Network Node De-duplication via MAC Address Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
As networks grow in size and complexity, existing systems struggle to efficiently handle the increasing number of network devices and traffic data, often leading to inefficiencies and overhead due to the inability to recognize nodes with multiple IP address bindings as a single device, resulting in duplicate monitoring of physical nodes.
Innovation Solution
Implementing a node de-duplication logic that discovers and compares IP addresses, MAC addresses, DNS names, and sysnames to identify and eliminate duplicate nodes, using a system of duplicate detectors to determine matches and assign a MatchIndex indicating the likelihood of a match, thereby ensuring each physical node is monitored only once.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network monitoring systems monitor each IP address separately, then comprehensive monitoring coverage is achieved, but duplicate monitoring of physical nodes occurs leading to increased system overhead
Solution Approach 1:
The patent merges multiple IP addresses that belong to the same physical node into a single monitored entity by using MAC addresses as a unifying identifier. This combining approach eliminates duplicate monitoring while preserving comprehensive coverage, as the system recognizes that multiple IP addresses can be associated with a single physical device through their common MAC address.
Solution Approach 2:
The patent creates a virtual representation of physical nodes using MAC addresses as persistent identifiers that remain constant even when IP addresses change. This copying mechanism allows the system to track the true physical node rather than transient IP addresses, reducing overhead from monitoring the same physical device multiple times under different IP addresses.
2Adaptability or versatility
If network monitoring systems track multiple IP addresses for the same physical node, then dynamic IP addressing is supported, but duplicate nodes are created in the monitoring database
Solution Approach 1:
The patent introduces MAC addresses as an intermediary identifier that mediates between dynamic IP addresses and the monitoring database. Instead of directly tracking IP addresses that change frequently, the system uses the stable MAC address as a mediator to represent the physical node, allowing dynamic IP support without creating duplicate node entries for the same physical device.
Solution Approach 2:
The patent performs preliminary de-duplication by comparing MAC addresses before creating new node entries in the monitoring database. This advance checking mechanism prevents duplicate nodes from being created in the first place, rather than detecting and removing duplicates after they have been created, thereby maintaining an accurate count of unique physical nodes.
3Ease of operation
If node identification uses only IP addresses, then simple identification is achieved, but nodes with multiple IP bindings cannot be recognized as single devices
Solution Approach 1:
The patent makes the MAC address a universal identifier that works across multiple IP address bindings and different network configurations. By using MAC addresses as a multi-functional identifier that can represent a physical node regardless of how many IP addresses are assigned to it, the system achieves both simplicity and accuracy in node identification.
Solution Approach 2:
The patent changes the identification parameter from IP address (which is dynamic and can vary) to MAC address (which is stable and persistent). This parameter change fundamentally improves identification accuracy while maintaining operational simplicity, as MAC addresses provide a consistent way to identify physical nodes regardless of IP address changes or multiple bindings.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems, methods, apparatuses, and computer program products for node de-duplication. One method includes discovering, by a network monitoring apparatus, nodes in a network, and collecting a list of internet protocol (IP) addresses, media access control (MAC) addresses, domain name system (DNS) names, and sysnames for each of the nodes discovered in the network. The method may also include comparing the collected list of information for each of the discovered nodes with corresponding information for current nodes and other discovered nodes. The method may then includes determining duplicate nodes that are duplicates of the other discovered nodes and/or the current nodes based on the comparison of the IP addresses, MAC addresses, DNS names, and sysnames.