US 2013/0159510 A1 · Event Correlation Between Protocol Layers in a Network Device

Abstract

A system and method for correlating events between protocol layers of a protocol stack of a network device includes detecting, at a first protocol layer, an occurrence of a first event associated with one or more data units received by the network device over physical media. A first times-tamp is associated with the first event. At a second protocol layer, an occurrence of a second event associated with the one or more data units is detected The second protocol layer is at a higher protocol layer of a protocol stack than the first protocol layer. A second timestamp is associated with the second event. A determination is made whether there is a correlation between the first and second events based on the first and second timestamps. Causation of the second event at the second protocol layer may be attributable to the first event at the first protocol layer.

Claims30

Dependent claims

A method for correlating events occurring at different hierarchical protocol layers of a protocol stack of a network device, comprising:

detecting, at a first protocol layer of the network device, an occurrence of a first event associated with one or more data units received by the network device over physical media;
associating a first timestamp with the first event;
detecting, at a second protocol layer of the network device, an occurrence of a second event associated with the one or more data units received over the physical media, the second protocol layer being at a higher protocol layer of a protocol stack of the network device than the first protocol layer;
associating a second timestamp with the second event;
and
determining whether there is a correlation between the first and second events based on the first and second timestamps.

3 more elements

A computer program product for correlating errors between hierarchical protocol layers of a protocol stack of a network device, the computer program product comprising:

a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
computer readable program code that, if executed, detects at a first protocol layer of a network device, an occurrence of a first event associated with one or more of a plurality of data units received by the network device over physical media;
computer readable program code that, if executed, associates a first timestamp with the first event;
computer readable program code that, if executed, detects at a second protocol layer of the network device, an occurrence of a second event associated with the one or more data units received over the physical media, the second protocol layer being at a higher layer of a protocol stack of the network device than the first protocol layer;
computer readable program code that, if executed, associates a second timestamp with the second event;
and
computer readable program code that, if executed, determines whether there is a correlation between the first and second events based on the first and second timestamps.

4 more elements

Dependencies are inferred from the claim text.

Event Correlation Between Protocol Layers in a Network Device

Life of this patent

Event Correlation Between Protocol Layers in a Network Device

Life of this patent

Abstract

Claims30