Electrical computers and digital processing systems: multicomput – Computer network managing – Computer network monitoring
Reexamination Certificate
2000-05-04
2004-05-11
Etienne, Ario (Department: 2157)
Electrical computers and digital processing systems: multicomput
Computer network managing
Computer network monitoring
C709S233000, C709S228000, C709S223000
Reexamination Certificate
active
06735629
ABSTRACT:
FIELD OF THE INVENTION
The present invention relates generally to methods and apparatus for providing network troubleshooting tools for detecting, diagnosing, and repairing network failures, and more particularly relates to a method and apparatus for dynamically optimizing the central processor unit (CPU) cycles for analyzing data retrieved from the network in a manner for eliminating system freeze (inability to move a cursor with a mouse, for example) under high network load, and for allocating CPU cycles available for USER MODE processing in an Expert Analysis configuration, and KERNEL MODE processing, when monitoring networks such as high-speed connection-oriented multiplexing and switching networks (COMSN), including Asynchronous Transfer Mode (ATM) networks, 100 mbps Full Duplex Ethernet and Gigabit Ethernet networks.
BACKGROUND OF THE INVENTION
Many different types of networks have been developed for permitting computers to communicate with each other in an organized manner. One such network for use within the same building by a plurality of computer users is known as a local area network (LAN). After the development of LAN networks, network systems were further developed for it, permitting computer users over a campus environment, such as those located in a large industrial site, to communicate with one another. To further extend to communicate across wider areas of the country or world, wide area networks (WAN) and/or ATM networks were developed. As these networks have grown in size and complexity, it became increasingly difficult to troubleshoot, maintain, and optimize the performance of such networks, particularly wide area networks.
With the invention of the World Wide Web (WWW), and the associated Internet, the complexities of maintaining such world wide advanced data communications far exceed the complexities of the largest WAN systems or networks. To improve communication over the Web or Internet, the ATM system was developed for providing technology for simultaneously transmitting data, voice and video traffic, and information over high band-width circuits. An ATM system network is one example of a high-speed connection-oriented multiplexing and switching network developed for the WWW. In the prior art, hardware has been developed for ATM systems, in conjunction with associated software platforms, to form a communications architecture based on the switching and relaying of small units of data, typically called “cells”. These “cells” may also be grouped into frames or “packets”. ATM systems or networks incorporate technology that advances the state-of-the-art to include a protocol structure for effectively integrating voice, data, and video over the same communications channel at virtually any speed. Other known services for providing data communication, such as the Internet, Internet protocol (IP), frame relay, Switched loci Multimegabit Data Service (SMDS), and Ethernet, cannot provide the aforesaid integration of voice, data, and video over the same communications channels, as provided by ATM-based services.
In other words, an ATM network consists of configurable networks between source devices and destination devices, with the network being formed by switches interconnected by links. Typically, cells of data which are 53 bytes in length, also grouped as packets, are routed by the switches. A virtual circuit (VC) is established between source devices and destination devices, and the cells or packets are routed across these virtual circuits. One or a plurality of links and switches typically comprise a virtual circuit. Note that a plurality of virtual circuits can be routed across a single link, the latter not being dedicated to any single virtual circuit.
Network Associates. Inc., of Santa Clara, Calif., has been in the forefront of technology for many years in developing and providing software for managing and troubleshooting computer networks. The software is known as Sniffer Software. The most recent Sniffer systems or Aft software readily permit LAN and WAN networks to be rapidly trouble-shooted for resolving problems in the associated network that are interfering with user communication within the network. Network Associates, Inc. (hereinafter NAI), has developed a Sniffer Enterprise Expert System that provides a probe for the rapid detection, diagnosis, and repair of network failures. NAI regularly publishes technical white papers on its public web site. Once accessed, the site can be searched for a listing of associated papers. Certain of these papers may be of interest relative to the present invention, and are incorporated herein as of the date of filing this Application, to the extent they do not conflict herewith.
For the purposes of this invention, a frame is a known data stream that contains a header, a trailer, and data of some type in between the header and the trailer. The combination of the header and the trailer, per frame, specifies the overall length of the frame, including the contents made up of the header and the trailer, as well as the type of data that resides between the header and the trailer within the frame. An ATM Sniffer is a newly introduced product of Network Associates, Inc. that permits a user to extract full duplex or bidirectional individual and successive frames that are being communicated between an ATM host device or switch, and an ATM network to which a number of user devices may be connected. Note that the Sniffer product simply is connected to a subsection of an ATM network, and it is not necessarily extracting frames that are being outputted by a host device(s), but frames that are being communicated over a given network path between a number of devices. Note that for the purposes of this Application, connection to an ATM network means connection to a subsection of the network. These devices are ATM devices. Note that an ATM host device can be an individual personal computer (PC) that has a special card installed in it to permit it to interface with an ATM network for the purposes of communicating data. Also, an ATM edge device is a type of server device that permits an ATM network to be connected through the device to a number of work stations, for example, or other computer devices connected into a network that is connected to the server or edge device. Note that there are a plurality of different types of ATM frames, and the present invention can be utilized with any particular type of frame through appropriate design of the software. However, the present invention is not limited to use in ATM Sniffer products, and can be applied for use in other Sniffer LAN (Ethernet, Token Ring, Gigabit Ethernet, etc.) network analyzers to optimize the allocation of CPU cycles.
In the realm of network analysis, there usually exists a passive station somewhere in the network connection that is able to see all traffic on the portion of the network to which it is connected. This is known as promiscuous mode analysis. Typically a network probe is connected to this network such that it is capable of analyzing each data event on the network. As the capacity of corporate and internet networks increase, there exists a point at which the time required to analyze a single network data event (typically a received packet) exceeds the amount of time between such network data events. Therefore, the network analysis probe must employ some method of throttling the CPU to insure that the probe does not spend all of its CPU cycles analyzing data. For this type of probe, it is usually important for it to respond to the particular user interface employed to view the data objects that are created by the network analysis component of the probe. From experiments with a 400 MHz Pentium II computer, it has been determined that 90% of the CPU cycles can be allocated to network analysis. This leaves 10% of the CPU cycles for all user interface software processes.
As previously mentioned, network analyzers are employed for use for monitoring and troubleshooting many different types of networks. Examples of such networks with analyzer probes shown installe
Cafarelli, III Dominick Anthony
Hansen Daniel
Chanti Hussein
Etienne Ario
Hamaty Christopher J.
Networks Associates Technology Inc.
Silicon Valley IP Group PC
LandOfFree
Method and apparatus for real-time protocol analysis using... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for real-time protocol analysis using..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for real-time protocol analysis using... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3221189