WO2005004402A1 - Procede de traitement d'avertissement d'un systeme de gestion de reseau - Google Patents

Procede de traitement d'avertissement d'un systeme de gestion de reseau Download PDF

Info

Publication number
WO2005004402A1
WO2005004402A1 PCT/CN2003/000544 CN0300544W WO2005004402A1 WO 2005004402 A1 WO2005004402 A1 WO 2005004402A1 CN 0300544 W CN0300544 W CN 0300544W WO 2005004402 A1 WO2005004402 A1 WO 2005004402A1
Authority
WO
WIPO (PCT)
Prior art keywords
alarm
flash
information
flashing
processing method
Prior art date
Application number
PCT/CN2003/000544
Other languages
English (en)
Chinese (zh)
Inventor
Jinfeng Liang
Original Assignee
Huawei Technologies Co., Ltd.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co., Ltd. filed Critical Huawei Technologies Co., Ltd.
Priority to AU2003257768A priority Critical patent/AU2003257768A1/en
Priority to PCT/CN2003/000544 priority patent/WO2005004402A1/fr
Publication of WO2005004402A1 publication Critical patent/WO2005004402A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14—Network analysis or design
    • H04L41/142—Network analysis or design using statistical or mathematical methods
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0604—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
    • H04L41/0622—Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time based on time

Definitions

  • the present invention relates to network management technology, and in particular, to a method for processing flash alarms in a network management system. Background of the invention
  • the above-mentioned flashing alarm refers to the case where the same alarm occurs and ends multiple times in a short period of time; the same alarm refers to an alarm with the same alarm identifier (ID) and occurring on the same channel.
  • the alarms reported by the managed devices are generally directly saved to the database, and some are saved to the database after correlation analysis.
  • the flash alarms cannot be processed and identified, so that many alarm data of no practical significance need to be maintained. This not only reduces the processing speed of network management, but also overwhelms important alarms, hindering fault location and recovery. Summary of the invention
  • An object of the present invention is to provide an alarm processing method in a network management system, so as to process and identify the flashing alarm in the alarm, and enhance the processing capability of the network management system.
  • step A Buffer and count the alarm, and judge whether the alarm starts to flash based on the frequency of the alarm generated within a certain period of time. If so, set the flash state of the alarm to the flash start state, and record the flash of the alarm. If the information is broken, return to step A to process the next alarm; if no, J, return to step A to process the next alarm;
  • the method further includes: judging whether the alarm is in a flash state according to the recorded flash information; if so, modify the flash information of the alarm, then discard the alarm, and then process the next alarm according to step A; otherwise, Perform steps into.
  • the step A further includes buffering the alarm in the alarm delay buffer for a specified time, storing all flash information in the flash alarm information table, and storing the count value of the same alarm in the alarm delay buffer in the flash. Break statistics table.
  • the flash information includes at least time information, an alarm identifier, and alarm status information.
  • the step B further includes:
  • B02 determine whether the above-mentioned time has reached the predetermined flash end time threshold, if it is reached, clear the flash information from the flash alarm information table, and then execute B03); otherwise, execute B03 directly);
  • the present invention identifies flashing alarms from general alarms based on the frequency of alarm generation, processes the received alarms based on the alarm flashing status in the flashing alarm information table, analyzes the flashing alarms that occur regularly, and filters out subsequent flashing Alarms, which minimizes the maintenance of flashing alarms, greatly reduces the number of alarms processed in alarm correlation analysis, thereby making alarm analysis more timely and accurate, enabling faster location and elimination of alarms, and thereby improving network management processing Ability and speed.
  • FIG. 1 is a flowchart of receiving alarm processing according to the present invention
  • FIG. 2 is a timing analysis flowchart of the present invention. Mode of Carrying Out the Invention
  • the processing of the entire flash alarm in the present invention includes two processes of receiving an alarm and timing analysis.
  • the identifier (ID) By setting the identifier (ID) to be the same, and the alarm occurring on the same channel to be the same alarm, and setting an alarm delay buffer area and an alarm
  • the statistics table and a flash alarm information table implement analysis and filtering of flash alarms.
  • the alarm delay buffer area is used to ensure that the alarm is cached in the cache for a specified time; the alarm statistics table is used to store the count value of the same alarm in the alarm delay buffer area; and the flashing alarm information table is used to save all Information about a flashing alarm.
  • FIG. 1 is a flowchart of receiving alarm processing according to the present invention. For newly collected alarms, first determine whether the alarm is already in the flashing state according to the flashing alarm information table, that is, determine whether the same alarm exists in the flashing alarm information table.
  • the alarm If the alarm is in the flashing state, modify the flashing information of the alarm in the flashing alarm information table, and reset its time information to reset its timing time, and then discard the alarm; otherwise, add this to the alarm statistics table
  • the count value of the alarm and determine whether the count value of the alarm is greater than the threshold of the flashing start, that is, determining whether the number of times that the alarm is generated reaches the flashing frequency; if it is greater than that, the alarm starts flashing, and the scanning alarm is delayed
  • the first alarm is retained, the same alarm of this alarm is deleted, and the flashing start state is set, and the flashing start state is stored in the corresponding alarm record of the alarm database; and then the alarm of the alarm is added to the flashing alarm information table. Flash information record; if the count value of this alarm If the value is less than the flash start threshold, the alarm is placed in the alarm delay buffer area.
  • FIG. 2 is a timing analysis flowchart of the present invention. For alarms that have been judged to have occurred flash interruptions, perform timing analysis and processing. The specific process is as follows:
  • step 201 scan the alarm delay buffer area, delete the alarms that have reached the delay time, and modify the alarm count value in the alarm statistics table, that is, reduce the count in the alarm statistics table;
  • step 202 is executed to scan the flash alarm information table, and add the timing time in the time information to each flash information in the flash alarm information table to count the time interval of subsequent identical alarms;
  • Step 203 is executed to determine whether the timing time reaches a predetermined flash end time threshold without new alarms being generated. If yes, it is determined that the alarm corresponding to this flash record is ended, and step 204 is performed to clear from the flash alarm information table. The flashing information record corresponding to this alarm, and the corresponding alarm is set to the flashing end state, and the flashing end state is stored in the corresponding alarm record of the alarm database; otherwise, step 205 is performed to determine all the flashing alarm information tables. Whether the flashing information record is processed, and if so, the timing analysis process ends; otherwise, the process returns to step 202.
  • the flash information may include time information related to the alarm identifier, the time when the flash occurred, alarm information related to the cause of the alarm, and alarm status information.
  • the present invention is not limited to the specific introduction of the above embodiments.
  • the present invention may be further updated, or a new combination of features disclosed in the present invention may be added, or any method or process disclosed in the present invention may be updated or newly combined.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • Algebra (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Analysis (AREA)
  • Mathematical Optimization (AREA)
  • Mathematical Physics (AREA)
  • Probability & Statistics with Applications (AREA)
  • Pure & Applied Mathematics (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

L'invention concerne un procédé de traitement d'avertissement dans un système de gestion de réseau. Ledit procédé consiste d'abord à confirmer l'avertissement à flash par la détermination de la fréquence de l'avertissement. Si l'avertissement est un avertissement à flash, le premier avertissement est maintenu, l'avertissement à flash est actionné, et tout avertissement ultérieur est filtré. L'intervalle de temps séparant les avertissements est analysé. Lorsque la durée des intervalles continue au-delà de la fin des flash et qu'aucun nouvel avertissement n'est déclenché, la fin de l'avertissement à flash peut être déterminée ainsi que la fin du flash. Le procédé de l'invention permet de réduire le nombre d'avertissements en fonction d'une analyse relative, par un traitement et une analyse spécifiques de l'avertissement à flash. Ce procédé permet d'améliorer l'exactitude de l'analyse de l'avertissement, d'améliorer la vitesse d'intervention et la capacité de gestion de réseau.
PCT/CN2003/000544 2003-07-08 2003-07-08 Procede de traitement d'avertissement d'un systeme de gestion de reseau WO2005004402A1 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
AU2003257768A AU2003257768A1 (en) 2003-07-08 2003-07-08 A processing method about alarm in network management system
PCT/CN2003/000544 WO2005004402A1 (fr) 2003-07-08 2003-07-08 Procede de traitement d'avertissement d'un systeme de gestion de reseau

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2003/000544 WO2005004402A1 (fr) 2003-07-08 2003-07-08 Procede de traitement d'avertissement d'un systeme de gestion de reseau

Publications (1)

Publication Number Publication Date
WO2005004402A1 true WO2005004402A1 (fr) 2005-01-13

Family

ID=33557726

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2003/000544 WO2005004402A1 (fr) 2003-07-08 2003-07-08 Procede de traitement d'avertissement d'un systeme de gestion de reseau

Country Status (2)

Country Link
AU (1) AU2003257768A1 (fr)
WO (1) WO2005004402A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2014206066A1 (fr) * 2013-06-29 2014-12-31 华为技术有限公司 Procédé, appareil et système d'analyse de corrélation d'alarmes
US9256828B2 (en) 2013-06-29 2016-02-09 Huawei Technologies Co., Ltd. Alarm correlation analysis method, apparatus and system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1154030A (zh) * 1996-10-22 1997-07-09 北京市电话局 程控交换机集中操作维护系统
JPH1094072A (ja) * 1996-09-12 1998-04-10 Nec Corp 警報情報収集方式
JPH11284692A (ja) * 1998-03-31 1999-10-15 Anritsu Corp 伝送装置の警報収集装置

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH1094072A (ja) * 1996-09-12 1998-04-10 Nec Corp 警報情報収集方式
CN1154030A (zh) * 1996-10-22 1997-07-09 北京市电话局 程控交换机集中操作维护系统
JPH11284692A (ja) * 1998-03-31 1999-10-15 Anritsu Corp 伝送装置の警報収集装置

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2014206066A1 (fr) * 2013-06-29 2014-12-31 华为技术有限公司 Procédé, appareil et système d'analyse de corrélation d'alarmes
US9256828B2 (en) 2013-06-29 2016-02-09 Huawei Technologies Co., Ltd. Alarm correlation analysis method, apparatus and system

Also Published As

Publication number Publication date
AU2003257768A1 (en) 2005-01-21

Similar Documents

Publication Publication Date Title
US7787442B2 (en) Communication statistic information collection apparatus
CN110677324B (zh) 基于sFlow采样与控制器主动更新列表的大象流两级检测方法
US8126980B2 (en) Dual use counters for routing loops and spam detection
WO2021017884A1 (fr) Procédé et appareil de traitement de données, et serveur passerelle
CN101399711B (zh) 网络监视装置以及网络监视方法
CN106921665B (zh) 一种报文处理方法及网络设备
US8270305B2 (en) Node device, node system, and method and program for changing statistic information management table used for the node device
WO2016145764A1 (fr) Procédé et appareil de contrôle de perte de paquets
CN111314243B (zh) 一种支持复杂业务数据传输的LoRa网络QoS调度管理方法
CN112543149B (zh) 防止ipfix消息丢失的方法及其应用、asic芯片
WO2011144181A2 (fr) Procédé et nœud de réseau adaptés pour évaluer la qualité d'une vidéo
US20120170460A1 (en) System and method for removing test packets
CN111585903B (zh) 一种OpenFlow流表项自适应超时的方法及系统
CN112637015A (zh) 一种基于psn实现rdma网络的丢包检测方法及装置
EP2658193A2 (fr) Procédé et appareil d'envoi de paquet de changement de topologie et procédé et appareil de mise à jour de table d'acheminement
WO2011140874A1 (fr) Procédé et appareil permettant d'évaluer le comportement d'un équipement utilisateur en mode veille
WO2005004402A1 (fr) Procede de traitement d'avertissement d'un systeme de gestion de reseau
US5646956A (en) System and method for estimating top contributors
CN109309679A (zh) 一种基于tcp流状态的网络扫描检测方法及检测系统
WO2012010090A1 (fr) Procédé et appareil de suivi de la signalisation aléatoire de comptes rendus sur la base des utilisateurs
CN116915671B (zh) 一种多端口带内网络遥测实现方法及装置
CN114124470A (zh) 网络流量元数据采集技术算法
WO2023072082A1 (fr) Procédé et appareil de surveillance d'événement, puce et support de stockage informatique
CN112769740B (zh) 城域网网络流量分析方法及系统
CN112565821B (zh) 数据处理方法、装置、安全网关及存储设备

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
122 Ep: pct application non-entry in european phase
NENP Non-entry into the national phase

Ref country code: JP