Abstract: Processing a metric of a component of a SDN can include registering a unique identifier associated with the metric in storage of the SDN.

Abstract: Processing a metric of a component of a SDN can include registering a unique identifier associated with the metric in storage of the SDN.

Abstract: A network interconnect device (NID) includes an interface to receive a configuration data request for the NID. The configuration data request may include data identifiers determined from a data identifier group for the NID, wherein the data identifier group comprises a reference to a parent data identifier group from which the data identifier group inherits data type information, and a data specification which overrides a corresponding data specification in the parent data identifier group. The NID also includes a data storage to store information for the NID and a logic device to retrieve information from the data storage corresponding to the data identifiers and to transmit a message including the retrieved information corresponding to the data identifiers.

Abstract: A network interconnect device (NID) includes an interface to receive a configuration data request for the NID. The configuration data request may include data identifiers determined from a data identifier group for the NID, wherein the data identifier group comprises a reference to a parent data identifier group from which the data identifier group inherits data type information, and a data specification which overrides a corresponding data specification in the parent data identifier group. The NID also includes a data storage to store information for the NID and a logic device to retrieve information from the data storage corresponding to the data identifiers and to transmit a message including the retrieved information corresponding to the data identifiers.

Abstract: Network devices, systems, and methods are described that perform network service monitoring. One method includes examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service, forwarding packet service type information and packet address information to a second network device in response to a determination that the protocol of the packet corresponds to the network service, comparing the packet service type information and an associated service type address to a list of service types and addresses on the second network device, and executing a remedial action if, based on the comparing, it is determined that the network service is an unauthorized service and that a provider of the network service is an unauthorized provider.

Abstract: An embodiment is directed towards a method of abstracting multiple embedded counters from a number of network devices for use in a network monitoring application. The method includes initializing a metacounter for network devices for categories of metacounts. The method further includes, per metacounter, initializing a constituent counter for applicable embedded counters within the respective network device. The constituent counter includes a constituent value. The method further includes updating the constituent value for the constituent counters. The method further includes obtaining a total value corresponding to the metacounters based on the constituent values of respective constituent counters, wherein said total value is used by the network monitoring application.

Abstract: A computer system for and method of requesting networked device information is described. The computer system comprises a processor and a data store. The data store comprises one or more data identifier groups hierarchically specifying data available from one or more networked devices and a data retrieval tool comprising a set of instructions executable by the processor to obtain data from a network device. The data retrieval tool is arranged to request the data from the network device based on a data identifier group.

Abstract: Network devices, systems, and methods are described that perform network service monitoring. One method includes examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service, forwarding packet service type information and packet address information to a second network device in response to a determination that the protocol of the packet corresponds to the network service, comparing the packet service type information and an associated service type address to a list of service types and addresses on the second network device, and executing a remedial action if, based on the comparing, it is determined that the network service is an unauthorized service and that a provider of the network service is an unauthorized provider.

Abstract: Network devices, systems, and methods are described that perform network service monitoring. One method includes examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service, forwarding an event to a second network device in response to a determination that the protocol of the packet corresponds to the network service, determining whether the network service is an authorized service by comparing the network service to a list of network services, and executing a remedial action in response to a determination that the network service is an unauthorized service.

Abstract: A network management station includes a processor, memory coupled to the processor, and computer executable instructions provided to the memory and executable by the processor. The computer executable instructions are configured to transmit a network management message to a network device connected to the network management station over a network, receive response information from the network device based on the network management message, receive unsolicited information from the network device, and apply fuzzy logic to the received information and the unsolicited information to produce information associated with the health of the network device.

Abstract: Network state information and network topology information associated with a network is retrieved and transformed using a meta-language. The transformed data is compared against known network fault patterns to identify a matching network fault signature. The matching network fault signature is used to diagnose potential cause(s) of network problems that resulted in the matched signature.

Abstract: Network devices, systems, and methods are described that perform network service monitoring. One method includes examining a number of packets received by a first network device to determine whether a protocol of a packet corresponds to a given network service, forwarding an event to a second network device in response to a determination that the protocol of the packet corresponds to the network service, determining whether the network service is an authorized service by comparing the network service to a list of network services, and executing a remedial action in response to a determination that the network service is an unauthorized service.

Abstract: Embodiments include applying fuzzy based rules to information associated with various metrics from a network device to produce a variable fuzzy based rule expression. The variable fuzzy based rule expression can then be used as an input parameter to a fuzzy rule based heuristic.

Abstract: Network state information and network topology information associated with a network is retrieved and transformed using a meta-language. The transformed data is compared against known network fault patterns to identify a matching network fault signature. The matching network fault signature is used to diagnose potential cause(s) of network problems that resulted in the matched signature.

Abstract: A computer system for and method of requesting networked device information is described. The computer system comprises a processor and a data store. The data store comprises one or more data identifier groups hierarchically specifying data available from one or more networked devices and a data retrieval tool comprising a set of instructions executable by the processor to obtain data from a network device. The data retrieval tool is arranged to request the data from the network device based on a data identifier group.

Abstract: An embodiment is directed towards a method of abstracting multiple embedded counters from a number of network devices for use in a network monitoring application. The method includes initializing a metacounter for network devices for categories of metacounts. The method further includes, per metacounter, initializing a constituent counter for applicable embedded counters within the respective network device. The constituent counter includes a constituent value. The method further includes updating the constituent value for the constituent counters. The method further includes obtaining a total value corresponding to the metacounters based on the constituent values of respective constituent counters, wherein said total value is used by the network monitoring application.

Abstract: This invention specifies a mechanism that can be used by network management system (“NMS”) applications, running on a single workstation or personal computer, which continuously monitor the flow of traffic on some or all segments of their attached network. The invention enables an application to determine whether enough system resources are available to monitor all segments in the network. If not all of the segments can be monitored, the invention specifies an algorithm that can be used to intelligently select a subset of segments for monitoring. If all of the segments can be monitored the same algorithm may instead be applied to determine which segments should be monitored at a more detailed level than the rest. In effect, this invention will allow one application running on a workstation or personal computer to monitor networks that range in size from one to several thousand segments while consuming a bounded portion of its host system's resources.

Abstract: Methods (as well as apparatus and software that implement the methods) of remote information logging and selective reflections of loggable information are disclosed. One such method comprises: receiving a notice of locally-originated loggable information; determining whether said information satisfies a first criterion; and notifying, if said first criterion is satisfied, a remote logger service of said information. Another such method comprises: receiving multiple instances of remotely-originated loggable information; and making entries in a local log for said multiple instances of remotely-originated loggable information. And yet another such method comprises: providing access to a local log of remotely-originated information; determining whether information corresponding to an entry in said local log satisfies a first criterion; and notifying, if said first criterion is satisfied, a remote service of said information.