JP2000092056A - Selective and automatic finding method in network monitoring - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a selective and automatic finding method in network monitoring capable of finding only for a required monitor object. SOLUTION: The finding conditions of 'monitor object 1'-'monitor object 7' are stored in the data base 201 of a monitor origin, the monitor origin refers to internal information and finds the 'monitor object 1', and when the finding condition matches the 'monitor object 1', the monitor origin stores monitor object information in the data base 201 and simultaneously finds new 'monitor object 2' and 'monitor object 3' from the internal information. When the respective finding conditions for the 'monitor object 2' and the 'monitor object 3' do not match, the new 'monitor object 4', 'monitor object 5≈, 'monitor object 6' and 'monitor object 7' corresponding to the respective 'monitor object 2' and 'monitor object 3' are found from the internal information next and the finding operation of a new monitor object from the internal information is repeated until no more monitor object is found.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention automatically selects a specific monitoring target from among a plurality of monitoring targets such as a manufacturing company and its manufacturing model to be monitored in a large-scale network environment. The present invention relates to a selective automatic discovery method in network monitoring that enables narrowing down discovery.

2. Description of the Related Art Conventionally, when monitoring a network in a large-scale network environment, it is almost impossible to monitor all devices in the network because the number of monitoring measures is too large. In addition, the number of devices that are not to be monitored (such as user terminals) are often far more than the devices that should be monitored. If automatic discovery is performed in such a state, a heavy load is imposed on the operator merely by extracting devices to be really monitored.

[0003] Here, a conventional method of discovering a network monitoring object will be outlined. FIG. 6 is an explanatory diagram for explaining a conventional network monitoring target discovery method. This figure 6
In many network monitoring packages now,
A new monitoring target is discovered by referring to an ARP (Address Resolution Protocol) table and a routing table (hereinafter referred to as internal information) of the monitoring target, and information of all newly detected monitoring targets is referenced there. Then, a new monitoring target is discovered, and the monitoring target is discovered one after another and stored in the database.

[0006] That is, FIG. 6 illustrates a state in which all the monitoring targets are found one after another.
First, “monitoring target 1”, “monitoring target 2”, “monitoring target 3”... “Monitoring target 7” are stored in internal information (not shown). The case where the model A is selected will be described. In this case, monitoring source 1
00 finds “monitoring target 1” in the database 101 in step S1 with reference to the internal information.

[0005] The "monitoring target 1" found by this monitoring source 10
0 is stored in the database 101, and the monitoring source 100 refers to the internal information of “monitoring target 1” for “monitoring target 1”, and the manufacturer A,
A model A is found in step S2, and “monitoring target 2” and “monitoring target 3” corresponding to the discovery are found. The monitoring source 100 stores the discovered “monitoring target 2” and “monitoring target 3” in the database 101.

Next, in step S3, the monitoring source 100 refers to the found internal information of the "monitoring target 2" in the same manner as in step S1, and in step S4, the internal information of "monitoring information 2" (manufacturing information). Company B, model B)
“Monitoring object 4” and “monitoring object 5” are found from the internal information. In the same way, the monitoring source 100 finds the internal information of the “monitoring target 3” (manufacturing company A,
With reference to the model C), “monitoring target 6” in step S6,
"Monitoring object 7" is found. The discovered “monitoring target 6” and “monitoring target 7” are stored in the database 101 by the monitoring source 100.

Next, regarding the "monitoring object 4" found in step S4, the monitoring source 10 is found in step S7.
0 indicates that the manufacturing company B and the model B corresponding to “monitoring target 2” are not found even if the internal information is referred to, and the internal information for “monitoring target 4” is not found. The information is the manufacturer B and the model D, and the monitoring source 100 ends the automatic discovery processing for “monitoring target 4”, assuming that there is no internal information. In the same manner as to the "monitoring target 5" found in step S4, the monitoring source 100 in step S8 refers to the internal information of the manufacturer B and the model B corresponding to "monitoring target 2" by referring to the internal information. No information was found,
Internal information for “Monitoring target 5” is manufacturer A, model C
Therefore, the monitoring source 100 ends the automatic discovery process for “monitoring target 5”, assuming that there is no internal information for “monitoring target 5”.

Further, with respect to “monitoring target 6” found in step 6, the monitoring source 100 refers to the internal information in step S9, and the manufacturer 100 of the internal information corresponding to “monitoring target 3”, Although the model C is not found, the internal information for the “monitoring target 6” is the manufacturer A and the model A, which are to be discovered, and the monitoring source 10 stores the manufacturer A, The model A is stored. In exactly the same way, regarding “monitoring target 7” found in step 6, the monitoring source 100
Indicates that the manufacturer A and model C, which are the internal information corresponding to “monitoring target 3”, are not found, the internal information for “monitoring target 7” is the manufacturer A and model C, and no internal information exists. The monitoring source 100 ends the automatic discovery processing for “monitoring target 7”.

As described above, after all, steps S1 to S10
In the series of processes, the monitoring targets to be discovered are “monitoring target 1” and “monitoring target 6”, and other “monitoring targets 2” to “monitoring target 5” and “monitoring target 7” should not be discovered. These are monitoring targets, all of which are also found and stored in the database 101. In the conventional network monitoring package, all the monitoring targets that can be found are found.

[0010]

However, in such a conventional network monitoring package, if it is desired to monitor only some of the monitoring targets, all the monitoring targets, "monitoring target 1" to "monitoring target 7" Is detected by the monitoring source 100 with reference to the internal information and stored in the database 101, and then unnecessary monitoring targets “monitoring target 2” to “monitoring target 5” and “monitoring target 7” are deleted. Work was required.

Therefore, various so-called network management tools for improving the efficiency of network management work have been developed. For example, Japanese Patent Application Laid-Open No. 08-256165 discloses that in order to easily monitor any network, a plurality of nodes having a function of monitoring the operation state of the own node are connected to a transmission line and one or more nodes are connected. Each node collects the operation status monitoring information of the other nodes based on the network configuration information of the network to which the own node is connected, and generates and manages the network monitoring information including the own node. It is disclosed that by connecting to any one of them, network monitoring information is acquired from a connection node, developed into the network configuration information, and output.

[0012] However, in such a conventional example, there is no disclosure of a technical idea on finding only necessary monitoring targets and finding only unnecessary monitoring targets. As described above, when monitoring a network in a conventional large-scale network environment, it is difficult to find only necessary monitoring targets, and after discovering all monitoring targets, it is inevitable to delete unnecessary monitoring targets. Efficient and very inefficient. In addition, after all the monitoring targets are found, it is necessary to delete the monitoring targets unnecessarily, but it is unavoidable that this deletion often occurs. Along with this, there are problems such as generation of unnecessary monitoring traffic and hindering reduction of network load.

[0013] The present invention has been made to solve the above-mentioned conventional problems, and can find only necessary monitoring targets.
A network that can prevent unnecessary monitoring targets from being forgotten to be deleted, prevent unnecessary monitoring traffic from occurring, reduce network load, and process required monitoring target information in a short time. An object of the present invention is to provide a selective automatic discovery method in monitoring.

[0014]

In order to achieve the above object, a selective automatic discovery method in network monitoring according to the present invention comprises a first step of inputting a discovery condition of a monitoring target from a monitoring source to a database; A second step of finding the monitoring target with reference to the internal information of the target, and confirming whether the detected monitoring target matches the discovery condition;
At the time of confirming the coincidence of the discovery conditions of the discovered monitoring target, the monitoring target information of the monitoring target for which the discovery condition is confirmed is stored in the monitoring source database, and at the same time, a new discovery target is detected from the internal information of the monitoring target. A third step of discovering a monitoring target to be monitored, and monitoring whether or not the discovery conditions of the monitoring target to be newly discovered coincide with each other. Is obtained, the information of the finally discovered monitoring target is stored in the database by repeatedly monitoring the presence or absence of the matching of the monitoring target discovery condition until no new monitoring target is discovered from the information. And four steps.

According to the present invention, in the first step, the monitoring source stores the monitoring target discovery condition in the database. Second
In the step, the monitoring source finds the monitoring target while referring to the internal information of the monitoring target. It is checked whether the discovered monitoring target matches the discovery condition. When it is confirmed that the discovered monitoring target matches the discovery condition, the third
In the step, the monitoring target information of the monitoring target that matches the discovery condition is stored in the monitoring source database, and a new monitoring target to be discovered is found from the internal information of the monitoring target. Next, in the fourth step, the presence or absence of a match of the discovery condition of the new monitoring target is monitored. As a result of the monitoring, when information on a new monitoring target is obtained at the time of detecting a match of the discovery condition, the monitoring conditions for the monitoring target are not changed until further new monitoring target cannot be obtained from the new monitoring target information. Continue to monitor for matches. By continuing the monitoring, the information of the monitoring target finally found is stored in the database by the monitoring source.

Therefore, according to the present invention, only necessary monitoring targets can be found, unnecessary monitoring targets can be forgotten to be deleted, and unnecessary monitoring traffic can be prevented. Thus, network load can be reduced and necessary monitoring target information can be reduced. Can be processed in a short time.

[0017]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of a selective automatic discovery method in network monitoring according to the present invention will be described below with reference to the drawings. FIGS. 1 to 5 are explanatory diagrams for explaining a processing procedure of the first embodiment according to the present invention. More specifically, FIG. 1 is an explanatory diagram of an example of selective automatic discovery of a monitoring target. is there. 2 is an explanatory diagram of condition input of a monitoring target, FIG. 3 is an explanatory diagram of a discovery of a first monitoring target, FIG. 4 is an explanatory diagram of a discovery of a monitoring target, and FIG. 5 is an explanatory diagram of a result of the discovery of a monitoring target. It is.

In FIGS. 1 to 5, the same step numbers are entered by performing the same processing. This first
In the embodiment, by narrowing down monitoring targets to be discovered, only necessary monitoring targets can be found. First, as shown in FIG. 1 showing an example of selective automatic discovery of a monitoring target, for example, a case where a monitoring target manufacturer wants to discover only a monitoring target of A and a model of A will be described. In this case, as shown in FIG. 2, first, as a discovery condition of each of “monitoring target 1” to “monitoring target 7,” a manufacturer A and a model A are determined for “monitoring target 1” in step S11. 200 is Step S
12 and is stored in the database 201 of the monitoring source 200.

In the same manner, the monitoring source 200 stores the discovery condition of “monitoring target 2” as the manufacturer B and the model B in the database 201 in step S13. The monitoring source 200 stores the discovery condition of the “monitoring target 3” in the database 201 in step S14 with the manufacturer A and the model C set. Assuming that the discovery condition of “monitoring target 4” is the manufacturer B and the model D, the monitoring source 200
01 is stored. The monitoring source 200 stores the discovery condition of the “monitoring target 5” in the database 201 in step S16 as the manufacturer A and the model C. The monitoring source 200 stores the discovery condition of “monitoring target 6” in the database 201 in step S17 as the manufacturing company A and the model A. Assuming that the discovery condition of “monitoring target 7” is manufacturer A and model C, monitoring source 2
00 is stored in the database 201 in step S18.

Next, in this way, the database 20
In a state where the respective discovery conditions of “monitoring target 1” to “monitoring target 7” are stored in No. 1, the monitoring source 200 shifts to a process step of automatically discovering the monitoring target and collating the discovery conditions. In this case, first, as shown in FIG. 1, in step S19, the monitoring source 200 refers to the internal information and in step S20, "monitoring target 1" in the same manner as in the conventional example shown in FIG. To discover. The manufacturer A and the model A which are the discovery conditions for the discovered “monitoring target 1” are monitored by the monitoring source 200.
Searches the database 201 to confirm whether or not the finding conditions match.

As a result of this check, since the discovery condition for “monitoring target 1” is the manufacturer A and the model A, the monitoring source 200 determines that “monitoring target 1” matches the discovery condition, and The source 200 stores the name of the “monitoring target 1” and the like (hereinafter referred to as “monitoring target information”) in step S shown in FIG.
At 21, it is stored in the database 201 of the monitoring source 200.
At the same time, a new monitoring target is discovered from the internal information in step S20 shown in FIG. In this case, the “monitoring target 1” has been found, and this “monitoring target 1”
Then, information of “monitoring target 2” and “monitoring target 3” is newly obtained.

Next, it is confirmed whether or not the newly discovered “monitoring target 2” and “monitoring target 3” respectively match the discovery conditions. That is, step S21
In, it is confirmed whether or not it matches the discovery condition for the discovered “monitoring target 2”. In this case, the discovery conditions to be discovered are manufacturer A and model A, and "monitoring target 2"
Is the manufacturing company B and the model B stored in the database 201, and therefore, the step S2
The monitoring source 200 determines that the “monitoring target 2” does not match the discovery condition as a result of the matching check processing in step 1.

As described above, when it is determined that “monitoring target 2” does not match the discovery condition, the monitoring source 200 transfers the monitoring target information (name, etc.) of “monitoring target 2” to the database 201. do not do. As a result, this unnecessary "monitoring target 2" is eventually deleted from the database.

Similarly, it is determined whether or not the condition matches the discovery condition for the discovered "monitoring target 3" in step S2.
Perform at 0. In this case, the discovery conditions to be discovered are the manufacturer A and the model A, and the discovery condition of the “monitoring target 3” is the manufacturer A and the model C stored in the database 201.
Therefore, the monitoring source 200 determines that “monitoring target 3” does not match the discovery condition as a result of the confirmation by the coincidence confirmation processing in step S23.

As described above, when it is determined that “monitoring target 3” does not match the discovery condition, the monitoring source 200 transfers the monitoring target information (name, etc.) of “monitoring target 3” to the database 201. do not do. Therefore, also in this case, similarly to the case of the “monitoring target 2”, as a result, this unnecessary “monitoring target 3” is not stored in the database, and unnecessary monitoring traffic is accordingly generated. Will be prevented.

Next, in step S22, new information on "monitoring target 4" and "monitoring target 5" is obtained from the internal information corresponding to the discovered "monitoring target 2". Similarly, information of “monitoring target 6” and “monitoring target 7” is newly obtained from the internal information corresponding to “monitoring target 3” in step S24. Of the "monitoring target 4" and "monitoring target 5" obtained in step S22, for "monitoring target 4", it is determined whether or not the discovery condition for "monitoring target 4" matches in step S25. I do.

The discovery conditions for “monitoring target 4” are manufacturer B and model D. The discovery conditions for the monitoring targets to be discovered are manufacturer A and model A, whereas the discovery condition is manufacturer B and model A. Since this is the model D, this step S25
The monitoring source 200 determines that “monitoring target 4” does not match the discovery condition as a result of the confirmation by the coincidence confirmation processing in (1). As described above, when it is determined that “monitoring target 4” does not match the discovery condition, the monitoring source 200 does not transfer the monitoring target information of “monitoring target 4” to the database 201.
Therefore, similarly to the case of the “monitoring target 2”, unnecessary monitoring traffic is prevented from being generated.

Next, the process proceeds to step S26,
Similarly to the process for the “monitoring target 4”, the discovery conditions for the “monitoring target 5” are the manufacturer A and the model C, and the discovery conditions for the monitoring target to be discovered are the manufacturer A and the model A. On the other hand, since the discovery condition for “monitoring target 5” is the manufacturer A and the model C, this step S
The monitoring source 200 determines that “monitoring target 5” does not match the discovery condition as a result of the confirmation by the coincidence confirmation processing in 26. As described above, when it is determined that “monitoring target 5” does not match the discovery condition, the monitoring source 200
01, the monitoring target information of “monitoring target 5” is not transferred. Therefore, in this case, similarly to the case of the “monitoring target 4”, unnecessary monitoring traffic is prevented from being generated.

Next, among the new "monitoring targets 6" and "monitoring targets 7" obtained in step S24, "monitoring target 6" is found in step S27 for "monitoring target 6". Check whether the conditions are met. The discovery conditions for the “monitoring target 6” are the manufacturer A and the model A, and the discovery conditions for the monitoring target to be discovered match those of the manufacturer A and the model A. Therefore, the monitoring source 200
It is confirmed that the “monitoring target 6” matches the discovery condition, and the monitoring source 200 stores the monitoring target information for “monitoring target 6” in the database 201.

Further, for the processing relating to “monitoring target 7”, the processing shifts to the processing of step S28, and in the same manner as the processing for “monitoring target 5”, the discovery condition for “monitoring target 7” is A, model C, and the discovery condition of the monitoring target to be discovered is manufacturer A, model A, whereas the discovery condition of “monitoring target 7” is manufacturer A, model C.
Therefore, the monitoring source 200 determines that “monitoring target 7” does not match the discovery condition as a result of the confirmation by the coincidence confirmation processing in step S28. As described above, when it is determined that the “monitoring target 7” does not match the discovery condition,
The monitoring source 200 does not transfer the monitoring target information of “monitoring target 7” to the database 201. Therefore, in this case, similarly to the case of the “monitoring target 5”, unnecessary monitoring traffic is prevented from being generated.

As described above, "monitoring targets 1" to "monitoring targets 7" are sequentially discovered, and the above series of processing is repeated until no new monitoring targets are discovered. As shown in FIG. 5, the monitoring target information of only “monitoring target 1” and “monitoring target 6” whose monitoring targets match the discovery condition is stored in the database 201.

[0032]

As described above, according to the present invention, the monitoring conditions are stored in the database, the monitoring source discovers the monitoring target while referring to the internal information of the monitoring target, and the monitoring target is found. When the discovery conditions match, the monitoring target information of the monitoring target is stored in the database, the new monitoring target information is obtained from the internal information of the monitoring target, and monitoring is performed until new monitoring target information can no longer be obtained. Since the presence or absence of the matching of the target discovery condition is continuously monitored, the following effects are obtained. (1). By discovering only the necessary monitoring targets and storing them in the database, you can forget to delete unnecessary monitoring targets,
This can prevent unnecessary monitoring traffic from being generated. (2). At the time of executing the automatic discovery processing, only necessary monitoring target information is sent to the monitoring source, so that the network load can be reduced. (3). Since unnecessary monitoring target information is not sent to the monitoring source, necessary monitoring target information can be acquired in a short time.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram of selective automatic discovery of a monitoring target for explaining a selective automatic discovery method in network monitoring of the present invention.

FIG. 2 is an explanatory diagram of condition input of a monitoring target for explaining a selective automatic discovery method in network monitoring according to the present invention.

FIG. 3 is an explanatory diagram of the first discovery of a monitoring target for explaining a selective automatic discovery method in network monitoring according to the present invention.

FIG. 4 is an explanatory diagram of discovery of a monitoring target for explaining a selective automatic discovery method in network monitoring of the present invention.

FIG. 5 is an explanatory diagram of a result of monitoring target discovery for explaining a selective automatic discovery method in network monitoring according to the present invention.

FIG. 6 is an explanatory diagram of automatic monitoring target rabbit detection by a conventional network monitoring target detection method.

[Description of Signs] 200: monitoring source, 201: database, S21 to S21
S28: Step.

Claims (6)

[Claims] 1. A first step of inputting a condition for discovering a monitoring target from a monitoring source to a database, finding the monitoring target by referring to internal information of the monitoring target, and matching the discovery condition of the discovered monitoring target. Checking the presence / absence of the monitoring target, storing the monitoring target information of the monitoring target in which the matching of the finding conditions is confirmed in the matching of the finding conditions of the discovered monitoring target in the monitoring source database, and A third step of finding a monitoring target to be a new discovery target from the internal information of the target; monitoring whether or not the discovery conditions of the monitoring target to be the new discovery target match; When new monitoring target information is obtained when a match is detected, monitoring for the matching of the monitoring target discovery conditions is continued until the new monitoring target is no longer found from that information. A fourth step of repeatedly storing the information of the monitoring target finally found in the database. 2. The method according to claim 1, wherein the internal information is based on an ARP table to be monitored. 3. The method according to claim 1, wherein the internal information is based on a routing table to be monitored. 4. The selective automatic discovery method in network monitoring according to claim 1, wherein the discovery condition is the monitoring target manufacturer and its model. 5. The method according to claim 1, wherein the monitoring target information is a name of the monitoring target. 6. The method according to claim 1, wherein the detected monitoring target is not sent to the monitoring source if the monitoring target does not match the discovery condition.