Abstract: A multi-domain network manager provides alarm correlation among a plurality of domains included in a communications network. Individual network management systems each monitor a single respective domain of the communications network, and provide intra-domain alarms indicative of status specific to the single respective domain. The multi-domain network manager receives the intra-domain alarms, and correlates them to provide inter-domain alarms as well as responses in the form of corrective actions. The multi-domain network manager thus provides a high level of correlation and response for the entire network while each network management system provides a lower level of correlation and response for an individual domain of the network.

Abstract: Apparatus and method for distributed object filtering of objects transferred between a client and server. The objects may be alarms transferred between a network management server and one or more network management applications. The apparatus and method further includes applying a plurality of policy-based filters to the alarms. The filters may be named and stored in a database, and application of the policy-based filters may be scheduled for different times. The same policy-based filters may be applied to one or more multiple network management applications. The system and method provides increased performance and reliability of passing objects from a server to a client application.

Abstract: Apparatus and method for monitoring parameters that govern the operational characteristics of a network device, including the use of templates for generating configuration records of network devices of a selected model type. A database of models is provided, each model representing an associated network device and including attribute values for the parameters of the associated network device. Templates are used to screen a model in order to retrieve values for each of the attributes and create a configuration record. The configuration records may be stored in the configuration manager or other storage device, and/or transferred to the pre-existing model database for use by a network management system in reconfiguring the associated network devices. Additionally, a method and apparatus is provided that defines network groups, defines network policies for groups, determines conflicts, and resolves conflicts among groups and devices.

Abstract: Network capacity evaluation and planning is performed based upon the traffic across the links of the network. Once a link's traffic volume has been measured, it is compared with the link's traffic capability, and the resulting parameters compared with the traffic and capability of other links of the network to create measures of network capacity and balance. Then, simulated changes to the network configuration may be made by substituting simulated traffic volume amounts and capabilities for selected link traffic measurements and capabilities, and the resulting measures of network capacity and balance may then be compared to determine whether the simulated changes represent a preferred network configuration.

Abstract: A multi-domain network manager provides alarm correlation among a plurality of domains included in a communications network. Individual network management systems each monitor a single respective domain of the communications network, and provide intra-domain alarms indicative of status specific to the single respective domain. The multi-domain network manager receives the intra-domain alarms, and correlates them to provide inter-domain alarms as well as responses in the form of corrective actions. The multi-domain network manager thus provides a high level of correlation and response for the entire network while each network management system provides a lower level of correlation and response for an individual domain of the network.

Abstract: A computer system includes a gateway which provides integration between a network management platform and a system management platform. Such a gateway facilitates sharing of network management and system management events and alarms, as well as sharing of network management and system management display views. From the shared events and alarms, each platform may correlate such shared events and alarms with other data available to the platform. Thus, each platform has the advantage of using its own data in combination with data from the other platform to more effectively perform its functionality.

Abstract: Control of network surveillance in communications networks is accomplished by dividing the surveillance task into two sub-tasks. The first sub-task automatically identifies communications within the network which are to be monitored. Such identification is accomplished by the application of a reasoning system to data received from the network. The identification of the data to be monitored is received by the second sub-task along with network topology information. The second sub-task also applies a reasoning system to this data in order to configure probes and switches within the network so that the identified data can be captured.

Abstract: A multi-domain network manager provides alarm correlation among a plurality of domains included in a communications network. Individual network management systems each monitor a single respective domain of the communications network, and provide intra-domain alarms indicative of status specific to the single respective domain. The multi-domain network manager receives the intra-domain alarms, and correlates them to provide inter-domain alarms as well as responses in the form of corrective actions. The multi-domain network manager thus provides a high level of correlation and response for the entire network while each network management system provides a lower level of correlation and response for an individual domain of the network.

Abstract: Apparatus and method for learning current network behavior and predicting future behavior which utilizes a state transition graph. The graph includes nodes which represent network states, and arcs which represent trends in observable network parameters that result in a transition from a current state to another state. For example, a watch service may be instituted on multiple ports of a router, and the observed network traffic on the ports over time may be transformed into a state transition graph that represents network behavior. The network states may be labeled such as "good", or "bad", etc., according to a predetermined performance criteria. Once a state transition graph is constructed, the system may then monitor the current state and current trends of the network parameters in order to predict and display future network states. The system may include an automatic warning signal for alerting a user that the network is headed in the direction of a problematic state.

Abstract: Method and apparatus for determining an enforceable policy applicable to one or more network devices. The method includes attaching one or more rule elements to one or more domain elements to create policies, the domain elements representing network devices and groups of network devices, and the rule elements defining actions, a method for determining whether a conflict exists between the polices, and a method for resolving the conflicts to produce one or more enforceable policies.

Abstract: Apparatus and method for monitoring parameters that govern the operational characteristics of a network device, including the use of templates for generating configuration records of network devices of a selected model type. A database of models is provided, each model representing an associated network device and including attribute values for the parameters of the associated network device. Templates are used to screen a model in order to retrieve values for each of the attributes and create a configuration record. The configuration records may be stored in the configuration manager or other storage device, and/or transferred to the pre-existing model database for use by a network management system in reconfiguring the associated network devices. Additionally, a method and apparatus is provided that defines network groups, defines network policies for groups, determines conflicts, and resolves conflicts among groups and devices.

Abstract: A multi-domain network manager provides alarm correlation among a plurality of domains included in a communications network. Individual network management systems each monitor a single respective domain of the communications network, and provide intra-domain alarms indicative of status specific to the single respective domain. The multi-domain network manager receives the intra-domain alarms, and correlates them to provide inter-domain alarms as well as responses in the form of corrective actions. The multi-domain network manager thus provides a high level of correlation and response for the entire network while each network management system provides a lower level of correlation and response for an individual domain of the network.

Abstract: Traffic on a communications network is evaluated based on intra-subnet and inter-subnet traffic volumes. Values indicative of such volumes and of the overall network balance are displayed, along with alternative node topologies which may be evaluated and displayed. The overall network performance is based on equalizing intra-subnet traffic volume and minimizing inter-subnet traffic volume.

Abstract: Apparatus and method for receiving alarms from multiple network management servers and applying a plurality of policy-based filters to the alarms. The filters may be named and stored in a database, and application of the policy-based filters may be scheduled for different times. The same policy-based filters may be applied to one or more multiple network management applications. The invention allows greater control over which alarms get reported to network management applications and provides a means to ensure consistency of reported alarms across multiple network management applications. A telephonic alarm notification method and apparatus incorporates the policy-based filters and the capability to process alarms from multiple network segment servers so that users can be accurately notified of critical alarms generated in large and complex communications networks, via a public communications system.

Abstract: The apparatus includes a network monitor coupled to the communications network and providing numeric data representative of at least one operating parameter of the communications network. A fuzzifier module is coupled to the network monitor and converts the numeric data into fuzzy input data. A fuzzy inference engine is coupled to the fuzzifier module and processes the fuzzy input data according to at least one fuzzy rule to provide fuzzy output data representative of control actions to effect a desired state of the communications network. A defuzzifier module is coupled to the fuzzy inference engine and converts the fuzzy output data into numeric data which may be then used by a network controller to control at least one network parameter in response to the output data. The apparatus may also include a user interface and a display to allow the fuzzy input data, and the fuzzy output data to be displayed to a user.

Abstract: An improved method and apparatus of resolving faults in a communications network. The preferred system uses a trouble ticket data structure to describe communications network faults. Completed trouble tickets are stored in a library and when an outstanding trouble ticket is received, the system uses at least one determinator to correlate the outstanding communications network fault to data fields in the set of data fields of the trouble ticket data structure to determine which completed trouble tickets in the library are relevant to the outstanding communications network fault. The system retrieves a set of completed trouble tickets from the library that are similar to the outstanding trouble ticket and uses at least a portion of the resolution from at least one completed trouble ticket to provide a resolution of the outstanding trouble ticket.