US20080177874A1 - Method and System for Visualizing Network Performance Characteristics - Google Patents
Method and System for Visualizing Network Performance Characteristics Download PDFInfo
- Publication number
- US20080177874A1 US20080177874A1 US12/033,816 US3381608A US2008177874A1 US 20080177874 A1 US20080177874 A1 US 20080177874A1 US 3381608 A US3381608 A US 3381608A US 2008177874 A1 US2008177874 A1 US 2008177874A1
- Authority
- US
- United States
- Prior art keywords
- network
- quality
- service
- measurements
- performance
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/04—Processing captured monitoring data, e.g. for logfile generation
- H04L43/045—Processing captured monitoring data, e.g. for logfile generation for graphical visualisation of monitoring data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
- H04L41/5003—Managing SLA; Interaction between SLA and QoS
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
- H04L41/5003—Managing SLA; Interaction between SLA and QoS
- H04L41/5009—Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
- H04L41/5032—Generating service level reports
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/50—Network service management, e.g. ensuring proper service fulfilment according to agreements
- H04L41/508—Network service management, e.g. ensuring proper service fulfilment according to agreements based on type of value added network service under agreement
- H04L41/5096—Network service management, e.g. ensuring proper service fulfilment according to agreements based on type of value added network service under agreement wherein the managed service relates to distributed or central networked applications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/06—Generation of reports
- H04L43/067—Generation of reports using time frame reporting
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/16—Threshold monitoring
Definitions
- the disclosed subject matter relates to computer and related electronic systems networks. More particularly, this disclosure relates to a novel and improved method and system for visualizing network performance characteristics.
- SLAs Service Level Agreements
- End-to-end performance monitoring can be extremely useful as a proactive method for both rapid troubleshooting and performance management of enterprise networks and server aggregations. Such monitoring has been successfully implemented to quickly identify and resolve the myriad of performance issues associated with networks, servers, and applications.
- the use of end-to-end performance monitoring appliances has uncovered serious inefficiencies with load balancers, poorly designed applications, bypassed proxy servers, ineffective cache servers, aggressive active agents, and badly designed “redundant” networks. They can provide the “big-picture” view of networks and applications to answer questions that are critical for the end-user experience. These questions may include knowing what impact server consolidation will have on users.
- Such applications can help address which will work better on a particular network, a thick or thin clients configuration.
- performance monitoring applications can help identify which sites are in greatest need of upgrades or downgrades, and which web pages are the slowest to download.
- Drill-down troubleshooting capabilities can reveal metrics that can save weeks or months of time in identifying and resolving issues. Analyses that previously required six weeks to complete with packet sniffing tools may be accomplished in minutes when end-to-end performance monitoring appliances are properly configured. Because they continuously monitor applications, such appliances notice and report even difficult intermittent issues that cannot readily be reproduced. If a problem occurred at 3:00 a.m. the previous morning, their stored reports can be used for a post-mortem analysis. There is no need to wait for a recurrence in order to capture the behavior the way legacy troubleshooting tools require.
- End-to-end performance monitoring appliances with intelligent thresholds can alert a network performance management team to a developing problem before the problem severely impacts customers.
- Such proactive management and high-level views allow network managers to discover new ways to optimize the network.
- Techniques for visualizing network performance characteristics are disclosed, which techniques both improve the operation of the associated networks and support more associated performance management functions.
- a method and system for visualizing and monitoring quality of service of a computing network includes the steps and the system includes the structures for monitoring application network transactions and behaviors for the computing network.
- the computing network includes one or more client subnets accessing one or more servers.
- the monitoring may be independent of client site monitors.
- the method and system gather statistical data relating to at least one network, a server, and associated applications and generate a plurality of measurements of at least one quality of service indicator.
- the quality of service indicators relate to the performance of the computer network.
- the method and system further display graphically the plurality of measurements of the at least one quality of service indicator according to the date and time of gathering the statistical data and the degree by which each of said plurality of measurements of the quality of service indicator varies from a predetermined threshold quality of service level for the computing network.
- a method and system for visualizing and monitoring the performance of a computer network that include the steps and structures for displaying graphically a plurality of averaged network quality of service indicators.
- the averaged network quality of service indicators are associated on a radial plot and visually interlinked to form a nominal performance polygon.
- the nominal performance polygon includes a plurality of corners. Each of said corners corresponds to a separate one of the plurality of averaged network quality of service indicators.
- the method and system furthermore dynamically measure a plurality of network quality of service indicators. Each of the plurality of network quality of service indicators corresponds to one of the plurality of averaged network quality of service indicators.
- the method and system display graphically the dynamically measured plurality of network quality of service indicators as a radial plot point on the radial plot and visually interlink the radial plot points for forming a dynamic performance polygon.
- the dynamic performance polygon relates to the dynamic performance of the computer network.
- the disclosed subject matter allows monitoring of the dynamic performance of the computer network by dynamically comparing variations in said dynamic performance polygon with said nominal performance polygon.
- a technical advantage of the disclosed subject matter includes the ability to directly compare metrics or measurements of different network quality of service indicators, regardless of the particular units of measure that are associated with the different indicators. Because the method and system here disclosed compare normalized indicator measurements to averaged values of network quality of service indicators, the indicators may be in milliseconds, percents, counts, or other measurement units.
- FIG. 1 shows geographically a computer network that spans the globe and to which the teachings of the disclosed subject matter may apply;
- FIG. 2 depicts conceptually the network performance environment of the disclosed subject matter
- FIG. 3 provides a block diagram of the network optimization system for one embodiment of the disclosed subject matter
- FIG. 4 shows an application response time versus date plot of one embodiment of the disclosed subject matter
- FIG. 5 provides a violation intensity chart generated by the disclosed subject matter
- FIG. 6 provides an overview diagram for associating performance statistics with server print plots of the present embodiment
- FIGS. 7 and 8 show dynamic performance polygons and nominal performance polygons deriving from operation of the disclosed subject matter
- FIG. 9 depicts time varying dynamic performance polygons for reporting variations in computer network performance
- FIGS. 10 and 11 present overall network exception status visualizations as provided by the disclosed subject matter
- FIG. 12 visually illustrates chronological variations in unwanted traffic for site-specific trend analysis using the disclosed subject matter.
- FIG. 1 shows geographically a computer network that spans the globe and to which the teachings of the disclosed subject matter may apply.
- a computer network 12 which may actually include an association of many networks, connects different sites 14 to one another.
- addressing performance changes arising from new application deployments, determining how best to satisfy near future network and user needs, and performing proactive and reactive troubleshooting all require network managers and technicians a variety of performance management functions. These performance management functions must resolve how network managers respond to problems as they arise.
- FIG. 2 shows, therefore, computer network performance environment 20 .
- Computer network performance environment 20 includes performance management functions 22 , which communicate and interoperate with fault management functions 24 , configuration management functions 26 , accounting management functions 28 , and security management functions 30 .
- Performance management functions 22 ensure the efficient utilization of computer network 12 resources. This includes minimizing the impact of resource contention to make processes continuously and efficiently operate.
- performance management functions 22 ensure that each application/user receives what is required over all time-scales by optimally using available resources, such as device CPU resources, memory resources, and bandwidth resources.
- Performance management functions 22 to which the disclosed subject matter relates provide (a) proactive, measurement-based management functions for permitting root cause/routing bottleneck diagnosis using fault management functions 24 ; (b) capacity planning and design, server location decisions, technology evaluations, and requirement predictions using configuration management functions 26 ; (c) cost/performance trade-off analyses using accounting management functions 28 , and privacy and intrusion detection and prevention policies and procedures using security management functions 30 .
- the disclosed subject matter provides a method and system for visualizing network performance characteristics.
- FIG. 3 relates more directly the visualization method and system of the disclosed subject matter to network optimization system 40 , which provides many computer network 12 performance management functions.
- Network optimization system 40 permits troubleshooting enterprise application problems and optimizing computer network 12 performance.
- Network optimization system 40 therefore includes performance management functions 22 for ensuring consistent delivery of business critical applications, documenting information technology service levels and improving the end user's experience.
- One embodiment of network optimization system 40 associates router 42 , application statistics function 44 , network devices 46 , and program databases 48 to communicate with network specific databases 50 .
- Network specific databases 50 communicate with analysis functions on workstation 52 .
- workstation 52 uses the analysis functions of network optimization system 40 , workstation 52 provides report visualization functions 54 , as described herein.
- Network optimization system 40 may be such as described in commonly assigned U.S.
- router 42 collects flow-based statistics on network traffic, such as protocols used, ports used, and other information.
- Application statistics functions may be dedicated services that gather application-level information and statistics through protocols, such as SNMP, that may, for example, follow the RMON2 standard.
- network optimization system 40 uses network devices 46 to acquire statistics that may be gathered through SNMP.
- Response time data may be collected from individual program databases, such as an end-to-end database.
- Network specific databases 50 may receive the information from these network resources and generate a highly scalable network-specific database that uses data-mining techniques and data pre-processing functions to process a large set of statistical information.
- workstation 52 computer network 12 analysis and reporting functions occur. In essence, workstation 52 provides dynamic incident tracking and investigation, supporting various performance management functions 22 . From workstation 52 , the disclosed subject matter provides report visualization functions 54 as an output of the present method and system for visualizing network performance characteristics.
- network optimization system 40 includes application response time functions that quickly track and measure end-user response time.
- the application response time functions operate without desktop or server agents and separate response time into application, network, and server delay components.
- the application response time functions therefore, enable rapid troubleshooting of application performance bottlenecks.
- Network optimization system 40 also includes automated processes to measure and analyze application response time for all user transactions. Report visualization functions 54 permit comparisons of response times and other computer network 12 performance indictors against intelligent baselines. Moreover, network optimization system 40 may automatically investigate the cause of problems as they occur.
- Network optimization system 40 also provides report analyzer functions that operate on workstation 52 and in conjunction with report visualization functions 54 .
- the result is a flexible analysis engine that enables network managers to understand how application traffic impacts computer network 12 performance.
- report visualization functions 54 and the associated analysis tools of workstation 52 the present embodiment allows for identification of which applications are using excessive bandwidth, the location of such users, and when such applications are being used.
- Report analyzer functions of workstation 52 cooperate with network specific databases 50 to store and report enterprise-wide router 42 data and application statistics 44 , for extended periods of time (e.g., an entire year). Such storage in network specific databases 50 allows network managers to make important cost reduction, troubleshooting, capacity planning, and traffic analysis decisions.
- Network optimization system 40 separates application response times into network, server, and application delays, and generates alarms based on customer defined thresholds. However, network optimization system 40 does not require the deployment of agents on workstations within computer network 12 . Network optimization system 40 collects large amounts of data from multiple sources and presents them as meaningful information and can aggregate data for reporting and analysis. Network optimization system 40 provides custom exception reporting and may drill down from the enterprise level to individual hosts and conversations occurring on computer network 12 .
- network optimization system 40 enables a variety of computer network 12 advisory services to occur. That is, network optimization system 40 permits analysis of application response times without deploying client-side agents. Using the disclosed subject matter, network optimization system 40 permits the analysis of huge volumes of data from multiple sources for rapid identification by application of network traffic and congestion sources. As such, network optimization system 40 enables advisory service for making recommendations that translate into lower network costs and improved response, thus making advantageous use of the visualizations herein described.
- FIG. 4 shows application response time data plot 60 for one embodiment of the disclosed subject matter.
- the data of FIG. 4 may be derived from a single server or a cluster of servers.
- Response time data plot 60 plots time in seconds along axis 62 against calendar date and time, along axis 64 .
- Threshold bar 66 sets a limit (e.g., 1 second) for response time plot 68 .
- network optimization system 40 presents through report visualization functions 54 a violation report. Values reported for response time plot 68 , in one embodiment, results from the accumulation of separate plots of the constituent components of the traffic response time delays.
- This may include network round trip time (RTT) delays, retransmission delays, data transfer delays, server response delays and connect time delays.
- RTT network round trip time
- server response delays 70 are the major contributor to the total response time plot 68 .
- Violations of various service agreements may relate to the degree by which response time plot 68 exceeds threshold bar 66 time limits, e.g., one second.
- peak 74 may be viewed as a major violation, since the response time exceeds threshold bar 66 by approximately two seconds.
- Peak 76 which exceeds threshold bar 66 by slightly more than one second, may be viewed as an intermediate violation.
- peak 78 may be considered a minor violation, since the one-second threshold bar 66 is exceeded by less than 0.25 seconds.
- Response time data plot 60 shows a specific server.
- the present embodiment may also provide information for a single interface. However, other embodiments may also provide for multiple servers, i.e., at a next level of granularity. Thus, using one diagram, it is possible to determine the aggregate violations of a set of servers. This potentially provides such additional valuable information that may be useful for managing the operation of a network.
- FIG. 5 provides violation intensity chart 80 that may be generated using the disclosed subject matter.
- violation intensity chart 80 “Hours in Day” axis 82 crosses “Days” axis 84 to permit recording of the specific time and day on which a violation occurs.
- Violation intensity chart 80 relates response time plot 68 to threshold bar 66 (as shown in FIG. 4 ) by providing a visualization of the degree by which response time plot 68 exceeds threshold bar 66 .
- violation intensity chart 80 presents tick marks of varying colors or other differentiating characteristics to demonstrate the degree by which response time plot 68 exceeds threshold bar 66 .
- a red tick mark 90 (which may appear alternatively as vertical hash marks) may relate to major violation peak 74 ( FIG. 4 ), an orange tick mark 92 (which may appear alternatively as diagonal hash marks) relate to intermediate violation peak 76 , and a yellow tick mark 94 (which may appear alternatively as horizontal hash marks) may relate to minor violation peak 78 .
- violation intensity charts include workday regions 96 and weekend regions 98 .
- Workday regions 96 brackets the hours during which a company generally works.
- Weekend regions 98 highlights the weekend days. Identifying these time and day regions, violation intensity chart 80 allows a network manager to focus attention on specific violation periods.
- time response violation may be a major concern for computer network 12 which requires immediate attention.
- red tick marks 90 only occur during weekend regions 98 and outside work hour regions 96 , then immediate action may not be appropriate.
- the shadings in color intensity provide the ability to determine utilization, as well as violations.
- the shadings in color intensity also provide the ability to determine the degree of the utilization and/or violation of a particular network.
- FIG. 6 illustrates the generation of a server print plot 100 , which integrates network performance measurements from network optimization system 40 .
- server print plot 100 may provide measurement visualizations from six computer network 12 quality of service indicators.
- Response time plot 102 may plot composite response times versus date-time slots.
- Refused sessions plot 104 plots refused TCP/IP sessions for particular date-time slots against total sessions.
- Total sessions plot 106 plots total numbers of users against day-time slots.
- traffic volume plot 108 provides both “to server” and “from server” volume statistics for computer network 12 .
- FIG. 6 integrates statistics from plots 102 through 108 to facilitate visualizing computer network 12 operations.
- server print plot axes include SRT axis 110 , percent (%) refused sessions axis 112 , volume (to) axis 114 , volume (from) axis 116 , total sessions axis 118 , and burstiness axis 120 .
- Nominal performance polygon 122 relates to nominal or average performance of computer network 12 over a predetermined or defined period of time.
- Nominal performance polygon 122 may be formed as a regular polygon by normalizing the respective average quality of service indicator (e.g., SRT) along SRT axis 110 and with relation to the other quality of service indicators, which, likewise may be normalized to their respective axes.
- Dynamic performance polygon 124 which may or may not be a regular polygon, provides measured quality of service indicator statistics relative to the normalized and averaged quality of service indicators of nominal performance polygon 122 .
- Server print plot 100 displays key indicators for a network problem solution in one diagram.
- Prior approaches may have required up to three browsers and many different plots at a single time to see all of the information appearing in server print plot 100 .
- FIG. 6 also demonstrates what normal or nominal behavior occurs on a particular network. In reviewing an entire time period (e.g., month), FIG. 6 shows the different metrics normalized to a single plot. By determining a relative range for each metric, FIG. 6 measures dynamic performance according to the various metrics. Based on this, FIG. 6 provides a precise measurement of the dynamic information relative to the nominal value of the associated indicator. Thus, all indicators reported on FIG. 6 are measured dynamically and quantitatively against the nominal values over the specified time period.
- FIGS. 7 and 8 show dynamic performance polygons and nominal performance polygons deriving from operation of the disclosed subject matter.
- FIG. 7 depicts on network print plot 130 nominal performance polygon 132 and dynamic performance polygon 134 .
- Network print plot 130 includes for visualization network RTT axis 136 , percent (%) byte loss axis 138 , volume (to) axis 140 , volume (from) axis 142 , total sessions axis 144 , retransmission axis 146 , and users axis 148 .
- Nominal performance polygon 132 takes the form of a regular seven-sided polygon.
- nominal performance polygon 132 represents nominal behavior of a computer network 12 during a period, such as Aug. 1, 2003 through Sep. 1, 2003.
- different period quality of service indicators may be represented for network print plot 130 according to a network manager's preferences and needs.
- Dynamic performance polygon 134 of FIG. 7 in contrast to nominal performance polygon 132 , presents a non-regular shape.
- the example of dynamic performance polygon in particular, dynamic performance polygon 134 exceeds nominal values of nominal performance polygon 132 along network RTT axis 136 , volume(to) axis 140 , volume(from) axis 142 , total sessions axis 144 , and users axis 146 .
- dynamic performance polygon 134 presents quality of service indicator values below nominal performance polygon 132 along percent (%) byte loss axis 138 and retransmission axis 146 .
- FIG. 7 may be interpreted as a heavily used network. Actually, however, the measured indicators do not show faulty or defective operation of the network. The network, while handling more than usual traffic, may need to have its computer network 12 capacity increased, if the dynamic quality of service indicators continue over a period of time to indicate the statistics of FIG. 7 .
- server print plot 150 provides the ability to compare dynamic performance polygon 152 to nominal performance polygon 154 .
- Dynamic performance polygon 152 presents real-time normalized statistics for the time 11:50 on Jun. 12, 2003.
- nominal performance polygon 154 displays normalized nominal behavior for the period of Jun. 1, 2003 through Jul. 1, 2003.
- Quality of service indicators for server print plot 150 include those displayed by SRT axis 156 , percent (%) refused sessions axis 158 , volume(to) axis 160 , volume(from) axis 162 , total sessions axis 164 , and burstiness axis 166 .
- Dynamic performance polygon 152 reports nominal percent (%) refused sessions and nearly nominal burstiness statistics. However, SRT, volume(to), volume(from), and total sessions statistics all appear to exceed nominal values.
- FIG. 8 specifically references measurements against data gathered over time and averaged.
- the present embodiment plots dynamic measurements against the averaged information.
- Dynamic performance polygon 152 demonstrates that many more than the average number of sessions are occurring, as shown on total sessions axis 164 . If this were not so high, it might be interpreted that the network flows more traffic volume, conducting more sessions, and the server response was simply working hard. Because a great deal of volume flows into the server, a problem may exist in computer network 12 . For example, a server may be mis-configured. On the other hand, such server may be in a multi-tiered environment. So, what dynamic performance polygon 152 shows may not be an extreme problem.
- the plot alerts the engineer to a potential problem, and focuses the investigation to some form of mis-configuration, such as data being unexpectedly pushed to the server, or to the fact the server is involved in a multi-tiered application (which is also sometimes not known to the network engineer).
- FIG. 9 depicts on network print plot 170 time-varying dynamic performance polygons for reporting variations in computer network performance.
- network print plot 170 displays nominal performance polygon 172 relating to the performance measurement period between 1:00 a.m. Feb. 27 and 1:00 a.m. Feb. 28, 2003.
- network print plot 170 presents five dynamic performance polygons, all taken on Feb. 27, 2003, and at five minute intervals.
- dynamic performance polygon 174 relates to time 1:38 a.m.
- dynamic performance polygon 176 relates to time 1:43 a.m.
- dynamic performance polygon 178 relates to time 1:48 a.m.
- dynamic performance polygon 180 relates to time 1:53 a.m.
- dynamic performance polygon 182 relates to time 1:58 a.m.
- Network print plot 170 portrays computer network 12 quality of service indicators along network round trip time (NRTT) axis 184 , percent (%) byte loss axis 186 , volume(to) axis 188 , volume(from) axis 190 , total sessions axis 192 , retransmission axis 194 , and users axis 196 .
- NRTT network round trip time
- Dynamic performance polygon 182 will result in a violation determination by network optimization system 40 (shown in FIG. 3 ). By the time a violation is determined, however, dynamic performance polygon 182 demonstrates a high network roundtrip measurement, together with high volume(from). These indications may not truly be a problem. However, because the measurements are significantly above normal, an investigation should occur. With this information, there is the need to determine the cause for at least two of the indicators being out of range. The analyses should, therefore, be of what the causes are and what the side effects are of the out of range conditions.
- Dynamic performance polygons 174 through 180 provide information in reverse order from the violation. This allows a view of dynamic performance polygon 180 , which occurs only five minutes before dynamic performance polygon 182 . Dynamic performance polygon 180 shows a large percentage byte loss. Another out of specification indicator is the retransmission indicator. There was also more volume to the server. Going back one more frame to dynamic performance polygon 178 , it is possible to see that the only indicator that is out of specification is the number of users.
- the disclosed subject matter may provide the ability to determine a network violation at some period before it occurs. In such case, there may be the ability to respond to an indicator change and, thereby, take preemptive action that could reduce or eliminate serious network effects. Such preemptive action may include avoiding over-use of network resources or timing of excessive network loading to occur at more optimal times.
- the disclosed subject matter there is the ability to associate a plurality of server or network print plots. It may be possible to categorically identify the different violations that occur by viewing a broad array of server or network print plots. Upon categorically identifying such violations, based on the server or network print plots, the disclosed server or network print plots may provide insights into how to categorically eliminate network violations or out of range conditions. By categorically eliminating problems, based on the characteristic server or network print plots that such problems generate, the disclosed subject matter may very significantly improve overall network operations.
- the present embodiment may suggest correlations between different categories of network conditions that generate characteristic server print plots.
- the disclosed subject matter may even more significantly improve overall network performance.
- FIGS. 10 and 11 display overall network exception status information for a particular computer network 12 .
- the two plots appear in different forms.
- FIG. 10 reports in overall network exception status bar chart 200 exception status for the months of 9-2004 (Sep.) in bar 202 , 10-2004 (Oct.) in bar 204 , 11-2004 (Nov.) in bar 206 , and 12-2004 (Dec.) in bar 208 , all across axis 201 .
- the “hours in violation” axis 201 varies, in this example, from 0 to 5000 hours for presenting the cumulative hours that computer network 12 violates the applicable service agreement. Violations may vary from unwanted peer-to-peer traffic, as bar 202 portion 210 relates to the more common violations appearing in all bars 202 through 208 .
- violations may include NetBIOS over 25 percent (%) violation 212 , overall utilization over 80 percent (%) violation 214 , unexpectedly high management traffic violation 216 , and unwanted real-time streaming protocol (RSTP) traffic violation 218 .
- FIG. 10 therefore, provides a clear visualization of the cumulative exception status for computer network 12 .
- FIG. 11 shows overall network exception status point chart 220 for visualizing the exception status of computer network 12 during the same reporting period of FIG. 10 .
- Overall network exception status point chart 220 uses “hours in violation axis” 222 , which ranges from 0 to 2600 hours for displaying exception status variations in computer network 12 on a per-violation basis.
- plot 224 reports variations in the NetBIOS over 25 percent (%) violation
- plot 226 reports variations in overall utilization being over 80 percent (%)
- plot 228 reports the unexpectedly high management traffic violation
- plot 230 reports the unwanted peer-to-peer traffic violation
- plot 232 reports unwanted RTSP violations.
- FIG. 12 presents violation trend bar chart 240 that further demonstrates the ability of the disclosed subject matter to aid in performance management of computer network 12 .
- FIG. 12 presents in violation trend bar chart 240 , a specific violation, i.e., unwanted RTSP traffic, is reported on a per site 14 basis.
- Chart 240 of FIG. 12 may, for example, be generated in response to a “drill in” of plot 232 in FIG. 11 .
- individual site 14 violation data is reported over specific time periods.
- bar 242 reports the hours in violation for October 2004 for unwanted RTSP traffic, here approximately 550 hours.
- Bars 244 and 246 report the same type of data for the months of November (approx. 510 hours) and December 2004 (approx. 540 hours), respectively.
- computer network 12 includes forty-two sites 14 .
- violation trend bar chart 240 for the sake of simplicity and clarity, only displays the six sites demonstrating the more significant violations, based on a dynamic algorithm.
- these include the Taiwan interface site in bars 248 , the Fairbanks interface site in bars 250 , the Saigon interface site in bars 252 , the Santa Fe interface site in bars 254 , and the Milan interface site in bars 256 .
- the disclosed subject matter provides a method and system for visualizing and monitoring quality of service of a computing network.
- the method includes the steps and the system includes the structures for monitoring application network transactions and behaviors for the computing network.
- the computing network includes one or more client subnets accessing one or more servers.
- the monitoring may be independent of client site monitors.
- the method and system gather statistical data relating to at least one network, a server, and associated applications and generate a plurality of measurements of at least one quality of service indicator.
- the quality of service indicators relate to the performance of the computer network.
- the method and system further display the plurality of measurements of the at least one quality of service indicator according to the date and time of gathering the statistical data and display graphically the degree by which each of said plurality of measurements of the quality of service indicator varies from a predetermined threshold quality of service level for the computing network.
- the disclosed subject matter provides a method and system for visualizing and monitoring the performance of a computer network that include the steps and structures for displaying graphically a plurality of averaged network quality of service indicators.
- the averaged network quality of service indicators are associated on a radial plot and visually interlinked to form a nominal performance polygon.
- the nominal performance polygon includes a plurality of corners. Each of said corners corresponds to a separate one of the plurality of averaged quality of service indicators.
- the method and system furthermore dynamically measure a plurality of network quality of service indicators. Each of the plurality of network quality of service indicators corresponds to one of the plurality of averaged network quality of service indicators.
- the method and system display graphically the dynamically measured plurality of network quality of service indicators as radial plot points on the radial plot and visually interlink the radial plot points for forming a dynamic performance polygon.
- the dynamic performance polygon relates to the dynamic performance of the computer network.
- the disclosed subject matter allows monitoring the dynamic performance of the computer network by dynamically comparing variations in said dynamic performance polygon with said nominal performance polygon.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Mining & Analysis (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
- Debugging And Monitoring (AREA)
Abstract
Techniques for visualizing and monitoring the quality of service for a computer network. Herein, a method and system monitor network transactions and behaviors for the computing network, which computing network includes one or more client subnets accessing one or more servers, the monitoring may be independent of client site monitors. Statistical data is gathered for relating to at least the network, the server, and the applications for generating a plurality of measurements. The measurements assess at least one quality of service indicator associated with the performance of the computer network. The method and system graphically display the plurality of measurements of the quality of service indicator according to the date and time of gathering the statistical data and further display graphically the degree by which each of the measurements of the quality of service indicator varies from a predetermined threshold quality of service level for the computing network. Also, dynamic quality of service indicators are monitored against average quality of service indicators.
Description
- This application is a continuation of U.S. Non-Provisional patent application Ser. No. 11/110,973, entitled “METHOD AND SYSTEM FOR VISUALIZING NETWORK PERFORMANCE CHARACTERISTICS,” by Peter Mullarkey, et al. filed on Apr. 20, 2005, and is incorporated herein by reference in its entirety for all purposes.
- The disclosed subject matter relates to computer and related electronic systems networks. More particularly, this disclosure relates to a novel and improved method and system for visualizing network performance characteristics.
- Most network engineers are very familiar with tools that report statistics on individual components such as links, routers, and servers. These infrastructure monitors have been around for a long time. Newer to the market are performance monitoring appliances that report end-to-end statistics and the end-user experience. These appliances provide a comprehensive view of the enterprise, without the need for desktop or server agents. They measure how well response time Service Level Agreements (SLAs) are being met. They also help solve a wide variety of problems with solutions that lead to significant reductions in operating costs.
- End-to-end performance monitoring can be extremely useful as a proactive method for both rapid troubleshooting and performance management of enterprise networks and server aggregations. Such monitoring has been successfully implemented to quickly identify and resolve the myriad of performance issues associated with networks, servers, and applications. The use of end-to-end performance monitoring appliances has uncovered serious inefficiencies with load balancers, poorly designed applications, bypassed proxy servers, ineffective cache servers, aggressive active agents, and badly designed “redundant” networks. They can provide the “big-picture” view of networks and applications to answer questions that are critical for the end-user experience. These questions may include knowing what impact server consolidation will have on users. Such applications can help address which will work better on a particular network, a thick or thin clients configuration. Also, performance monitoring applications can help identify which sites are in greatest need of upgrades or downgrades, and which web pages are the slowest to download.
- Drill-down troubleshooting capabilities can reveal metrics that can save weeks or months of time in identifying and resolving issues. Analyses that previously required six weeks to complete with packet sniffing tools may be accomplished in minutes when end-to-end performance monitoring appliances are properly configured. Because they continuously monitor applications, such appliances notice and report even difficult intermittent issues that cannot readily be reproduced. If a problem occurred at 3:00 a.m. the previous morning, their stored reports can be used for a post-mortem analysis. There is no need to wait for a recurrence in order to capture the behavior the way legacy troubleshooting tools require.
- End-to-end performance monitoring appliances with intelligent thresholds can alert a network performance management team to a developing problem before the problem severely impacts customers. Such proactive management and high-level views allow network managers to discover new ways to optimize the network.
- Unfortunately, known end-to-end performance monitoring and management systems fail to provide completely satisfactory operation. There are several existing response-time monitoring tools (e.g., NetIQ's Pegasus and Compuware's Ecoscope) that require a hardware and/or software agent be installed near each client site from which end-to-end or total response times are to be computed. The main problem with this approach is that it can be difficult or impossible to get the agents installed and keep them operating. For a global network, the number of agents can be significant; installation can be slow and maintenance painful. For an eCommerce site, installation of the agents is not practical; asking potential customers to install software on their computers probably would not meet with much success. A secondary issue with this approach is that each of the client-site agents must upload their measurements to a centralized management platform; this adds unnecessary traffic on what may be expensive wide-area links. A third issue with this approach is that it is difficult to accurately separate the network from server delay contributions.
- To overcome the issue with numerous agent installs, some companies (e.g., KeyNotes and Mercury Interactive) offer a subscription service whereby one may use their preinstalled agents for response-time monitoring. There are two main problems with this approach. One is that the agents are not monitoring “real” client traffic but are artificially generating a handful of “defined” transactions. The other is that the monitoring does not generally cover the full range of client sites—the monitoring is limited to where the service provider has installed agents.
- Developers continue to improve methods and systems for testing networks, servers, and services for availability and performance. Among what is needed is the ability to visualize the operations of a computer network for identifying performance management issues and problems, together with probable causes of related problems.
- Techniques for visualizing network performance characteristics are disclosed, which techniques both improve the operation of the associated networks and support more associated performance management functions.
- According to one aspect of the disclosed subject matter, there is here provided a method and system for visualizing and monitoring quality of service of a computing network. The method includes the steps and the system includes the structures for monitoring application network transactions and behaviors for the computing network. The computing network includes one or more client subnets accessing one or more servers. The monitoring may be independent of client site monitors. The method and system gather statistical data relating to at least one network, a server, and associated applications and generate a plurality of measurements of at least one quality of service indicator. The quality of service indicators relate to the performance of the computer network. The method and system further display graphically the plurality of measurements of the at least one quality of service indicator according to the date and time of gathering the statistical data and the degree by which each of said plurality of measurements of the quality of service indicator varies from a predetermined threshold quality of service level for the computing network.
- According to another aspect of the disclosed subject matter, here is disclosed a method and system for visualizing and monitoring the performance of a computer network that include the steps and structures for displaying graphically a plurality of averaged network quality of service indicators. The averaged network quality of service indicators are associated on a radial plot and visually interlinked to form a nominal performance polygon. The nominal performance polygon includes a plurality of corners. Each of said corners corresponds to a separate one of the plurality of averaged network quality of service indicators. The method and system furthermore dynamically measure a plurality of network quality of service indicators. Each of the plurality of network quality of service indicators corresponds to one of the plurality of averaged network quality of service indicators. The method and system display graphically the dynamically measured plurality of network quality of service indicators as a radial plot point on the radial plot and visually interlink the radial plot points for forming a dynamic performance polygon. The dynamic performance polygon relates to the dynamic performance of the computer network. The disclosed subject matter allows monitoring of the dynamic performance of the computer network by dynamically comparing variations in said dynamic performance polygon with said nominal performance polygon.
- A technical advantage of the disclosed subject matter includes the ability to directly compare metrics or measurements of different network quality of service indicators, regardless of the particular units of measure that are associated with the different indicators. Because the method and system here disclosed compare normalized indicator measurements to averaged values of network quality of service indicators, the indicators may be in milliseconds, percents, counts, or other measurement units.
- These and other aspects of the disclosed subject matter, as well as additional novel features, will be apparent from the description provided herein. The intent of this summary is not to be a comprehensive description of the claimed subject matter, but rather to provide a short overview of some of the subject matter's functionality. Other systems, methods, features and advantages here provided will become apparent to one with skill in the art upon examination of the following FIGUREs and detailed description. It is intended that all such additional systems, methods, features and advantages that are included within this description, be within the scope of the accompanying claims.
- The features, nature, and advantages of the disclosed subject matter will become more apparent from the detailed description set forth below when taken in conjunction with the drawings in which like reference characters identify correspondingly throughout and wherein:
-
FIG. 1 shows geographically a computer network that spans the globe and to which the teachings of the disclosed subject matter may apply; -
FIG. 2 depicts conceptually the network performance environment of the disclosed subject matter; -
FIG. 3 provides a block diagram of the network optimization system for one embodiment of the disclosed subject matter; -
FIG. 4 shows an application response time versus date plot of one embodiment of the disclosed subject matter; -
FIG. 5 provides a violation intensity chart generated by the disclosed subject matter; -
FIG. 6 provides an overview diagram for associating performance statistics with server print plots of the present embodiment; -
FIGS. 7 and 8 show dynamic performance polygons and nominal performance polygons deriving from operation of the disclosed subject matter; -
FIG. 9 depicts time varying dynamic performance polygons for reporting variations in computer network performance; -
FIGS. 10 and 11 present overall network exception status visualizations as provided by the disclosed subject matter; -
FIG. 12 visually illustrates chronological variations in unwanted traffic for site-specific trend analysis using the disclosed subject matter. -
FIG. 1 shows geographically a computer network that spans the globe and to which the teachings of the disclosed subject matter may apply. Across theglobe 10, acomputer network 12, which may actually include an association of many networks, connectsdifferent sites 14 to one another. In such a computer network, addressing performance changes arising from new application deployments, determining how best to satisfy near future network and user needs, and performing proactive and reactive troubleshooting all require network managers and technicians a variety of performance management functions. These performance management functions must resolve how network managers respond to problems as they arise. -
FIG. 2 shows, therefore, computernetwork performance environment 20. Computernetwork performance environment 20 includes performance management functions 22, which communicate and interoperate with fault management functions 24, configuration management functions 26, accounting management functions 28, and security management functions 30. Performance management functions 22 ensure the efficient utilization ofcomputer network 12 resources. This includes minimizing the impact of resource contention to make processes continuously and efficiently operate. Using fault management functions 24, configuration management functions 26, accounting management functions 28, and security management functions 30, performance management functions 22 ensure that each application/user receives what is required over all time-scales by optimally using available resources, such as device CPU resources, memory resources, and bandwidth resources. - Performance management functions 22 to which the disclosed subject matter relates provide (a) proactive, measurement-based management functions for permitting root cause/routing bottleneck diagnosis using fault management functions 24; (b) capacity planning and design, server location decisions, technology evaluations, and requirement predictions using configuration management functions 26; (c) cost/performance trade-off analyses using accounting management functions 28, and privacy and intrusion detection and prevention policies and procedures using security management functions 30. In addressing these characteristics of
performance management environment 20, the disclosed subject matter provides a method and system for visualizing network performance characteristics. -
FIG. 3 relates more directly the visualization method and system of the disclosed subject matter to networkoptimization system 40, which providesmany computer network 12 performance management functions.Network optimization system 40 permits troubleshooting enterprise application problems and optimizingcomputer network 12 performance.Network optimization system 40, therefore includes performance management functions 22 for ensuring consistent delivery of business critical applications, documenting information technology service levels and improving the end user's experience. One embodiment ofnetwork optimization system 40associates router 42, application statistics function 44,network devices 46, andprogram databases 48 to communicate with networkspecific databases 50. Networkspecific databases 50 communicate with analysis functions onworkstation 52. Using the analysis functions ofnetwork optimization system 40,workstation 52 provides report visualization functions 54, as described herein.Network optimization system 40 may be such as described in commonly assigned U.S. patent application Ser. No. 10/962,331 entitled “Dynamic Incident Tracking and Investigation in Service Monitors,” by Cathy Anne Fulton et al. - In
network optimization system 40,router 42 collects flow-based statistics on network traffic, such as protocols used, ports used, and other information. Application statistics functions may be dedicated services that gather application-level information and statistics through protocols, such as SNMP, that may, for example, follow the RMON2 standard. In addition,network optimization system 40 usesnetwork devices 46 to acquire statistics that may be gathered through SNMP. Response time data may be collected from individual program databases, such as an end-to-end database. Networkspecific databases 50 may receive the information from these network resources and generate a highly scalable network-specific database that uses data-mining techniques and data pre-processing functions to process a large set of statistical information. Atworkstation 52,computer network 12 analysis and reporting functions occur. In essence,workstation 52 provides dynamic incident tracking and investigation, supporting various performance management functions 22. Fromworkstation 52, the disclosed subject matter provides report visualization functions 54 as an output of the present method and system for visualizing network performance characteristics. - One aspect of
network optimization system 40 includes application response time functions that quickly track and measure end-user response time. The application response time functions operate without desktop or server agents and separate response time into application, network, and server delay components. The application response time functions, therefore, enable rapid troubleshooting of application performance bottlenecks.Network optimization system 40 also includes automated processes to measure and analyze application response time for all user transactions. Report visualization functions 54 permit comparisons of response times andother computer network 12 performance indictors against intelligent baselines. Moreover,network optimization system 40 may automatically investigate the cause of problems as they occur. -
Network optimization system 40 also provides report analyzer functions that operate onworkstation 52 and in conjunction with report visualization functions 54. The result is a flexible analysis engine that enables network managers to understand how application traffic impactscomputer network 12 performance. Using report visualization functions 54 and the associated analysis tools ofworkstation 52, the present embodiment allows for identification of which applications are using excessive bandwidth, the location of such users, and when such applications are being used. Report analyzer functions ofworkstation 52 cooperate with networkspecific databases 50 to store and report enterprise-wide router 42 data andapplication statistics 44, for extended periods of time (e.g., an entire year). Such storage in networkspecific databases 50 allows network managers to make important cost reduction, troubleshooting, capacity planning, and traffic analysis decisions. -
Network optimization system 40 separates application response times into network, server, and application delays, and generates alarms based on customer defined thresholds. However,network optimization system 40 does not require the deployment of agents on workstations withincomputer network 12.Network optimization system 40 collects large amounts of data from multiple sources and presents them as meaningful information and can aggregate data for reporting and analysis.Network optimization system 40 provides custom exception reporting and may drill down from the enterprise level to individual hosts and conversations occurring oncomputer network 12. - In addition,
network optimization system 40 enables a variety ofcomputer network 12 advisory services to occur. That is,network optimization system 40 permits analysis of application response times without deploying client-side agents. Using the disclosed subject matter,network optimization system 40 permits the analysis of huge volumes of data from multiple sources for rapid identification by application of network traffic and congestion sources. As such,network optimization system 40 enables advisory service for making recommendations that translate into lower network costs and improved response, thus making advantageous use of the visualizations herein described. -
FIG. 4 shows application responsetime data plot 60 for one embodiment of the disclosed subject matter. The data ofFIG. 4 may be derived from a single server or a cluster of servers. Responsetime data plot 60 plots time in seconds alongaxis 62 against calendar date and time, alongaxis 64.Threshold bar 66 sets a limit (e.g., 1 second) forresponse time plot 68. Whenresponse time plot 68 exceedsthreshold bar 66, network optimization system 40 (as shown inFIG. 3 ) presents through report visualization functions 54 a violation report. Values reported forresponse time plot 68, in one embodiment, results from the accumulation of separate plots of the constituent components of the traffic response time delays. This may include network round trip time (RTT) delays, retransmission delays, data transfer delays, server response delays and connect time delays. In particular, asresponse time plot 68 shows, server response delays 70 are the major contributor to the totalresponse time plot 68. Thus, as traffic occurs on a computer network, as indicated bytraffic plot 72, delays, as peaks inresponse time plot 68 show, result in traffic reductions, as valleys intraffic plot 72 exhibit. - Violations of various service agreements, for example, may relate to the degree by which
response time plot 68 exceedsthreshold bar 66 time limits, e.g., one second. For example, peak 74 may be viewed as a major violation, since the response time exceedsthreshold bar 66 by approximately two seconds.Peak 76, which exceedsthreshold bar 66 by slightly more than one second, may be viewed as an intermediate violation. Finally, peak 78 may be considered a minor violation, since the one-second threshold bar 66 is exceeded by less than 0.25 seconds. - Response
time data plot 60 shows a specific server. The present embodiment may also provide information for a single interface. However, other embodiments may also provide for multiple servers, i.e., at a next level of granularity. Thus, using one diagram, it is possible to determine the aggregate violations of a set of servers. This potentially provides such additional valuable information that may be useful for managing the operation of a network. -
FIG. 5 providesviolation intensity chart 80 that may be generated using the disclosed subject matter. Inviolation intensity chart 80, “Hours in Day”axis 82 crosses “Days”axis 84 to permit recording of the specific time and day on which a violation occurs.Violation intensity chart 80 relatesresponse time plot 68 to threshold bar 66 (as shown inFIG. 4 ) by providing a visualization of the degree by whichresponse time plot 68 exceedsthreshold bar 66. Thus, as explodedregions violation intensity chart 80 presents tick marks of varying colors or other differentiating characteristics to demonstrate the degree by whichresponse time plot 68 exceedsthreshold bar 66. In the illustrated example, a red tick mark 90 (which may appear alternatively as vertical hash marks) may relate to major violation peak 74 (FIG. 4 ), an orange tick mark 92 (which may appear alternatively as diagonal hash marks) relate tointermediate violation peak 76, and a yellow tick mark 94 (which may appear alternatively as horizontal hash marks) may relate tominor violation peak 78. - Particularly attractive features of violation intensity charts include
workday regions 96 andweekend regions 98.Workday regions 96 brackets the hours during which a company generally works.Weekend regions 98 highlights the weekend days. Identifying these time and day regions,violation intensity chart 80 allows a network manager to focus attention on specific violation periods. Thus, for example, in the event that an excessive number of red tick marks 90 arise inwork hour regions 96 and outside ofweekend regions 98, time response violation may be a major concern forcomputer network 12 which requires immediate attention. On the other hand, if red tick marks 90 only occur duringweekend regions 98 and outsidework hour regions 96, then immediate action may not be appropriate. - The shadings in color intensity provide the ability to determine utilization, as well as violations. The shadings in color intensity also provide the ability to determine the degree of the utilization and/or violation of a particular network.
- In addition to
violation intensity chart 80, the disclosed subject matter provides meaningful visualizations of associated and interdependent network quality of service indicators.FIG. 6 , therefore, illustrates the generation of aserver print plot 100, which integrates network performance measurements fromnetwork optimization system 40. In the example ofFIG. 6 , server print plot 100 (so named by virtue of providing a signature or distinct finger print ofcomputer network 12 operations) may provide measurement visualizations from sixcomputer network 12 quality of service indicators.Response time plot 102, as already described, may plot composite response times versus date-time slots. Refused sessions plot 104 plots refused TCP/IP sessions for particular date-time slots against total sessions. Total sessions plot 106 plots total numbers of users against day-time slots. Also,traffic volume plot 108 provides both “to server” and “from server” volume statistics forcomputer network 12. -
FIG. 6 integrates statistics fromplots 102 through 108 to facilitate visualizingcomputer network 12 operations. InFIG. 6 , server print plot axes includeSRT axis 110, percent (%) refusedsessions axis 112, volume (to)axis 114, volume (from)axis 116,total sessions axis 118, andburstiness axis 120.Nominal performance polygon 122 relates to nominal or average performance ofcomputer network 12 over a predetermined or defined period of time.Nominal performance polygon 122 may be formed as a regular polygon by normalizing the respective average quality of service indicator (e.g., SRT) alongSRT axis 110 and with relation to the other quality of service indicators, which, likewise may be normalized to their respective axes.Dynamic performance polygon 124, which may or may not be a regular polygon, provides measured quality of service indicator statistics relative to the normalized and averaged quality of service indicators ofnominal performance polygon 122. -
Server print plot 100 displays key indicators for a network problem solution in one diagram. Prior approaches may have required up to three browsers and many different plots at a single time to see all of the information appearing inserver print plot 100.FIG. 6 also demonstrates what normal or nominal behavior occurs on a particular network. In reviewing an entire time period (e.g., month),FIG. 6 shows the different metrics normalized to a single plot. By determining a relative range for each metric,FIG. 6 measures dynamic performance according to the various metrics. Based on this,FIG. 6 provides a precise measurement of the dynamic information relative to the nominal value of the associated indicator. Thus, all indicators reported onFIG. 6 are measured dynamically and quantitatively against the nominal values over the specified time period. -
FIGS. 7 and 8 show dynamic performance polygons and nominal performance polygons deriving from operation of the disclosed subject matter. In particular,FIG. 7 depicts onnetwork print plot 130nominal performance polygon 132 anddynamic performance polygon 134.Network print plot 130 includes for visualizationnetwork RTT axis 136, percent (%)byte loss axis 138, volume (to)axis 140, volume (from)axis 142,total sessions axis 144,retransmission axis 146, andusers axis 148.Nominal performance polygon 132 takes the form of a regular seven-sided polygon. AsFIG. 7 depicts,nominal performance polygon 132 represents nominal behavior of acomputer network 12 during a period, such as Aug. 1, 2003 through Sep. 1, 2003. Clearly, different period quality of service indicators may be represented fornetwork print plot 130 according to a network manager's preferences and needs. -
Dynamic performance polygon 134 ofFIG. 7 , in contrast tonominal performance polygon 132, presents a non-regular shape. The example of dynamic performance polygon, in particular,dynamic performance polygon 134 exceeds nominal values ofnominal performance polygon 132 alongnetwork RTT axis 136, volume(to)axis 140, volume(from)axis 142,total sessions axis 144, andusers axis 146. On the other hand,dynamic performance polygon 134 presents quality of service indicator values belownominal performance polygon 132 along percent (%)byte loss axis 138 andretransmission axis 146. - The example of
FIG. 7 may be interpreted as a heavily used network. Actually, however, the measured indicators do not show faulty or defective operation of the network. The network, while handling more than usual traffic, may need to have itscomputer network 12 capacity increased, if the dynamic quality of service indicators continue over a period of time to indicate the statistics ofFIG. 7 . - In
FIG. 8 ,server print plot 150 provides the ability to comparedynamic performance polygon 152 tonominal performance polygon 154.Dynamic performance polygon 152, in this example, presents real-time normalized statistics for the time 11:50 on Jun. 12, 2003. In contrast,nominal performance polygon 154 displays normalized nominal behavior for the period of Jun. 1, 2003 through Jul. 1, 2003. Quality of service indicators forserver print plot 150 include those displayed bySRT axis 156, percent (%) refused sessions axis 158, volume(to)axis 160, volume(from)axis 162,total sessions axis 164, andburstiness axis 166.Dynamic performance polygon 152 reports nominal percent (%) refused sessions and nearly nominal burstiness statistics. However, SRT, volume(to), volume(from), and total sessions statistics all appear to exceed nominal values. -
FIG. 8 specifically references measurements against data gathered over time and averaged. The present embodiment plots dynamic measurements against the averaged information.Dynamic performance polygon 152 demonstrates that many more than the average number of sessions are occurring, as shown ontotal sessions axis 164. If this were not so high, it might be interpreted that the network flows more traffic volume, conducting more sessions, and the server response was simply working hard. Because a great deal of volume flows into the server, a problem may exist incomputer network 12. For example, a server may be mis-configured. On the other hand, such server may be in a multi-tiered environment. So, whatdynamic performance polygon 152 shows may not be an extreme problem. However, the plot alerts the engineer to a potential problem, and focuses the investigation to some form of mis-configuration, such as data being unexpectedly pushed to the server, or to the fact the server is involved in a multi-tiered application (which is also sometimes not known to the network engineer). -
FIG. 9 depicts onnetwork print plot 170 time-varying dynamic performance polygons for reporting variations in computer network performance. In particular,network print plot 170 displaysnominal performance polygon 172 relating to the performance measurement period between 1:00 a.m. Feb. 27 and 1:00 a.m. Feb. 28, 2003. For comparison purposes,network print plot 170 presents five dynamic performance polygons, all taken on Feb. 27, 2003, and at five minute intervals. Specifically,dynamic performance polygon 174 relates to time 1:38 a.m.;dynamic performance polygon 176 relates to time 1:43 a.m.;dynamic performance polygon 178 relates to time 1:48 a.m.;dynamic performance polygon 180 relates to time 1:53 a.m.; anddynamic performance polygon 182 relates to time 1:58 a.m. -
Network print plot 170 portrayscomputer network 12 quality of service indicators along network round trip time (NRTT)axis 184, percent (%)byte loss axis 186, volume(to)axis 188, volume(from)axis 190,total sessions axis 192,retransmission axis 194, andusers axis 196. -
FIG. 9 , therefore, details in a more comprehensive fashion the information heretofore described.Dynamic performance polygon 182 will result in a violation determination by network optimization system 40 (shown inFIG. 3 ). By the time a violation is determined, however,dynamic performance polygon 182 demonstrates a high network roundtrip measurement, together with high volume(from). These indications may not truly be a problem. However, because the measurements are significantly above normal, an investigation should occur. With this information, there is the need to determine the cause for at least two of the indicators being out of range. The analyses should, therefore, be of what the causes are and what the side effects are of the out of range conditions. -
Dynamic performance polygons 174 through 180 provide information in reverse order from the violation. This allows a view ofdynamic performance polygon 180, which occurs only five minutes beforedynamic performance polygon 182.Dynamic performance polygon 180 shows a large percentage byte loss. Another out of specification indicator is the retransmission indicator. There was also more volume to the server. Going back one more frame todynamic performance polygon 178, it is possible to see that the only indicator that is out of specification is the number of users. - By continuing to back up the measurements, it is possible to isolate the first out of range indicator. This may assist in determining the root cause of the network malfunctions or mis-configurations. In
dynamic performance polygon 174, the total sessions and users indicators are high. Thus, what caused the network to malfunction was the presence of too many sessions and users. This situation, however, is not at all apparent from the measurement, i.e.,dynamic performance polygon 182 that resulted in the service agreement violation. That is, the violation was an effect, and certainly not a cause of the network malfunction. This demonstrates the dynamic, interrelated nature ofcomputer network 12 and how a network degradation may affect different quality of service indicators. - Thus, using the combination of dynamic performance polygons and nominal performance polygons in server and network print plots, there is the potential for indicating correlations and causalities.
- The disclosed subject matter may provide the ability to determine a network violation at some period before it occurs. In such case, there may be the ability to respond to an indicator change and, thereby, take preemptive action that could reduce or eliminate serious network effects. Such preemptive action may include avoiding over-use of network resources or timing of excessive network loading to occur at more optimal times.
- In yet a further embodiment of the disclosed subject matter, there is the ability to associate a plurality of server or network print plots. It may be possible to categorically identify the different violations that occur by viewing a broad array of server or network print plots. Upon categorically identifying such violations, based on the server or network print plots, the disclosed server or network print plots may provide insights into how to categorically eliminate network violations or out of range conditions. By categorically eliminating problems, based on the characteristic server or network print plots that such problems generate, the disclosed subject matter may very significantly improve overall network operations.
- Moreover, by creating and diagnosing categories of server or network print plots, the present embodiment may suggest correlations between different categories of network conditions that generate characteristic server print plots. By responding to server or network print plot data, even prior to an out of range condition arising, the disclosed subject matter may even more significantly improve overall network performance.
- On an even larger scale, by associating categories of server or network print plots from various points of a network system, the disclosed subject matter may provide real-time data for assisting in the diagnosis of network problems at many different levels. Thus, in addition to providing comparisons of real time visualizations of
computer network 12 performance, the disclosed subject matter allows for the aggregation of statistics over longer periods of time. Such aggregations enable trend analyses for both longer term and larger scale performance management functions. For example,FIGS. 10 and 11 display overall network exception status information for aparticular computer network 12. Although the information presented byFIGS. 10 and 11 is the same in the example, the two plots appear in different forms. -
FIG. 10 , for example, reports in overall network exceptionstatus bar chart 200 exception status for the months of 9-2004 (Sep.) in bar 202, 10-2004 (Oct.) inbar 204, 11-2004 (Nov.) in bar 206, and 12-2004 (Dec.) in bar 208, all across axis 201. The “hours in violation” axis 201 varies, in this example, from 0 to 5000 hours for presenting the cumulative hours thatcomputer network 12 violates the applicable service agreement. Violations may vary from unwanted peer-to-peer traffic, as bar 202portion 210 relates to the more common violations appearing in all bars 202 through 208. That is, violations may include NetBIOS over 25 percent (%)violation 212, overall utilization over 80 percent (%)violation 214, unexpectedly highmanagement traffic violation 216, and unwanted real-time streaming protocol (RSTP)traffic violation 218.FIG. 10 , therefore, provides a clear visualization of the cumulative exception status forcomputer network 12. - In contrast,
FIG. 11 shows overall network exceptionstatus point chart 220 for visualizing the exception status ofcomputer network 12 during the same reporting period ofFIG. 10 . Overall network exceptionstatus point chart 220 uses “hours in violation axis” 222, which ranges from 0 to 2600 hours for displaying exception status variations incomputer network 12 on a per-violation basis. Thus, foroverall computer network 12 exceptions occurring during the period September 2004 through December 2004,plot 224 reports variations in the NetBIOS over 25 percent (%) violation,plot 226 reports variations in overall utilization being over 80 percent (%),plot 228 reports the unexpectedly high management traffic violation,plot 230 reports the unwanted peer-to-peer traffic violation, andplot 232 reports unwanted RTSP violations. - While
FIGS. 10 and 11 relate to overall network statistics,FIG. 12 presents violationtrend bar chart 240 that further demonstrates the ability of the disclosed subject matter to aid in performance management ofcomputer network 12.FIG. 12 presents in violationtrend bar chart 240, a specific violation, i.e., unwanted RTSP traffic, is reported on a persite 14 basis. Chart 240 ofFIG. 12 may, for example, be generated in response to a “drill in” ofplot 232 inFIG. 11 . Moreover,individual site 14 violation data is reported over specific time periods. Thus, for the New York Gateway Interface, for example, bar 242 reports the hours in violation for October 2004 for unwanted RTSP traffic, here approximately 550 hours.Bars FIG. 12 ,computer network 12 includes forty-twosites 14. However, violationtrend bar chart 240, for the sake of simplicity and clarity, only displays the six sites demonstrating the more significant violations, based on a dynamic algorithm. In the example, these include the Taiwan interface site inbars 248, the Fairbanks interface site inbars 250, the Saigon interface site inbars 252, the Santa Fe interface site inbars 254, and the Milan interface site inbars 256. - In summary, therefore, the disclosed subject matter provides a method and system for visualizing and monitoring quality of service of a computing network. The method includes the steps and the system includes the structures for monitoring application network transactions and behaviors for the computing network. The computing network includes one or more client subnets accessing one or more servers. The monitoring may be independent of client site monitors. The method and system gather statistical data relating to at least one network, a server, and associated applications and generate a plurality of measurements of at least one quality of service indicator. The quality of service indicators relate to the performance of the computer network. The method and system further display the plurality of measurements of the at least one quality of service indicator according to the date and time of gathering the statistical data and display graphically the degree by which each of said plurality of measurements of the quality of service indicator varies from a predetermined threshold quality of service level for the computing network.
- In further summary, the disclosed subject matter provides a method and system for visualizing and monitoring the performance of a computer network that include the steps and structures for displaying graphically a plurality of averaged network quality of service indicators. The averaged network quality of service indicators are associated on a radial plot and visually interlinked to form a nominal performance polygon. The nominal performance polygon includes a plurality of corners. Each of said corners corresponds to a separate one of the plurality of averaged quality of service indicators. The method and system furthermore dynamically measure a plurality of network quality of service indicators. Each of the plurality of network quality of service indicators corresponds to one of the plurality of averaged network quality of service indicators. The method and system display graphically the dynamically measured plurality of network quality of service indicators as radial plot points on the radial plot and visually interlink the radial plot points for forming a dynamic performance polygon. The dynamic performance polygon relates to the dynamic performance of the computer network. The disclosed subject matter allows monitoring the dynamic performance of the computer network by dynamically comparing variations in said dynamic performance polygon with said nominal performance polygon.
- The foregoing description of the preferred embodiments, therefore, is provided to enable any person skilled in the art to make or use the claimed subject matter. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without the use of the innovative faculty. Thus, the claimed subject matter is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
Claims (9)
1. A method for visualizing and monitoring quality of service of a computing network, the method comprising:
monitoring application network transactions and behaviors for the computing network, the computing network including one or more client subnets accessing one or more servers, the monitoring capable of being independent of client site monitors;
gathering statistical data relating to at least network, server, and application for generating a plurality of measurements of at least one quality of service indicator associated with the performance of said computer network;
graphically displaying said plurality of measurements of said at least one quality of service indicator according to the date and time of gathering said statistical data; and
further displaying graphically the degree by which each of said plurality of measurements of said quality of service indicator varies from a predetermined threshold quality of service level for the computing network.
2. The method of claim 1 , further comprising the step of identifying a subset of said plurality of measurements of said at least one quality of service indicator according to the week day on which said subset of plurality of measurement occurs.
3. The method of claim 1 , further comprising the step of identifying a subset of said plurality of measurements of said at least one quality of service indicator according to the hour during a day in which said subset of plurality of measurement occurs.
4. A system for visualizing and monitoring quality of service of a computing network, the system comprising:
network monitoring circuitry for monitoring application network transactions and behaviors for the computing network, the computing network including one or more client subnets accessing one or more servers, the monitoring capable of being independent of client site monitors;
statistical data gathering circuitry for gathering statistical data relating to at least network, server, and application for generating a plurality of measurements of at least one quality of service indicator associated with the performance of said computer network;
a display for graphically displaying said plurality of measurements of said at least one quality of service indicator according to the date and time of gathering said statistical data; and
said display further comprising graphical display circuitry for further displaying graphically the degree by which each of said plurality of measurements of said quality of service indicator varies from a predetermined threshold quality of service level for the computing network.
5. The system of claim 4 , further comprising instructions for associating said predetermined threshold quality of service level with a service level agreement associated with the computing network.
6. The system of claim 5 , further comprising instructions for grouping said plurality of measurements of said at least one quality of service indicator according to the degree by which each of said measurements violates said service level agreement.
7. A method for visualizing and monitoring the performance of a computer network, comprising the steps of:
displaying graphically a plurality of averaged network quality of service indicators, said averaged network quality of service indicators associated on a radial plot and visually interlinked to form an nominal performance polygon, said nominal performance polygon comprising a plurality of corners, each of said corners corresponding to a separate one of said plurality averaged quality of service indicators;
dynamically measuring a plurality of network quality of service indicators, each of said plurality of network quality of service indicators corresponding to one of said plurality of averaged network quality of service indicators;
displaying graphically said dynamically measured plurality of network quality of service indicators as a radial plot point on said radial plot;
visually interlinking said radial plot points for forming a dynamic performance polygon, said dynamic performance polygon relating to the dynamic performance of said computer network; and
monitoring the dynamic performance of the computer network by dynamically comparing variations in said dynamic performance polygon with said nominal performance polygon.
8. The method of claim 7 , further comprising the step of graphically displaying said plurality of measurements of said at least one quality of service indicator from the group consisting essentially of network round trip time, percent (%) byte loss, volume (to) traffic, volume (from) traffic, number of total sessions, number of retransmission, and number of users.
9. The method of claim 7 , further comprising the step of determining a plurality of network quality of service problems as a result of monitoring the dynamic performance of the computer network using said dynamic performance polygon and said nominal performance polygon.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US12/033,816 US20080177874A1 (en) | 2005-04-20 | 2008-02-19 | Method and System for Visualizing Network Performance Characteristics |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/110,973 US7743128B2 (en) | 2005-04-20 | 2005-04-20 | Method and system for visualizing network performance characteristics |
US12/033,816 US20080177874A1 (en) | 2005-04-20 | 2008-02-19 | Method and System for Visualizing Network Performance Characteristics |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/110,973 Continuation US7743128B2 (en) | 2005-04-20 | 2005-04-20 | Method and system for visualizing network performance characteristics |
Publications (1)
Publication Number | Publication Date |
---|---|
US20080177874A1 true US20080177874A1 (en) | 2008-07-24 |
Family
ID=37115893
Family Applications (3)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/110,973 Expired - Fee Related US7743128B2 (en) | 2005-04-20 | 2005-04-20 | Method and system for visualizing network performance characteristics |
US11/849,086 Abandoned US20070288633A1 (en) | 2005-04-20 | 2007-08-31 | Method and system for visualizing network performance characteristics |
US12/033,816 Abandoned US20080177874A1 (en) | 2005-04-20 | 2008-02-19 | Method and System for Visualizing Network Performance Characteristics |
Family Applications Before (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US11/110,973 Expired - Fee Related US7743128B2 (en) | 2005-04-20 | 2005-04-20 | Method and system for visualizing network performance characteristics |
US11/849,086 Abandoned US20070288633A1 (en) | 2005-04-20 | 2007-08-31 | Method and system for visualizing network performance characteristics |
Country Status (2)
Country | Link |
---|---|
US (3) | US7743128B2 (en) |
WO (1) | WO2006113765A2 (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100110932A1 (en) * | 2008-10-31 | 2010-05-06 | Intergence Optimisation Limited | Network optimisation systems |
US20120155297A1 (en) * | 2010-12-17 | 2012-06-21 | Verizon Patent And Licensing Inc. | Media gateway health |
WO2017131777A1 (en) * | 2016-01-29 | 2017-08-03 | AppDynamics, Inc. | Application aware cluster monitoring |
Families Citing this family (67)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
FI117369B (en) * | 2004-11-26 | 2006-09-15 | Imbera Electronics Oy | Procedure for manufacturing an electronics module |
US7836452B2 (en) * | 2005-06-10 | 2010-11-16 | International Business Machines Corporation | System, method and program for estimating a requisite amount of server resources |
US7653722B1 (en) * | 2005-12-05 | 2010-01-26 | Netapp, Inc. | Server monitoring framework |
US20090132201A1 (en) * | 2006-01-27 | 2009-05-21 | Horst Erhard Kunig | Method and apparatus for measuring performance of a periodically changing system accomplishing a task |
JP4841982B2 (en) * | 2006-03-20 | 2011-12-21 | 富士通株式会社 | Performance information collection method, apparatus, and program |
US7830794B2 (en) * | 2006-03-29 | 2010-11-09 | Intel Corporation | Method and apparatus for improved isochronous data delivery over non-isochronous communication fabric |
US7412448B2 (en) * | 2006-05-17 | 2008-08-12 | International Business Machines Corporation | Performance degradation root cause prediction in a distributed computing system |
US8185619B1 (en) * | 2006-06-28 | 2012-05-22 | Compuware Corporation | Analytics system and method |
US9990110B1 (en) | 2006-08-14 | 2018-06-05 | Akamai Technologies, Inc. | Private device cloud for global testing of mobile applications |
US9720569B2 (en) | 2006-08-14 | 2017-08-01 | Soasta, Inc. | Cloud-based custom metric/timer definitions and real-time analytics of mobile applications |
US9154611B1 (en) | 2006-08-14 | 2015-10-06 | Soasta, Inc. | Functional test automation for gesture-based mobile applications |
WO2008093209A2 (en) * | 2007-01-29 | 2008-08-07 | Nortel Networks Limited | Network performance indicators |
US20090024911A1 (en) * | 2007-01-29 | 2009-01-22 | Apple Inc. | Graph data visualization tool |
US8655623B2 (en) * | 2007-02-13 | 2014-02-18 | International Business Machines Corporation | Diagnostic system and method |
US20080250356A1 (en) * | 2007-04-09 | 2008-10-09 | Netqos, Inc. | Method and system for dynamic, three-dimensional network performance representation and analysis |
US7877644B2 (en) * | 2007-04-19 | 2011-01-25 | International Business Machines Corporation | Computer application performance optimization system |
US9117007B2 (en) * | 2008-05-14 | 2015-08-25 | Microsoft Technology Licensing, Llc | Visualization of streaming real-time data |
EP2310945A4 (en) * | 2008-06-25 | 2012-10-24 | Veloxum Llc | Systems and methods for tuning an operating system, application, or network component |
US8737930B2 (en) * | 2008-09-05 | 2014-05-27 | Honeywell International Inc. | Handheld apparatus and method for determining the reliability of a network connection at a site |
US9058259B2 (en) * | 2008-09-30 | 2015-06-16 | Vmware, Inc. | System and method for dynamic problem determination using aggregate anomaly analysis |
US8220054B1 (en) * | 2008-10-31 | 2012-07-10 | Trend Micro, Inc. | Process exception list updating in a malware behavior monitoring program |
US8745637B2 (en) * | 2009-11-20 | 2014-06-03 | International Business Machines Corporation | Middleware for extracting aggregation statistics to enable light-weight management planners |
US9251035B1 (en) | 2010-07-19 | 2016-02-02 | Soasta, Inc. | Load test charts with standard deviation and percentile statistics |
US9495473B2 (en) | 2010-07-19 | 2016-11-15 | Soasta, Inc. | Analytic dashboard with user interface for producing a single chart statistical correlation from source and target charts during a load test |
US9021362B2 (en) | 2010-07-19 | 2015-04-28 | Soasta, Inc. | Real-time analytics of web performance using actual user measurements |
US9229842B2 (en) | 2010-07-19 | 2016-01-05 | Soasta, Inc. | Active waterfall charts for continuous, real-time visualization of website performance data |
US9450834B2 (en) | 2010-07-19 | 2016-09-20 | Soasta, Inc. | Animated globe showing real-time web user performance measurements |
US9436579B2 (en) * | 2010-07-19 | 2016-09-06 | Soasta, Inc. | Real-time, multi-tier load test results aggregation |
US8572241B2 (en) * | 2010-09-17 | 2013-10-29 | Microsoft Corporation | Integrating external and cluster heat map data |
US8490055B2 (en) | 2010-09-17 | 2013-07-16 | Ca, Inc. | Generating dependency maps from dependency data |
US8516301B2 (en) | 2011-04-08 | 2013-08-20 | Ca, Inc. | Visualizing transaction traces as flows through a map of logical subsystems |
US9202185B2 (en) | 2011-04-08 | 2015-12-01 | Ca, Inc. | Transaction model with structural and behavioral description of complex transactions |
US8438427B2 (en) | 2011-04-08 | 2013-05-07 | Ca, Inc. | Visualizing relationships between a transaction trace graph and a map of logical subsystems |
US8782614B2 (en) | 2011-04-08 | 2014-07-15 | Ca, Inc. | Visualization of JVM and cross-JVM call stacks |
US20120317500A1 (en) * | 2011-06-07 | 2012-12-13 | At&T Intellectual Property I, L.P. | System and method for data visualization and user collaboration |
US9785533B2 (en) | 2011-10-18 | 2017-10-10 | Soasta, Inc. | Session template packages for automated load testing |
US9264556B2 (en) | 2012-01-27 | 2016-02-16 | Microsoft Technology Licensing, Llc | On-device attribution of network data usage |
US9379949B2 (en) * | 2012-03-30 | 2016-06-28 | Wlpro Limited | System and method for improved end-user experience by proactive management of an enterprise network |
US20130275576A1 (en) * | 2012-04-11 | 2013-10-17 | Yr20 Group, Inc. | Network condition-based monitoring analysis engine |
US20130279354A1 (en) * | 2012-04-18 | 2013-10-24 | Mobile Pulse, Inc. | Wireless network performance analysis system |
US20150120914A1 (en) * | 2012-06-13 | 2015-04-30 | Hitachi, Ltd. | Service monitoring system and service monitoring method |
US8920234B2 (en) | 2012-12-06 | 2014-12-30 | Steelseries Aps | Method and apparatus for presenting information associated with a game |
US9208051B2 (en) * | 2012-12-26 | 2015-12-08 | Bmc Software, Inc. | Automatic creation of graph time layer of model of computer network objects and relationships |
US9565079B1 (en) * | 2013-01-10 | 2017-02-07 | F5 Networks, Inc. | Holographic statistics reporting |
US9772923B2 (en) | 2013-03-14 | 2017-09-26 | Soasta, Inc. | Fast OLAP for real user measurement of website performance |
US10986136B1 (en) | 2013-09-30 | 2021-04-20 | F5 Networks, Inc. | Methods for application management and monitoring and devices thereof |
US10601674B2 (en) | 2014-02-04 | 2020-03-24 | Akamai Technologies, Inc. | Virtual user ramp controller for load test analytic dashboard |
US11283697B1 (en) | 2015-03-24 | 2022-03-22 | Vmware, Inc. | Scalable real time metrics management |
US10346431B1 (en) | 2015-04-16 | 2019-07-09 | Akamai Technologies, Inc. | System and method for automated run-tme scaling of cloud-based data store |
US10313211B1 (en) * | 2015-08-25 | 2019-06-04 | Avi Networks | Distributed network service risk monitoring and scoring |
US10594562B1 (en) | 2015-08-25 | 2020-03-17 | Vmware, Inc. | Intelligent autoscale of services |
FR3045255A1 (en) * | 2015-12-11 | 2017-06-16 | Orange | ROUTER OF DOMESTIC NETWORK, SUPERVISION INTERFACE AND METHOD OF SUPERVISING THE USE OF A HOME NETWORK |
US10284444B2 (en) * | 2016-02-29 | 2019-05-07 | Airmagnet, Inc. | Visual representation of end user response time in a multi-tiered network application |
US10212041B1 (en) | 2016-03-04 | 2019-02-19 | Avi Networks | Traffic pattern detection and presentation in container-based cloud computing architecture |
US10931548B1 (en) | 2016-03-28 | 2021-02-23 | Vmware, Inc. | Collecting health monitoring data pertaining to an application from a selected set of service engines |
US10411946B2 (en) * | 2016-06-14 | 2019-09-10 | TUPL, Inc. | Fixed line resource management |
CA2976618A1 (en) * | 2016-08-16 | 2018-02-16 | Royal Bank Of Canada | System for network incident management |
US10606736B1 (en) | 2017-03-03 | 2020-03-31 | Akamai Technologies Inc. | System and method for automated creation of a load test plan |
US10586358B1 (en) | 2017-05-10 | 2020-03-10 | Akamai Technologies, Inc. | System and method for visualization of beacon clusters on the web |
US10558541B1 (en) | 2017-09-22 | 2020-02-11 | Equinix, Inc. | Agent-based monitoring of network resources |
US10756990B1 (en) * | 2017-09-22 | 2020-08-25 | Equinix, Inc. | Monitoring and performance improvement of enterprise applications using correlated data associated with a plurality of service layers |
US10999168B1 (en) | 2018-05-30 | 2021-05-04 | Vmware, Inc. | User defined custom metrics |
US11044180B2 (en) | 2018-10-26 | 2021-06-22 | Vmware, Inc. | Collecting samples hierarchically in a datacenter |
US11316734B2 (en) | 2018-11-09 | 2022-04-26 | Walmart Apollo, Llc | System and method of improving computer network system |
US11290358B2 (en) | 2019-05-30 | 2022-03-29 | Vmware, Inc. | Partitioning health monitoring in a global server load balancing system |
US11811861B2 (en) | 2021-05-17 | 2023-11-07 | Vmware, Inc. | Dynamically updating load balancing criteria |
US11792155B2 (en) | 2021-06-14 | 2023-10-17 | Vmware, Inc. | Method and apparatus for enhanced client persistence in multi-site GSLB deployments |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6487604B1 (en) * | 1999-06-30 | 2002-11-26 | Nortel Networks Limited | Route monitoring graphical user interface, system and method |
US20030086425A1 (en) * | 2001-10-15 | 2003-05-08 | Bearden Mark J. | Network traffic generation and monitoring systems and methods for their use in testing frameworks for determining suitability of a network for target applications |
Family Cites Families (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5819028A (en) * | 1992-06-10 | 1998-10-06 | Bay Networks, Inc. | Method and apparatus for determining the health of a network |
US5893905A (en) * | 1996-12-24 | 1999-04-13 | Mci Communications Corporation | Automated SLA performance analysis monitor with impact alerts on downstream jobs |
US5919248A (en) * | 1997-03-25 | 1999-07-06 | Fluke Corporation | Method and apparatus for determining network health as a function of combined percent utilization and percent collisions |
US6054987A (en) * | 1998-05-29 | 2000-04-25 | Hewlett-Packard Company | Method of dynamically creating nodal views of a managed network |
US6970924B1 (en) * | 1999-02-23 | 2005-11-29 | Visual Networks, Inc. | Methods and apparatus for monitoring end-user experience in a distributed network |
US6681232B1 (en) * | 2000-06-07 | 2004-01-20 | Yipes Enterprise Services, Inc. | Operations and provisioning systems for service level management in an extended-area data communications network |
US7197559B2 (en) * | 2001-05-09 | 2007-03-27 | Mercury Interactive Corporation | Transaction breakdown feature to facilitate analysis of end user performance of a server system |
US20030225876A1 (en) * | 2002-05-31 | 2003-12-04 | Peter Oliver | Method and apparatus for graphically depicting network performance and connectivity |
US7274670B2 (en) * | 2002-09-27 | 2007-09-25 | Netiq Corporation | Methods, systems and computer program products for assessing network quality |
US6975963B2 (en) * | 2002-09-30 | 2005-12-13 | Mcdata Corporation | Method and system for storing and reporting network performance metrics using histograms |
-
2005
- 2005-04-20 US US11/110,973 patent/US7743128B2/en not_active Expired - Fee Related
-
2006
- 2006-04-19 WO PCT/US2006/014659 patent/WO2006113765A2/en active Application Filing
-
2007
- 2007-08-31 US US11/849,086 patent/US20070288633A1/en not_active Abandoned
-
2008
- 2008-02-19 US US12/033,816 patent/US20080177874A1/en not_active Abandoned
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6487604B1 (en) * | 1999-06-30 | 2002-11-26 | Nortel Networks Limited | Route monitoring graphical user interface, system and method |
US20030086425A1 (en) * | 2001-10-15 | 2003-05-08 | Bearden Mark J. | Network traffic generation and monitoring systems and methods for their use in testing frameworks for determining suitability of a network for target applications |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20100110932A1 (en) * | 2008-10-31 | 2010-05-06 | Intergence Optimisation Limited | Network optimisation systems |
US20120155297A1 (en) * | 2010-12-17 | 2012-06-21 | Verizon Patent And Licensing Inc. | Media gateway health |
US8717883B2 (en) * | 2010-12-17 | 2014-05-06 | Verizon Patent And Licensing Inc. | Media gateway health |
WO2017131777A1 (en) * | 2016-01-29 | 2017-08-03 | AppDynamics, Inc. | Application aware cluster monitoring |
US10616081B2 (en) | 2016-01-29 | 2020-04-07 | Cisco Technology, Inc. | Application aware cluster monitoring |
Also Published As
Publication number | Publication date |
---|---|
US7743128B2 (en) | 2010-06-22 |
WO2006113765A3 (en) | 2007-12-21 |
WO2006113765A2 (en) | 2006-10-26 |
US20060242282A1 (en) | 2006-10-26 |
US20070288633A1 (en) | 2007-12-13 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20080177874A1 (en) | Method and System for Visualizing Network Performance Characteristics | |
US6738933B2 (en) | Root cause analysis of server system performance degradations | |
US8239527B2 (en) | System and interface for monitoring information technology assets | |
US7197559B2 (en) | Transaction breakdown feature to facilitate analysis of end user performance of a server system | |
US9231837B2 (en) | Methods and apparatus for collecting, analyzing, and presenting data in a communication network | |
EP0994602B1 (en) | Computer system and network performance monitoring | |
US7986632B2 (en) | Proactive network analysis system | |
US7478151B1 (en) | System and method for monitoring global network performance | |
US7318178B2 (en) | Method and system for reducing false alarms in network fault management systems | |
EP1367771B1 (en) | Passive network monitoring system | |
US6985944B2 (en) | Distributing queries and combining query responses in a fault and performance monitoring system using distributed data gathering and storage | |
US7969893B2 (en) | List-based alerting in traffic monitoring | |
US10097433B2 (en) | Dynamic configuration of entity polling using network topology and entity status | |
US20020198985A1 (en) | Post-deployment monitoring and analysis of server performance | |
US7577701B1 (en) | System and method for continuous monitoring and measurement of performance of computers on network | |
US20030225549A1 (en) | Systems and methods for end-to-end quality of service measurements in a distributed network environment | |
US10439899B2 (en) | Service summary view | |
CN112333020B (en) | Network security monitoring and data message analysis system based on quintuple | |
US20190007285A1 (en) | Apparatus and Method for Defining Baseline Network Behavior and Producing Analytics and Alerts Therefrom | |
US20090164173A1 (en) | Method and Apparatus for Network Performance Management | |
Verma et al. | Performance and Accounting Management | |
Nekrasov et al. | HARDWARE-SOFTWARE APPROACH FOR CONTROL OF COMPUTER NETWORKS | |
Wynd | Enterprise Network Monitoring and Analysis in a Mission-Critical Environment | |
Kruse | A Wide Range of Systems and Devices are Needed to Manage a Network | |
Aravantinos et al. | An approach to a methodology and implementation of a Network Monitoring Analysis Tool |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |