Packet Flow State Encoding for Network Outage Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems lack effective methods for accurately detecting and analyzing network disruptions in large data networks, particularly in real-time, due to the vast volume of data and complexity of packet flows, making it difficult to track interruptions and present information efficiently.
Innovation Solution
A method and system for detecting and encoding states of packet flows by using sequence numbers and Time-To-Live (TTL) fields to classify packets as stable or not stable, allowing for the automation of outage detection and correlation of network events, reducing data complexity through a state encoding scheme for efficient analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If conventional systems analyze packet flows in large data networks, then network issue detection is performed, but the vast volume of data and complexity of packet flows make real-time analysis difficult
Solution Approach 1:
The patent extracts only the essential features from packet flows (sequence numbers and TTL values) to determine stability states, filtering out unnecessary packet data. This extraction reduces the data volume from billions of complete packets to a simplified state representation, enabling real-time analysis while maintaining detection accuracy.
Solution Approach 2:
The patent transforms complex packet flow data into simplified stability states (stable/unstable) by changing the representation parameters from raw packet attributes to derived state characteristics. This parameter transformation reduces data complexity while preserving the essential information needed for network disruption detection.
2Measurement precision
If packet flows are analyzed to detect network disruptions, then outage detection accuracy is improved, but the time required to process and present information increases
Solution Approach 1:
The patent performs preliminary processing by continuously monitoring sequence numbers and TTL values to determine stability states in advance. This preliminary state determination enables rapid outage detection when disruptions occur, as the system already has the framework in place to quickly identify anomalies without performing complex analysis at the moment of disruption.
Solution Approach 2:
The patent skips through the complex packet flow analysis process by using simplified stability state transitions. Instead of analyzing every packet detail when an outage occurs, the system quickly transitions between stable and unstable states based on pre-established criteria, dramatically reducing the time to detect and present outage information.
3Loss of information
If complete packet data is stored and analyzed, then network issue analysis is comprehensive, but the volume of data makes efficient analysis difficult
Solution Approach 1:
The patent extracts only the necessary information (sequence numbers and TTL values) from complete packet data to determine stability states. This extraction retains the essential information needed for network issue analysis while discarding redundant packet details, reducing data volume from billions of complete packets to a manageable state representation.
Solution Approach 2:
The patent discards unnecessary packet data while recovering and preserving the essential stability state information. By focusing only on the critical attributes (sequence number continuity and TTL consistency), the system maintains analysis completeness while significantly reducing the data volume that needs to be stored and processed.
Data Source
AI summary
A method, device, and program for determining states in a flow of packets are provided. A flow of transmitted packets is received. When the difference between the sequence number of the arriving packet and the next expected sequence number is equal to zero and when the TTL number of the arriving packet is equal to the TTL number of the previous packet, there is a stable state beginning with the first of the consecutively received packets. If a difference between the sequence number of an arriving packet and a next expected sequence number is greater than 1, or TTL of the arriving packet is not equal to the TTL number of the previous packet, there is a not stable state. Time between end of one stable state and start of the next stable state is the hole, and the states and holes correlate to events for analysis of the network.