Software Network Probes for Fault Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network management systems are inadequate for comprehensive fault management as they only handle aspects of monitoring, fail to utilize a broader suite of collection modalities, do not normalize alerts, and do not enrich alerts with device, network, or other information, leading to incomplete information and prolonged fault resolution.
Innovation Solution
Implementing software-based network probes that monitor layer 4 devices across multiple networks, parse and normalize alerts, enrich alert data with device and network information, and send consolidated alert data to a fault management system for user display.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional network management systems only handle passive monitoring and polling, then system simplicity is maintained, but fault management completeness deteriorates
Solution Approach 1:
The patent segments the monitoring function by deploying distributed software-based network probes across multiple networks and layer 4 devices. Each probe independently monitors local devices and generates alerts, which are then centralized at the computing system for normalization and enrichment. This segmentation allows comprehensive monitoring without requiring a single complex centralized system.
Solution Approach 2:
The patent introduces software-based network probes as intermediary components between the monitored layer 4 devices and the central computing system. These probes act as mediators that collect raw alert data from devices, normalize it to a common format, enrich it with additional context, and forward it to the central system. This intermediary layer enables comprehensive fault management while keeping the central system architecture relatively simple.
2Loss of information
If alert data is not normalized and enriched, then data processing speed is maintained, but information completeness deteriorates
Solution Approach 1:
The patent applies preliminary action by normalizing and enriching alert data at the probe level before the data reaches the central computing system. The probes pre-process raw alerts by converting them to a standardized format and adding relevant context information (device details, network topology, historical data). This preliminary processing reduces the workload at the central system and ensures information completeness is achieved before analysis begins, thereby reducing overall fault resolution time.
3Adaptability or versatility
If software-based network probes are implemented across multiple networks, then monitoring coverage is improved, but system complexity increases
Solution Approach 1:
The patent implements universality by designing software-based network probes that can operate across multiple networks and monitor various layer 4 devices (firewalls, load balancers, gateways) using a common architecture. The probes use standardized protocols and data formats that work across different network environments and device types. This multi-functional design enables broad monitoring coverage without requiring separate specialized systems for each network or device type, thereby managing complexity while expanding versatility.
Data Source
AI summary
Novel tools and techniques are provided for implementing software-based network probes for monitoring network devices for fault management. In various embodiments, a computing system may receive, from at least one software-based network probe, a first alert associated with a first device among layer 4 devices disposed in a plurality of networks; may parse and store first alert data from the received first alert in a database, in a standardized format; may perform, using an enrichment system, enrichment of the first alert data, by retrieving first enrichment data from one or more second databases and adding the first enrichment data to the parsed and formatted first alert data in the first database to form first consolidated alert data; and may send the first consolidated alert data to a fault management system for display to a user to facilitate addressing of the first alert by the user.