Abstract: Presented is a method and system for determining network topology of a Virtual Private Network (VPN) in a Wide Area Network (WAN). The method includes obtaining a list of CE (customer edge) routers in a network, obtaining a list of prefixes advertised by each CE router, iterating, for each prefix, the list of prefixes advertised by all CE routers, verifying, in case a potential hub CE router already exists, whether the second CE router and the potential hub CE router are same, marking, in case a potential hub CE router does not exist, the second CE router as the potential hub CE router, and marking, if there exists a potential hub CE router that advertises every other prefix in the network, the potential hub CE router as hub site and other CE routers as spoke sites.

Abstract: An extendable network management system and method is provided to manage a network environment. The system can include a management server with a management application. In addition, the management application is configured to enable a user to manage the network environment. A extension application server can host a plurality of extension modules. The extension modules can supply management functions to the management application for defined network components. Further, a plurality of management engines can be located on the extension application server.

Abstract: A method and system are described for managing a computer network. In accordance with exemplary embodiments of the present invention, a collection computer is assigned a management domain identifier uniquely associated with a management domain in which each collection computer resides. Information that includes the management domain identifier is received in at least one management computer from the collection computer. A database of the information accessed using the management domain identifier is maintained within the at least one management computer.

Abstract: Exemplary embodiments are directed to a system and method for managing a network having multiple domains. An exemplary method includes identifying a router interface connected with a switch; assigning a Layer 2 identifier to the interface, wherein the identifier uniquely identifies a Layer 2 domain within the network; and assigning the Layer 2 identifier to the switch.

Abstract: Exemplary embodiments are directed to a system and method for managing a network having multiple domains. An exemplary method includes identifying a router interface connected with a switch; assigning a Layer 2 identifier to the interface, wherein the identifier uniquely identifies a Layer 2 domain within the network; and assigning the Layer 2 identifier to the switch.

Abstract: A method of compiling causal rules into continuations for use in root cause analysis of a system comprising a plurality of inter-related elements, comprising defining observable events occurring on system elements; defining at least one of a cause and a result of each of the events; defining causal rules, each rule describing a causal relationship between an event and one of its cause and its result; and compiling the causal relationships as continuations in a continuation passing style (CPS) for use in analyzing the root cause of subsequent observed events symptomatic of at least one problem on the system.

Abstract: An engine for performing root cause analysis on a system comprising a plurality of elements in a modeled domain, the engine comprising a module loader and parser for loading modules of computer code containing computer language statements modeling elements of the system, including one or more of model type definitions, conditions, causal rules, and continuations; and for parsing the computer language statements; a storage for storing the parsed computer language statements; a receiver for receiving conditions representing state changes of system elements, accessing the storage, and determining one or more parsed computer language statements to apply to the received conditions; a hypothesis generator for instantiating one or more hypotheses of potential causes of each received condition consistent with the received conditions and the parsed computer language statements; a blackboard for receiving the instantiated hypotheses, and determining a root cause of the received conditions based on the hypotheses consis

Abstract: Managing a root cause analysis and outputting an identified root cause, for use in a system comprising a plurality of inter-related elements wherein at least some of the elements experience one or more anomalous states, comprising receiving initial indicators of system element states symptomatic of anomalous element operation, selecting an episode expiration time based on the received initial indicators, receiving additional such indicators, correlating the indicators received prior to the episode expiration time based on pre-defined relationships between the system elements, generating possible causes of the anomalous element states consistent with the received indicators and the pre-defined relationships, asserting possible causes as actual causes, identifying an actual cause as a root cause, and outputting the root cause.

Abstract: A method of performing root cause analysis for use in a system comprising a plurality of inter-related elements, wherein at least some of the elements experience one or more abnormal conditions, comprising defining one or more conditions for more than one element symptomatic of abnormal operation of the element; defining one or more causal relationships between the conditions and results on one or more related elements; compiling the conditions and causal relationships of each element for which conditions and relationships have been defined, as at least one continuation in a continuation passing style (CPS); receiving one or more observed events symptomatic of abnormal operation of at least one element of the system; processing the received events using the conditions and the continuations; concluding at least one root cause of the received events consistent with the received events; and outputting the root cause.

Abstract: A method and system for locating a fault in a network. According to the system, an address analyzer and interface analyzer of a network manager of the network detect that there is a failure associated with a node of the network, a node analyzer of the network manager determines if the node responds to a poll, and if the node does not respond to the poll, a neighbor analyzer of the network manager models the failure, further comprising determining a number and a polling of a plurality of neighbor nodes of the node and assigning the fault in accordance with the number and the polling of the plurality of neighbor nodes According to the method, in response to a node having one or more of one or more addresses and one or more interfaces that fail to respond to a poll, polling the node and polling a plurality of neighbor nodes of the node and assigning the fault in accordance with the polling of the node and a number and the polling of the plurality of neighbor nodes.

Abstract: A system and associated method of storing data concerning a computer network are disclosed. Mesh information concerning a mesh of nodes in the computer network is produced. The mesh information indicates that an interface of the mesh is an external mesh interface, and the mesh information is stored.

Abstract: A method and system are described for managing a device within a private network using a management device external to the private network. According to exemplary embodiments, a first network address, used to uniquely identify the device within the private network, is associated with a second network address used to uniquely identify the device externally of the private network. An information exchange path is established between the device and the management device. Management of the device is provided via use of the first network address at the management device.

Abstract: A system and method for communicating between a management station and at least two networks having duplicate Internet Protocol (IP) addresses. An IP address for an IP data packet to be sent to at least one of an end device and the management station is recognized. A header of the IP data packet with a tag that identifies one of the duplicate IP networks within which the end device resides is modified. The IP data packet is routed, based on the tag, in accordance with a policy.

Abstract: A network system comprises a discovery subsystem that identifies, enables for consumption, and consumes information. The discovery subsystem isolates business contents and device-specific logic using modular domain-specific contents and data definitions for normalizing the domain-specific contents and describing attributes and value types that uniquely define domain content independently of a device.

Abstract: The present invention is directed to finding a path between two nodes, including the routing and non-routing nodes of the path. Exemplary embodiments of the present invention are directed to a computer implemented method of finding a path between two nodes in a network. Exemplary steps of the method include obtaining information from a routing table of a first node in the path to determine a second node in the path; determining whether any non-routing nodes are in the path between the first and second nodes; and producing a representation of nodes in the path.

Abstract: In an embodiment of a method of tracing a path through a switch mesh from a first device connected to the switch mesh to a second device connected to the switch mesh, hardware addresses of the first and second devices are obtained. At least one switch that is a neighbor to the first device is identified. At least one switch that is a neighbor to the first device is queried to identify at least one port of at least one switch that is forwarding packets having the hardware addresses of the first and second devices.

Abstract: A method and system are disclosed for analyzing an event in a network. For example, the method for analyzing an event in a network includes identifying a network protocol error in the network, identifying a network hardware failure in the network, correlating the network protocol error and the network hardware failure to determine a correlation result, and outputting the correlation result to a user interface. The correlation output can provide an indication of a relationship between the network protocol error and the network hardware failure.

Abstract: A method and system for identifying active and standby states of plural routers within a virtual router in a network is provided. The health of a virtual router represents whether the routers of the virtual router are configured for their appropriate active and standby states. For example, first information from a first and second router of a virtual router is obtained. The first information is used to determine the active and standby states within the virtual router. A topology of the network is produced identifying the active and standby states.

Abstract: In an exemplary embodiment, a method for managing a network includes monitoring a network using an interior gateway protocol to detect change in the network, and determining effects of the detected network change on Multi Protocol Label Switching paths in the network. For example, the MPLS paths can be the same as IGP best paths. An exemplary embodiment includes managing a Multi Protocol Label Switching network by discovering edge routers in the Multi Protocol Label Switching network, determining possible combinations of Multi Protocol Label Switching path end points based on services provided within the network, selecting discovered edge routers for observation, based on the determined possible combinations, monitoring the selected edge routers, and determining status of Multi Protocol Label Switching paths in the network based on the monitoring.

Abstract: A method and system for reducing fault analysis times in a network having a plurality of pollable objects. Poll responses are received from pollable objects, priorities are assigned to each received poll response in accordance with one or more of a received poll response value, a pollable object status and a type of pollable object, and the assigned priorities are processed and to determine any fault locations, wherein a pollable object with a higher priority is processed before a second pollable object with a lower priority. A status manager is operable to receive poll responses from one or more of the pollable objects, a status analyzer is operable to assign, in conjunction with one or more analyzers, priorities to each received poll response in accordance with the received poll response value, a pollable object status and a type of pollable object, and analyzers coupled the status analyzer use the assigned priorities and the corresponding received poll responses to determine a fault location.