The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. ex. Some numerals are expressed as "XNUMX".
Copyrights notice
The original paper is in English. Non-English content has been machine-translated and may contain typographical errors or mistranslations. Copyrights notice
Em um ambiente de gerenciamento de rede distribuída, uma NMS (Network Management Station) interage com diversos agentes em diferentes sub-redes. No contexto de gerenciamento de falhas de rede, o NMS detecta sintomas que indicam alguma anormalidade, por exemplo, um aumento repentino no tráfego ICMP, que pode ser causado por algum mau funcionamento ou uso indevido da rede. A ocorrência de um sintoma é um evento. Um grande número de eventos pode ser detectado por um NMS. O grande número destes eventos torna difícil, se não impossível, para um NMS diagnosticar estes eventos. Geralmente, uma falha pode ter um efeito cascata que pode, por sua vez, dar origem a um grande número de eventos. A sequência de eventos e sua correlação desempenham um papel importante no gerenciamento e diagnóstico de falhas. No ambiente distribuído das redes atuais, a ausência de qualquer horário uniforme para referência torna esta tarefa um desafio. Na atual estrutura de gerenciamento de rede do SNMP, um Gerente mantém uma noção do relógio do agente com o qual interage. Mas este mecanismo é inadequado para determinar a sequência de eventos e sua correlação, ainda mais num ambiente distribuído que pode envolver vários gestores. Neste artigo propomos um mecanismo para ordenar e correlacionar eventos detectados em redes de grande escala que são gerenciadas de forma distribuída dentro do framework SNMP. Nosso algoritmo usa o conceito de Network Management Clock (NMC). O NMC é um relógio virtual mantido por um gerenciador baseado em sysUpTime leituras de cada agente SNMP. Neste artigo, o algoritmo, sua implementação e avaliação serão discutidos.
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Copiar
Nei KATO, Kohei OHTA, Tomohiro IKA, Glenn MANSFIELD, Yoshiaki NEMOTO, "A Proposal of Event Correlation for Distributed Network Fault Management and Its Evaluation" in IEICE TRANSACTIONS on Communications,
vol. E82-B, no. 6, pp. 859-867, June 1999, doi: .
Abstract: In a distributed network management environment, a NMS (Network Management Station) interacts with several agents in different sub-networks. In the network fault management context, the NMS detects symptoms that indicate some abnormality e. g. a surge in ICMP traffic, which may be caused by some network malfunction or misuse. The occurrence of a symptom is an event. Large number of events may be detected by an NMS. The sheer number of these events makes it difficult, if not impossible, for an NMS to diagnose these events. Generally, a fault may have a cascading effect which may, in turn, give rise to a very large number of events. The sequence of events and their correlation play an important role in fault management and diagnosis. In the distributed environment of todays networks, the absence of any uniform time for reference makes this a challenging task. In the present network management framework of SNMP, a Manager maintains a notion of the clock of the agent it interacts with. But this mechanism is inadequate to determine the sequence of events and their correlation, more so, in a distributed environment which may involve several managers. In this paper we propose a mechanism for ordering and correlating events detected in large-scale network which is managed in a distributed manner within the SNMP framework. Our algorithm uses the concept of a Network Management Clock (NMC). The NMC is a virtual clock maintained by a manager based on sysUpTime readings from each SNMP agent. In this paper, the algorithm, its implementation and evaluation will be discussed.
URL: https://global.ieice.org/en_transactions/communications/10.1587/e82-b_6_859/_p
Copiar
@ARTICLE{e82-b_6_859,
author={Nei KATO, Kohei OHTA, Tomohiro IKA, Glenn MANSFIELD, Yoshiaki NEMOTO, },
journal={IEICE TRANSACTIONS on Communications},
title={A Proposal of Event Correlation for Distributed Network Fault Management and Its Evaluation},
year={1999},
volume={E82-B},
number={6},
pages={859-867},
abstract={In a distributed network management environment, a NMS (Network Management Station) interacts with several agents in different sub-networks. In the network fault management context, the NMS detects symptoms that indicate some abnormality e. g. a surge in ICMP traffic, which may be caused by some network malfunction or misuse. The occurrence of a symptom is an event. Large number of events may be detected by an NMS. The sheer number of these events makes it difficult, if not impossible, for an NMS to diagnose these events. Generally, a fault may have a cascading effect which may, in turn, give rise to a very large number of events. The sequence of events and their correlation play an important role in fault management and diagnosis. In the distributed environment of todays networks, the absence of any uniform time for reference makes this a challenging task. In the present network management framework of SNMP, a Manager maintains a notion of the clock of the agent it interacts with. But this mechanism is inadequate to determine the sequence of events and their correlation, more so, in a distributed environment which may involve several managers. In this paper we propose a mechanism for ordering and correlating events detected in large-scale network which is managed in a distributed manner within the SNMP framework. Our algorithm uses the concept of a Network Management Clock (NMC). The NMC is a virtual clock maintained by a manager based on sysUpTime readings from each SNMP agent. In this paper, the algorithm, its implementation and evaluation will be discussed.},
keywords={},
doi={},
ISSN={},
month={June},}
Copiar
TY - JOUR
TI - A Proposal of Event Correlation for Distributed Network Fault Management and Its Evaluation
T2 - IEICE TRANSACTIONS on Communications
SP - 859
EP - 867
AU - Nei KATO
AU - Kohei OHTA
AU - Tomohiro IKA
AU - Glenn MANSFIELD
AU - Yoshiaki NEMOTO
PY - 1999
DO -
JO - IEICE TRANSACTIONS on Communications
SN -
VL - E82-B
IS - 6
JA - IEICE TRANSACTIONS on Communications
Y1 - June 1999
AB - In a distributed network management environment, a NMS (Network Management Station) interacts with several agents in different sub-networks. In the network fault management context, the NMS detects symptoms that indicate some abnormality e. g. a surge in ICMP traffic, which may be caused by some network malfunction or misuse. The occurrence of a symptom is an event. Large number of events may be detected by an NMS. The sheer number of these events makes it difficult, if not impossible, for an NMS to diagnose these events. Generally, a fault may have a cascading effect which may, in turn, give rise to a very large number of events. The sequence of events and their correlation play an important role in fault management and diagnosis. In the distributed environment of todays networks, the absence of any uniform time for reference makes this a challenging task. In the present network management framework of SNMP, a Manager maintains a notion of the clock of the agent it interacts with. But this mechanism is inadequate to determine the sequence of events and their correlation, more so, in a distributed environment which may involve several managers. In this paper we propose a mechanism for ordering and correlating events detected in large-scale network which is managed in a distributed manner within the SNMP framework. Our algorithm uses the concept of a Network Management Clock (NMC). The NMC is a virtual clock maintained by a manager based on sysUpTime readings from each SNMP agent. In this paper, the algorithm, its implementation and evaluation will be discussed.
ER -