Electrical computers and digital processing systems: multicomput – Computer network managing – Computer network monitoring
Reexamination Certificate
1998-08-12
2001-05-29
Amsbury, Wayne (Department: 2771)
Electrical computers and digital processing systems: multicomput
Computer network managing
Computer network monitoring
C709S223000, C709S238000, C709S240000, C709S241000, C709S242000
Reexamination Certificate
active
06240452
ABSTRACT:
FIELD OF THE INVENTION
The present invention pertains to the field of computer networks. More particularly, the present invention pertains to a method and circuitry monitoring file transfers and logical connections in a computer network.
BACKGROUND OF THE INVENTION
Computer networks connect multiple personal computers and computer workstations together, allowing them to exchange information and share applications programs. Computer networks can be quite large, connecting hundreds of computers. Consequently, administering and managing them can be a complex task.
To administer, monitor, and repair computer networks, many network managers use prior network management systems. Prior network management systems tend to use a manager module, a management information database, and agent components. Agent components gather information about the computer network, such as the number and size of packets transmitted, number or frequency of corrupt packets, network usages sorted by protocol, workstation or protocol, and which workstations communicate with which servers. Agents periodically send this information to the manager module. The manager module takes the information and stores it in the management information database in the form of objects.
Even using prior network management systems, network managers need to be technically knowledgeable to diagnose the problems encountered in computer networks and to predict the future needs of their networks. This is because prior network management systems gather information at a fairly low, hardware level. As a result, prior network management systems treat each packet exchanged via the computer network as an atomic event. Thus, using prior network management systems it is not possible to determine whether or not data is actually being exchanged during a connection or which application programs are being used.
SUMMARY OF THE INVENTION
The present invention provides a method of monitoring logical connections in a computer network. According to the present invention, all packets exchanged via the network are intercepted and analyzed. Upon receipt of a packet, it is determined whether the packet is part of an existing logical connection. If it is not, a new record is created for the logical connection that the packet starts. The new record is then stored in a connection record database if the packet is part of an existing logical connection. Otherwise, the record for the logical connection is updated.
The present invention also provides a method of monitoring applications programs by monitoring the applications programs' file transfers within a computer network. File transfers are monitored using an file transfer record database, which allows each packet of the file transfer to be placed in proper context. Upon interception of a packet, it is first determined whether the packet is part of an ongoing, existing file transfer. If the packet is part of a file transfer, the packet is examined to see if it is the start of a new file transfer or is part of one of the multiplicity of ongoing, existing file transfers. Otherwise, the packet is discarded.
A new record is created if the packet is the start of a new file transfer. If the packet is part of an existing file transfer, then the file transfer record database is searched to locate the record for file transfer that the packet is part of. Once located, the record is updated to reflect the time of last activity and by increasing the total bytes exchanged by the number of bytes of data associated with the packet.
The present invention also provides apparatus for monitoring file transfers and logical connections.
Other objects, features, and advantages of the present invention will be apparent from the accompanying drawings and the detailed description that follows.
REFERENCES:
patent: 4022982 (1977-05-01), Hemdal
patent: 4620066 (1986-10-01), Bushnell et al.
patent: 4706080 (1987-11-01), Sincoskie
patent: 4737953 (1988-04-01), Koch et al.
patent: 4737983 (1988-04-01), Frauenthal et al.
patent: 4817080 (1989-03-01), Soha
patent: 5038345 (1991-08-01), Roth
patent: 5101402 (1992-03-01), Chiu et al.
patent: 5136580 (1992-08-01), Videlock et al.
patent: 5187710 (1993-02-01), Chau et al.
patent: 5222064 (1993-06-01), Sagawa
patent: 5245614 (1993-09-01), Gutman et al.
patent: 5428616 (1995-06-01), Field et al.
patent: 5430709 (1995-07-01), Galloway
patent: 5459713 (1995-10-01), Curtis
patent: 5500860 (1996-03-01), Perlman et al.
patent: 5610595 (1997-03-01), Garrabrant et al.
IBM Technical Disclosure Bulletin, “Network Analysis Monitor”, Nov. 1976.*
IBM Technical Disclosure Bulletin, “Network Monitor”, Jul. 1982.
Baggleman Thomas M.
Sternberg Jay E.
Thomas Christopher S.
Welch, Jr. Frank K.
Amsbury Wayne
Blakely , Sokoloff, Taylor & Zafman LLP
Intel Corporation
Trinh William
LandOfFree
Method and apparatus for monitoring file transfers and... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for monitoring file transfers and..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for monitoring file transfers and... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2454015