US 5,974,457 A · Intelligent realtime monitoring of data traffic

Abstract

The invention features a system and method to enable real-time establishment and maintenance of a standard of operation for a data communications network. The standard is a data set which includes network activity which is historically categorized by traffic type and by activity. The process begins with monitoring the network media or some network component over some period of time. The monitoring information is used to build benchmark data sets. The benchmark data sets contain a standard of operation for the network, which are historically categorized by either traffic type or activity. This standard of operation is constantly built by the intelligent monitoring facilities. After some period of time which is referred to as the benchmark data set refresh interval, the benchmark that was created is employed in a fashion to allow a determination as to whether the data that is taken from the current monitoring activity indicates normal network behavior. If the current network operating characteristics are outside the bounds or normal behavior, then alerts and logs of information can be sent to the expert system. The expert system can then effect some network control. In this manner, auto benchmarking is accomplished with self customization.

Claims18

Dependent claims

In a system for intelligent real time monitoring of a data communications network which communicates using a serial stream of binary bits having characteristic patterns, a method for outputting monitoring and controlling signals which are customized by classes of traffic on the network, comprising:

inputting one or more event vectors from an Event Driven Interface coupled to a data communications network;
storing a first criteria of rules in said system for a first class of traffic in said network with a standard for said first class of traffic in said network;
storing in said system a first benchmark data set as said standard for said first class of traffic, said first benchmark data set being derived from previously monitored events of said first class of traffic in said network;
accessing said first criteria of rules and comparing information derived from said inputted event vectors with said standard for said first class of traffic, using said first criteria of rules;
outputting an inference signal in response said comparison to manage and control said first class of traffic on said network;
displaying a graphical representation of the behavior of the first class traffic using the inference signal for said first class of traffic.

3 more elements

A system for intelligent real-time monitoring using an event driven interface for analyzing the output of a data communications network which communicates using a serial stream of binary bits having characteristic patterns, comprising:

an event vector register coupled to the event driven interface, for receiving event vectors that characterize the behavior of the data communications network, each event vector descriptive of one or more classes of traffic occurring on the data communications network;
an expert system, having an input coupled to said event vector register, for receiving information from said event vectors, said expert system having one or more criteria modules, each criteria module associated with a class of traffic and a standard for said associated class of traffic, each criteria module having rules for characterizing the traffic on the network by comparing information represented by the event vectors with a standard of behavior associated with the class of traffic associated with the criteria module;
said expert system outputting one or more inference signals, each inference signal associated with a class of traffic on the network;
and
an intelligent real-time monitor that outputs signals to said data communications network in response to said inference signals to mange and control said classes of traffic in said data communications network and displaying a specific graphical representation of each inference signal based upon the associated class of traffic.

2 more elements

Dependencies are inferred from the claim text.

Intelligent realtime monitoring of data traffic

Life of this patent

Intelligent realtime monitoring of data traffic

Life of this patent

Abstract

Claims18