information creation notifying means 13
The node state information created as described above is notified to the node state information processing means 15 (S4), and all the control information linked to the header structure H1 corresponding to the node 3-1 of the control information storage table 14 is displayed. The deletion is performed (S5), and the process ends. Therefore, thereafter, when the control information relating to the control of the node 3-1 is exchanged between the communication control means 11 and the FEP2 again, the control information is connected from the header structure H1.

Now, the node status information processing means 15 notified of the node status information from the node status information creation notifying means 13 stores the notified node status information in the node status management file 5, as shown in FIG. (S11). That is, as shown in FIG. 5, the node state information notified this time is added to the end of the record R1 corresponding to the node 3-1 in the node state management file 5, and the state of the record R1 and the determination criterion are updated. Update to stuff. As described above, when the maximum record length is exceeded, the oldest node state information in the record is deleted so that the latest node state information is always held.

At the same time, the node state information processing means 15 includes the node name of the node 3-1 which is the minimum necessary information to be notified to the user terminal 4 and the judgment criterion established this time.
Create a node state change notification as shown in (S12),
This is output to the user terminal 4 (S13). The user terminal 4 displays this node state change notification on the screen of the CRT 4a. This allows the system operator to monitor the active state of the network node in real time.

The details of the node state information are stored in the node state management file 5, and if the node state search means 16 is activated from the user terminal 4 to perform the search, it becomes the cause of the criterion established this time. It is possible to confirm the contents of control information and the like.

Although the operation of this embodiment has been described above by focusing on the node 3-1, the same operation is performed on the other nodes 3-2 to 3-x.

The embodiment of the present invention has been described above.
The present invention is not limited to the above embodiments, and various other additions and changes can be made. For example, although the notification destination of the node state change notification or the request source of the node state acquisition request is the user terminal 4 in the above embodiment, it may be an application program running on the host computer 1. Further, the control information notifying means 12 uniformly notifies not only the control information but also the data transmitted / received by the communication with the node, and the node state information creation notifying means 13 stores these in the control information storage table 14 and then the judgment criterion is set. The establishment may be determined, and if established, necessary control information may be extracted from the control information storage table 14. In this way, the amount of storage in the control information storage table 14 increases, but the control information notifying unit 12 does not need to notify control information and data separately.

With the above, the processing of the network monitoring apparatus according to the first embodiment of the present invention is completed.

In the network monitoring apparatus according to the first embodiment of the present invention, the control information related to the change of the active state of the node or the failure of the change, that is, the communication control means to FE
Node state information including a node activation request or deactivation request to P, a response from the FEP to the communication control means to the request, and a node deactivation notification from the FEP to the communication control means is node state management means. Is held in
By examining them, it is possible to grasp the cause of the change in the active state and the failure of the change, and to clarify the cause of the disorder. In particular, when the activation request from the communication control means is not normally completed, the reason code is included in the response from the FEP, so that the cause of the failure can be easily clarified. ing.

Furthermore, when the active state of the node changes or when the change fails, only the minimum information such as the node name and the matching criterion is output to the notification destination as the node state change notification, and the rest of the information is the node. Since it is stored in the state management means and can be referred to later, the amount of information to be notified to the notification destination can be reduced. Therefore, there is an effect that the traffic of information for notification is reduced and the load on the notification destination can be suppressed.

Furthermore, instead of saving all communication contents exchanged between the communication control means and the FEP, only necessary control information is extracted to create node state information,
Since this is stored in the node state management means, it has an effect that resources can be effectively used unlike the case where all communication contents are stored.

Referring to FIG. 8, the network monitoring apparatus according to the second embodiment of the present invention is a host computer 8
1 and terminals 82-1 to 82-x connected to the host computer 81 via the communication path L. The host computer 81 is further connected to a user terminal 83 and a session state management file 84. There is. Further, in the host computer 81, the electronic message information notifying means 812 is provided.
A communication control means 811, which has a session state information creation notification means 813, a message information storage table 814,
A session state information processing unit 815 and a session state searching unit 816 are provided, and the communication control unit 811 is provided.
Application programs 817-1 to 81-1 for communicating with the terminals 82-1 to 82-x or mutually via the terminals
7-x is in operation.

The terminals 82-1 to 82-x may be composed of application programs in other host computers. An endpoint name used when performing communication is assigned to each of the terminals 82-1 to 82-x. These terminals 82-1 to 82-x are dedicated lines, dedicated networks,
Communication path L composed of local network, switching network, etc.
Is connected to the host computer 81 via. Between the application programs 817-1 to 817-x,
Or application programs 817-1 to 81
Communication between the 7-x and the terminals 82-1 to 82-x is performed by a protocol prepared for each of the application programs 817-1 to 817-x.

The electronic message information notifying means 812 provided in the communication control means 811 is an application program 817-1 to 817- which is executed via the communication control means 811.
between x and the application program 817-1 to
The electronic message information of the communication between the 817-x and the terminals 82-1 to 82-x is output and notified to the session state information creation notifying means 813. In the present embodiment, since all the electronic message information transmitted and received in the communication is notified, in the communication, a change in the active state of the session such as a session activation request, a deactivation request, and a response to them In addition to the related message information, all message information passing through the session is also notified when the session is activated.

Referring to FIG. 9, the electronic message information storage table 814 constitutes electronic message information storage means for saving the electronic message information output from the electronic message information notifying means 812 in units of pairs of endpoint names at both ends of the session. ing. As shown in the figure, the electronic message information storage table 814 has header constructions H1 to Hx corresponding to the terminals 82-1 to 82-x and the application programs 817-1 to 817-x in a one-to-one correspondence. Further, the sub-header structures H1-1 to H1-x each having a one-to-one correspondence with the communication partner (the other end point) are provided under H1 to Hx. The message information related to each session is that the primary station of the session is the header structure side of the two sub-header structures identified by the pair of endpoint names at both ends of the session.
Secondary stations are sequentially connected to and stored in the sub-header structure which is the sub-header structure. It should be noted that H in FIG. 9 is an upper header corresponding to the endpoint name and pointing to the position of the header structure corresponding to the endpoint name. Further, the header structure points to the position of the sub-header structure corresponding to the endpoint name with respect to the endpoint name. As will be described later, when the judgment criterion is satisfied for a certain session, the message information storage table 81 for that session is given.
When the electronic message status information is created from the electronic message information accumulated in 4, the currently accumulated control information is cleared, and the electronic message information of the session appears again, new accumulation is started.

Session state information creation notifying means 813
Stores the message information in the message information storage table 814,
It is a means for determining whether or not the criteria are met, creating session state information when the criteria are met, and notifying the session state information.

Here, in the case of the present embodiment, there are the following three criteria as judgment criteria. The session in the deactivated state has changed to activation information. The session in the deactivated state has failed to activate. The criterion for determining that the session in the activated state has changed to the deactivated state is In a session identified by a pair of activated endpoint names, one of the endpoints issues a session activation request to the other, and then the other sends a response indicating that the session was processed normally. It is considered to be satisfied when it is sent to the original endpoint. The criterion is that in a session identified by a pair of endpoint names that are in a deactivated state, one of the endpoints issues a session activation request to the other, and the other process abnormally including the reason code. It is determined that the response is satisfied when the response indicating that the request is transmitted is transmitted to the endpoint that is the source of the request. The criterion is that one of the endpoints in the session identified by the pair of endpoint names in the activation information issued a request to deactivate the session to the other, and then the other processed normally. Is satisfied when the response is sent to the endpoint that originated the request. In addition, regarding the event that the session in the activation information pair failed to deactivate, when the session is finally deactivated,
Is determined to have been satisfied. If the process for deactivating the session is abnormal and the session is abnormally terminated, it is also determined that is satisfied.

Referring to FIG. 10, the session state information includes message information relating to a change in the active state of the session or failure of the change, endpoint names at both ends of the session, the latest state, and the corresponding judgment criteria. It is the information that is included.

Referring to FIG. 11, the session state management file 84 constitutes session information management means for storing the session state information in pairs of the endpoint name of the primary station and the endpoint name of the secondary station. There is.
As shown in the figure, the session state management file 84 includes all primary stations and secondary stations when the terminals 82-1 to 82-x and the application programs 817-1 to 817-x communicate with each other. There is a record R1 to Rx corresponding to the combination of 1 to 1. Each record R1 to Rx
Is a variable length record, and has a record length for storing a plurality of session state information. Each record R1-R
At the beginning of x, there is a field for storing the primary station endpoint name, secondary station endpoint name, status, and judgment criteria. The primary station endpoint name is the endpoint name of the primary station of the relevant session. The secondary station endpoint name is the secondary station endpoint name of the session, and the status is
The latest state of the relevant session (activation status, deactivation information) is stored in the determination criteria, and the latest satisfied determination criteria are stored, respectively, and subsequently, a plurality of session state information is stored in order from the oldest. . If some session state information is stored and new session state information cannot be stored due to the maximum record length constraint, by expelling the oldest session state information and storing new session state information, The latest plurality of session state information is always held.

The session state information processing means 815 is means for storing session state information in the session state management file 84, creating a session state change notification, and outputting it.

Referring to FIG. 12, the session state change notification is information extracted from the information contained in the session state information, which is required to be notified to the notification destination at a minimum. The session status change notification is composed of the primary station endpoint name, the secondary station endpoint name, the status, and the matching judgment criteria.

The session state retrieval means 816 is means for retrieving the session state management file 84 in response to the session state acquisition request from the user terminal 83 and outputting the retrieval result to the user terminal 84 as a session state acquisition response. is there. As search conditions, search for all session state information of all sessions, search for all session state information for each session that specifies a specific session, current state that specified a specific session, and the message that caused that state Various searches such as information searches are possible.

In the following, regarding the network monitoring apparatus according to the second embodiment of the present invention, focusing on the session identified by the application program 817-1 as the primary station and the terminal 82-1 as the secondary station, FIGS. This will be described with reference to FIG.

When message information is exchanged between the terminal 82-1 and the application program 817-1 via the communication control means 811, the message status information creation notifying means picked up by the message information notification means 812. 813 is notified.

Session state information creation notifying means 813
Displays the notified electronic message information in the electronic message information storage table 814.
To be stored. That is, as shown in FIG. 9, a header structure H1 corresponding to the application program 817-1.
Secondary header structure H corresponding to terminal 82-1 connected to
1-1, or another message information already has a sub-header structure H
When it is connected to 1-1, it is connected to the last message information. Then, the session state creation notifying means 813
It is determined whether or not the determination criteria are satisfied, and if none of the determination criteria is satisfied, the process ends.

The above operation is performed for the corresponding session.
It continues until either criterion is met. As a result, as shown in FIG. 9, the electronic message information flowing on the session by the application program 817-1 and the terminal 82-1 is sequentially held until one of the determination criteria is satisfied.

First, session state information creation notifying means 81
3 creates session state information. That is, the sub-header structure H1-1 corresponding to the terminal 82-1 connected to the header structure H1 corresponding to the application program 817-1 of the message information storage table 814 when the determination criterion is satisfied this time. To create session state information loaded with the application program 817-1 that is the primary station, the endpoint name of the terminal 82-1 that is the secondary station, the current state of the session, and the judgment criteria satisfied this time. . However, this method is wasteful because all the message information flowing through the session is managed and saved. Therefore, it is possible to reduce the traffic in the host computer 81 by limiting only the message information that causes the determination criteria to be extracted as message information. In the case of (because of course, the judgment criteria have been met in advance), extraction of message information by satisfying the judgment criteria, and a predetermined number of message information and judgment criteria immediately after clearing the message information A predetermined number of pieces of electronic message information immediately before satisfying the above are extracted. The number electronic message information immediately after session activation and the number electronic message information immediately after deactivation are acquired. It is important to activate and deactivate the session at the level of the communication control means 811.
Especially in the case of deactivation, at the communication control means 811 level,
This is because an abnormality at the protocol level specific to the application program, which is a higher level than the normal deactivation, is important in the normal operation of the network system. Immediately after the session at the communication control means 811 level is activated, the activation process of the association in the OSI model by the protocol at the application program level occurs, and conversely, immediately before the deactivation at the communication control means 811 level, the association is activated. This is because the deactivation processing of occurs.
As a result, the information stored in the session state management file 84 also becomes smaller.

In this case, the structure of the electronic message information storage table 814 may be changed as shown in FIG. Four examples of connecting message information to the sub-header structure are prepared, and message information D1 at the time of transition from the deactivated state to the activated state is prepared.
-1 to D1-x, a predetermined number of message information D2-1 to D2-x after the activation state transition, and a predetermined number of message information D3-1 to immediately before the deactivation state transition D3-
x, message information D4-1 to D4 related to deactivation information transition
-X. It is the position of D1-1 that connects the message information in the inactive state, and the message information is linked to the judgment criterion or the tail end following D1-1 until the judgment criterion is satisfied. The message information immediately after satisfying the judgment criteria is
Until the position of D2-1 is reached and a predetermined number of message information items are linked, the message information items are linked to the end following D2-1. The message information immediately after the number of message information linked to the column beginning with D2-1 reaches a predetermined number is D3.
Until the position of -1 is reached and a predetermined number of electronic message information items are connected, the electronic message information items are connected to the end following D3-1. Here, when the number exceeds the predetermined number, the oldest message information is removed and the new message information is connected to the end so that the latest predetermined number of message information is always D3-. It is connected to a column starting with 1. The first message information that triggers the transition to the deactivated state such as a deactivation request is at the position of D4-1, and the message information until the session transitions to the deactivated state is D
Connect to the end following 4-1. When the electronic message information storage table 14 has this configuration, the process of the session state information creation notifying means 13 connecting the electronic message information to the electronic message information storage table increases the load, but creates the session state information from the electronic message information storage table 14. The processing to do can be reduced. Further, when the total number of message information stored in the message information storage table 14 is in the active state for a long time and a huge number of messages are transmitted during that time, the message information storage table 14 is used very efficiently. You can
The storage medium such as the memory in the host computer 1 is not pressed.

Next, session state information creation notifying means 81
3 informs the session state information processing means 815 of the session state information created as described above, and the application program 81 of the electronic message information storage table 814.
7-1 The terminal 8 connected to the header structure H1 corresponding to 7-1
All the electronic message information linked to the sub-header structure H1-1 corresponding to 2-1 is deleted, and the process ends. Therefore, thereafter, when message information relating to a session in which the application program 817-1 is used as the primary station and the terminal 82-1 is used as the secondary station flows through the communication control means 811, it is linked by the sub-header structure H1-1. I will go.

The session status information processing means 815, which has been notified of the session status information from the session status information creation notifying means 813, stores the notified session status information in the session status management file 84. That is, FIG.
1, the session notified this time at the end of the record R1 having the primary station endpoint corresponding to the application program 817-1 and the secondary station endpoint corresponding to the terminal 82-1 in the session state management file 84. The state information is added and the state of the record R1 and the judgment standard are updated. Also, as mentioned above,
When the record R1 exceeds the maximum record length, the oldest session state information is deleted so that the latest several session state information are always held.

At the same time, the session state information processing means 815
Is the minimum required information to be notified to the user terminal 83, the primary station endpoint name, the secondary station endpoint name,
A session state change notification as shown in FIG. 12 including the state and the judgment criteria is created and notified to the user terminal 83. As a result, the system operator can always monitor the active state of the latest session in real time.

Since detailed message information and message information at the association level are held in the session status management file 84, the system status is always referred to by the session status search means 816 via the user terminal 84 or the like. It becomes possible.

In the present embodiment, the session using the application program 817-1 as the primary station and the terminal 82-1 as the secondary station is an example, but the same operation is performed for the sessions of other combinations.

Further, in the present embodiment, the notification destination of the session state change notification is the user terminal, but this may be the upper application program. Further, although the present invention is a session monitoring device closed in a single host computer, a higher-level application receives a session state change notification from a session monitoring device in another host computer and processes it. By using the session state searching means of the session monitoring device in the above, it becomes possible to monitor the session of a large-scale network system in real time by a plurality of host computers. If the higher-order application program operates as an OSI management agent, a more global network real-time monitoring system can be constructed by linking with other monitoring devices.

With the above, the processing of the network monitoring apparatus according to the second embodiment of the present invention is completed.

The network monitoring apparatus according to the second embodiment of the present invention uses the message information related to the change of the active state of the session or the failure of the change, that is, the session activation request and the inactivity between the end points of the session. The session state information including the activation request and the response to the activation request is stored in the session state management means and can be searched and referenced, so that the cause of the change in the active state and the failure of the change can be grasped. It has the effect of being able to investigate the cause of the disorder.

Further, instead of notifying all the acquired session state information, most of them are held by the session state management means, and only the minimum necessary contents are notified. Has the effect of being able to reduce.

Furthermore, instead of holding all the information flowing in the session, only the information necessary for status monitoring and failure analysis is acquired and held, so that the load on the host computer can be reduced. have.

[0078]

As described above, the network monitoring apparatus of the present invention provides the latest active state of a node in real time not only when the active state of the node actually changes but also when the change of the active state fails. This has the effect that it can be monitored and that the cause of the change in the state and the cause of the failure in the change can be easily analyzed.

Further, the network monitoring device of the present invention is
When a failure occurs in the communication between the application in the host computer and the terminal or between the applications in the host computer, the cause of the failure can be quickly investigated and information that can be dealt with in real time while minimizing the load on the host computer. By providing to users,
It has the effect of improving reliability and maintainability in the operation of the network system.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a network monitoring device according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a configuration of a control information storage table 14 according to the first embodiment of this invention.

FIG. 3 is a flow chart showing a process of a node state information creation notifying means 13 in the first exemplary embodiment of the present invention.

FIG. 4 is a diagram showing an example of node state information in the first exemplary embodiment of the present invention.

FIG. 5 is a diagram showing a configuration of a node state management file 5 according to the first embodiment of this invention.

FIG. 6 is a flowchart showing the processing of the node state information processing means 15 in the first example of the present invention.

FIG. 7 is a diagram showing an example of a node state change notification according to the first embodiment of this invention.

FIG. 8 is a block diagram showing a configuration of a network monitoring device according to a second embodiment of the present invention.

FIG. 9 is a diagram showing a configuration of a telegram information storage table 814 according to the second embodiment of the present invention.

FIG. 10 is a diagram showing an example of session state information in the second exemplary embodiment of the present invention.

FIG. 11 is a diagram showing a configuration of a session state management file 84 according to the second embodiment of this invention.

FIG. 12 is a diagram showing an example of a session state change notification according to the second embodiment of the present invention.

FIG. 13 is a diagram showing a configuration of a telegram information storage table 84 according to the second embodiment of the present invention.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 host computer 2 FEP (communication control processor) 3-1 to 3-x node 4 user terminal 4a CRT 4b keyboard 5 node status management file 11 communication control means 12 control information notification means 13 node status information creation notification means 14 control Information storage table 15 Node status information processing means 16 Node status searching means 81 Host computer 82-1 to 82-x terminal 83 User terminal 84 Session status management file 811 Communication control means 812 Message information notification means 813 Session status information creation notification means 814 Message information storage table 815 Session state information processing means 816 Session state search means 817-1 to 817-x Application program

Claims (15)

[Claims] 1. In a network system in which a host computer is connected to a plurality of nodes via a communication control processing device and a communication path, a node is controlled between a communication control means in the host computer and the communication control processing device. Control information notifying means for outputting control information transmitted and received, control information storing means for storing the control information output from the control information notifying means in node units, and control information from the control information notifying means Whenever is output,
The control information is stored in the control information storage means, and it is determined from the control information up to the present whether or not the active state of the node has changed or whether the change has failed, and whether or not the determination criterion is satisfied. When it is determined that the criterion is satisfied, the control information related to the change of the active state of the node or the failure of the change is extracted from the control information storage means,
A node state information creation notifying unit that creates and outputs node state information including the extracted control information, the node name of the node, and a determination criterion that matches the latest state, and the node state information creation notifying unit Node state management means for storing node state information in node units, and each time the node state information is output from the node state information creation notifying means, the node state information is stored in the node state management means, A network monitoring device comprising: a node state information processing unit that creates and outputs a node state change notification from the node state information. 2. The network monitoring device according to claim 1, wherein the node state change notification includes a node name and a matching determination criterion. 3. A node status search means for searching the node status management means in response to a node status acquisition request and notifying the request source of the search result.
The network monitoring device described. 4. The control information extracted by the node status information notifying means from the control information storing means is a node activation request or deactivation request transmitted from the communication control means to the communication control means processing device. 4. A response to the request transmitted from the communication control processing device to the communication control means, and a node deactivation notification transmitted from the communication control processing device to the communication control means. Network monitoring equipment. 5. The network monitoring device according to claim 4, wherein the output destination of the node state change notification is an application program operating on the host computer. 6. The network monitoring device according to claim 4, wherein the output destination of the node state change notification is a user terminal. 7. An application program-terminal session in which a host computer is connected to a plurality of terminals via a communication control processing device and a communication path, and the application program in the host computer and the terminal communicate with each other, and the application. In a network system having an application program-application program session for communicating between programs, a communication control means in the host computer for controlling the two types of sessions, and an application program-terminal between the communication control means. A session message notifying unit that acquires and outputs a session and a message of the application program-application program session, and message information storage that saves the message output from the session message notifying unit in pairs of endpoints of the session. Means and the session Each time an electronic message is output from the electronic message notification means, the electronic message is stored in the electronic message information storage means, and a judgment criterion as to whether the active state of the session has changed or has failed to change Of the session, when the criterion is satisfied, a message related to the change in the active state of the session or the failure of the change is extracted from the message information storage means, and the extracted message information and the session Session state information creation notifying means for creating and outputting session state information including endpoint names at both ends and a judgment criterion that matches the latest state, and session state information output from the session state information creation notifying means as endpoints. Session state information is output from the session state management unit that stores the session state information and the session state information creation notification unit. Every time the session state information is stored in the session state management means, and a session state information processing means for creating and outputting a session state change notification from the session state information is provided. . 8. The network monitoring device according to claim 7, wherein the session status change notification includes endpoint names of both ends for identifying a session and a determination criterion that matches the latest status. 9. The network monitoring device according to claim 8, further comprising a session state search unit that searches the session state management unit in response to a session state acquisition request and notifies the request source of the search result. 10. The electronic message information extracted by the session state information creation notifying means from the electronic message information storage means is limited to only electronic message information for controlling activation / inactivation of a session. Network monitoring device. 11. The message information extracted by the session state information creation notifying means from the message information storage means includes message information for controlling activation / deactivation of a session and several messages and sessions immediately after the session is activated. 10. The network monitoring device according to claim 9, wherein the number is limited to a few telegrams immediately before the end. 12. The network monitoring device according to claim 10, wherein an output destination of the session state change notification is an application program operating on the host computer. 13. The network monitoring device according to claim 10, wherein an output destination of the session state change notification is a user terminal. 14. The network monitoring device according to claim 11, wherein an output destination of the session state change notification is an application program operating on the host computer. 15. The network monitoring device according to claim 11, wherein the output destination of the session state change notification is a user terminal.