Abstract: An IP telephone or other endpoint device in a network is configured to support a reporting mode of operation that may be entered, for example, responsive to user entry of a report command via a user interface of the endpoint device. In one aspect, the endpoint device stores call information in one or more buffers. Responsive to an instruction to enter a reporting mode, the endpoint device sends contents of the buffer(s) to a report server over the network. The endpoint device may reinitialize the buffer(s) responsive to an instruction to leave the reporting mode.

Abstract: Techniques for determining a problem location or otherwise characterizing a network comprising a plurality of processing elements, including at least one processing element associated with performance of a packet encapsulation operation of an encapsulation protocol. The packet encapsulation operation is performed on a test packet to generate an encapsulated packet, the test packet having a time to live (TTL) value and an identifier. In conjunction with performance of the packet encapsulation operation, the TTL value and the identifier of the test packet are copied to a header of the encapsulated packet. The encapsulated packet is transmitted, and a determination is made as to whether a reply packet has been received responsive to transmission of the encapsulated packet. The reply packet, if any, is processed to obtain information utilizable in determining the problem location or otherwise characterizing the network.

Abstract: A network condition capture and reproduction technique captures measurement data characterizing network conditions at a given time between first and second endpoint devices of a network, and utilizes the captured measurement data in a network impairment device to reproduce the network conditions at a later time and possibly in a different place.

Abstract: Systems and methods are presented for partitioning end-to-end performance effects using network tomography. In one embodiment, a method for partitioning end-to-end performance effects within a network is presented. The method includes determining a network topology between at least two test points, obtaining an unrelated approximation of edge effects between the test points, measuring end-to-end performance data between the test points corresponding to a target application, regularizing an estimate of edge effects for the target application using the unrelated approximation of edge effects, and computing the estimate of edge effects for the target application to partition the end-to-end effects.

Abstract: Node merging methods and apparatus are disclosed for generating simplified representations of network topology. A first topology representative of a given network is determined, and at least one pair of nodes of the first topology is merged into a single node based on measures associated with respective edges connecting the nodes of the node pair to at least one neighbor node common to that pair. The merging step is repeated for one or more additional pairs of nodes to produce a reduced network topology meeting one or more desired criteria, and a visualization or other representation of the reduced network topology is generated.

Abstract: A method of internet protocol (IP) address de-aliasing that involves obtaining IP addresses from devices in a network, pinging pairs of the IP addresses by sending packets to pairs of the IP addresses, obtaining ping response orders for the packets, and determining whether the pairs of IP addresses are aliases of the same network device based on the obtained ping response orders.

Abstract: Route asymmetry is detected in a network by running a route tracing program to trace routes between a first element of the network and a second element of the network. The route tracing program need be run at only a single network element, such as the first network element. Forward and reverse routes between the first and second network elements are identified as asymmetric if performance data from the route tracing program indicates a significant deviation from an expected monotonic characteristic as a function of time-to-live values of respective packets transmitted by the route tracing program.

Abstract: A network monitoring and analysis system is configured to include a root cause analysis function that permits the automatic determination of performance problem locations in a network of a communication system comprising a plurality of endpoint devices. Test communications are generated in the system in accordance with a selected pattern, which may be based on a flow matrix, and end-to-end path measurement data is collected utilizing the generated test communications. The end-to-end path measurement data is transformed to produce a plurality of performance indicators comprising a performance indicator for each of a plurality of non-end-to-end paths defined at least in part by the selected pattern.

Abstract: Performance problems or other conditions are analyzed in a system comprising a plurality of endpoint devices and an associated centralized or distributed controller. End-to-end measurements are obtained for respective paths through the network, for example, using communications between the endpoint devices. For a given end-to-end measurement obtained for a particular one of the paths, a value of a performance indicator for the path is determined and the performance indicator value is assigned to each of a plurality of links of the path. The determining and assigning operations are repeated for additional ones of the end-to-end measurements, the links are grouped into one or more exculpation or inculpation sets based on how many times a particular performance indicator value has been assigned to each of the links, and the one or more sets are utilized to determine, for example, the location of a performance problem in the network.

Abstract: A method and apparatus for testing a digital network having a plurality of subnetworks by determining by one of a plurality of user endpoint devices assigned to one of the plurality of subnetworks upon the one of the plurality of user endpoint devices being idle that the one of the plurality of user endpoint devices should perform the functions of a testing user endpoint device for the one of the plurality of subnetworks; identifying the one of plurality of user endpoint devices to a server or a distributed system of servers as a testing user endpoint device; obtaining the identifies of other testing user endpoint devices in other ones of the plurality of subnetworks from the server; and testing the network by transmission of test packets to other ones of the testing user endpoint devices in the other ones of the plurality of subnetworks.

Abstract: A distributed monitoring system comprises a plurality of agents configured for communication with at least one central server. A given one of the agents obtains measurement data, and applies a statistical test to the measurement data. Based on a result of the statistical test, the given agent determines whether or not an update needs to be sent by the agent to the central server. The agent sends the update to the central server if the determination indicates that the update should be sent.

Abstract: Techniques are disclosed for improved monitoring and analysis of VoIP communications, multimedia communications or other types of network traffic in a network-based communication system. In accordance with one aspect of the invention, an endpoint device of the system includes an integrated call synthesis capability. More particularly, the endpoint device is configurable into at least a first mode of operation in which the device responds to one or more commands from a testing server of the system directing the device to participate in a synthetic call or other test communication within the system, and a second mode of operation in which the device is utilizable by a system user to establish an actual communication. Other aspects of the invention relating to kernel timestamping and timestamp post-processing provide improved accuracy for measurements such as jitter, loss and delay.

Abstract: Techniques are disclosed for improved monitoring and analysis of VoIP communications, multimedia communications or other types of network traffic in a network-based communication system. In accordance with one aspect of the invention, endpoint devices of the network-based communication system are configurable so as to collectively implement a distributed monitoring and analysis system which does not require a centralized testing server or other centralized controller. Distributed test units associated with the endpoint devices may be utilized in implementing the distributed monitoring and analysis system, and are preferably configured to support a web-based user interface providing access to measurement data. The endpoint devices may be advantageously organized into a hierarchy comprising a plurality of zones, with each of the endpoint devices belonging to at least one zone.

Abstract: Techniques for determining a problem location or otherwise characterizing a network comprising a plurality of processing elements, including at least one processing element associated with performance of a packet encapsulation operation of an encapsulation protocol. The packet encapsulation operation is performed on a test packet to generate an encapsulated packet, the test packet having a time to live (TTL) value and an identifier. In conjunction with performance of the packet encapsulation operation, the TTL value and the identifier of the test packet are copied to a header of the encapsulated packet. The encapsulated packet is transmitted, and a determination is made as to whether a reply packet has been received responsive to transmission of the encapsulated packet. The reply packet, if any, is processed to obtain information utilizable in determining the problem location or otherwise characterizing the network.

Abstract: A network monitoring and analysis system is configured to include a root cause analysis function that permits the automatic determination of performance problem locations in a network of a communication system comprising a plurality of endpoint devices. Test communications are generated in the system in accordance with a selected pattern, which may be based on a flow matrix, and end-to-end path measurement data is collected utilizing the generated test communications. The end-to-end path measurement data is transformed to produce a plurality of performance indicators comprising a performance indicator for each of a plurality of non-end-to-end paths defined at least in part by the selected pattern.

Abstract: Network topology information is determined in a network-based communication system by generating communications between, for example, selected pairs of endpoint devices each associated with a network. A given one of the communications is sent from a first one of the endpoint devices to a second one of the endpoint devices and returned from the second endpoint device to the first endpoint device. Information contained in the communication as received at the first endpoint device from the second endpoint device is processed to determine network topology information characterizing at least a portion of the network.

Abstract: Techniques are disclosed for improved monitoring and analysis of VoIP communications, multimedia communications or other types of network traffic in a network-based communication system. In accordance with one aspect of the invention, endpoint devices of the network-based communication system are configurable so as to collectively implement a distributed monitoring and analysis system which does not require a centralized testing server or other centralized controller. Distributed test units associated with the endpoint devices may be utilized in implementing the distributed monitoring and analysis system, and are preferably configured to support a web-based user interface providing access to measurement data. The endpoint devices may be advantageously organized into a hierarchy comprising a plurality of zones, with each of the endpoint devices belonging to at least one zone.

Abstract: Techniques are disclosed for improved monitoring and analysis of VoIP communications, multimedia communications or other types of network traffic in a network-based communication system. In accordance with one aspect of the invention, an endpoint device of the system includes an integrated call synthesis capability. More particularly, the endpoint device is configurable into at least a first mode of operation in which the device responds to one or more commands from a testing server of the system directing the device to participate in a synthetic call or other test communication within the system, and a second mode of operation in which the device is utilizable by a system user to establish an actual communication. Other aspects of the invention relating to kernel timestamping and timestamp post-processing provide improved accuracy for measurements such as jitter, loss and delay.

Abstract: A system discovers the topology of devices in a network, such as all of the layer-2 and layer-3 devices, including routers and switches. The devices are mapped, as well as the links that join them. The devices are polled using SNMP requests. Route tables are derived from each router to determine addresses of the devices. A spanning tree process is used to discover layer-2 devices. Connections between layers are then discovered. Where information is incomplete, an undiscovered router cloud is recognized.

Abstract: A system visualizes and generates reports from stored data, concerning various measured parameters related to a network carrying call traffic. The network is displayed in an easily recognized arrangement, with various parameters being indicated by different shapes and colors for each device on the network. The parameters are changed to indicate the status of the network at different times. More detailed information about a parameter, a device or a path between devices may be obtained simply using a mouse or keystrokes. A variety of different types of detailed displays allows the operator to troubleshoot problems in the network.