KR20090034060A - Storage medium recording traffic management system, method and method program - Google Patents

Abstract

The present invention relates to a storage medium for recording a traffic management system, method and method program. According to the present invention, traffic data may be collected from network equipment, and the collected traffic data may be summed with previously collected data to calculate a cumulative average, and a threshold may be set based on the calculated cumulative average value to manage traffic.

Therefore, thresholds can be automatically applied to each device and port based on the cumulative average of the traffic generated in the network, so that it is possible to respond to the change of traffic more quickly and more efficiently than the conventional threshold management method. have.

Description

Storage medium recording traffic management system, method and method program {SYSTEM AND METHOD FOR TRAFFIC MANAGEMENT, STORAGE MEDIUM RECORDING THAT METHO PROGRAM}

The present invention relates to a recording medium for a traffic management system, method and method program. More particularly, the present invention relates to a traffic management system, method and method program for managing network conditions by analyzing traffic data collected from various network devices. It is about.

Currently, network operators provide various services using large networks. Accordingly, various network operation systems (Network Management System, NMS) are being operated to secure network viability and operation management. Recently, as the number of services provided through a network increases, real-time traffic management becomes more and more important in network management.

As shown in FIG. 1, in the past, most traffic patterns had similar waveforms, and one pattern was applicable to almost all links. However, as network networks such as the Internet have spread, various traffic characteristics have appeared according to the characteristics of subscribers to use the links between networks.

2 shows an example of various traffic patterns for each link in an IP network. That is, since the traffic characteristics are very different depending on the use purpose and type of each link, it is necessary to generate a threshold reflecting the characteristics of each link for effective traffic management, and apply the management to each link. Therefore, conventionally, traffic patterns have been managed through a fixed threshold management method or a variable threshold management method.

As shown in FIG. 3, the fixed threshold management method collects traffic data for a certain period from all links to obtain an average value, and sets and manages a reference threshold and an allowable variation range based on the average value.

While fixed threshold management is quite convenient in setting and managing thresholds, alerts can only be triggered if traffic exceeds or falls below a fixed managed threshold. As a result, the fixed threshold management method has difficulty in accurately reflecting the characteristics of the pattern of each time zone for each link.

4 is a diagram illustrating a variable threshold management method. That is, the variable threshold management method generates a threshold by reflecting a traffic pattern for each link every designated update period (generally one day). That is, compared to the fixed threshold management method, since the traffic occurrence pattern for each link is well reflected, it is possible to provide a flexible threshold for traffic fluctuations.

However, in order to generate a variable threshold, it is necessary to calculate a management threshold using a separate threshold generation processor, and as a result of shortening the threshold pattern period for applying to actual traffic, a large amount of computer resources are consumed. In addition, when the traffic value of a specific link is zero, it is determined in real time whether the traffic is blocked due to a failure or whether the traffic of the corresponding time zone is zero due to the characteristics of the link. It was difficult to do.

Therefore, the technical problem to be achieved by the present invention is to be able to flexibly reflect the traffic pattern for each link to manage the traffic.

In addition, the technical problem to be achieved by the present invention is to enable the efficient use of computer resources to calculate the management threshold and to manage the traffic.

Traffic management system according to an embodiment of the present invention, the traffic data collected from the network equipment to calculate the cumulative average by adding the previously collected data, and sets a threshold based on the calculated cumulative average value traffic to manage the traffic data Management server; And a traffic database storing the traffic data collected from the traffic management server.

In addition, the traffic management method according to an embodiment of the present invention, a) collecting traffic data from the network equipment; And b) summing the collected traffic data with previously collected data to calculate a cumulative average, and setting a threshold based on the calculated cumulative average value to manage traffic.

In addition, the storage medium according to an embodiment of the present invention is a storage medium that records a program for executing the method on a computer.

Therefore, according to the present invention, the thresholds can be automatically applied to each device and port based on the cumulative average of the traffic generated in the network, so that the change of traffic is more efficiently compared to the conventional threshold management method. You can respond quickly. As a result, it is possible to accurately determine whether the current traffic condition is abnormal or not with respect to the drastic change in traffic, and effectively improve network operability and service quality.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. As those skilled in the art would realize, the described embodiments may be modified in various different ways, all without departing from the spirit or scope of the present invention. In the drawings, parts irrelevant to the description are omitted for simplicity of explanation, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise. In addition, the terms "... unit", "... group", "module", etc. described in the specification mean a unit that processes at least one function or operation, which is hardware or software or a combination of hardware and software. Can be implemented.

Now, the present invention will be described in detail with reference to the accompanying drawings.

5 is a diagram illustrating a traffic management system 100 connected to a network according to an embodiment of the present invention.

As shown, the traffic management system 100 may collect traffic data from the network equipment through an interface protocol. The traffic management system 100 may collect and store traffic data from network equipment by using various interface protocols such as CORBA, SNMP, and CLI, and manage the presence or absence of a current traffic pattern based on a set threshold.

More specifically, the traffic management system 100 may include a traffic management server 110 and a traffic database 120.

The traffic management server 110 may collect traffic data from network equipment using an interface protocol, calculate the cumulative average by setting the collected data with previously collected data, and set a threshold.

The traffic database 120 may store traffic data collected from the traffic management server 110, store traffic history information over time, and store cumulative average values and threshold information of the traffic data.

More detailed information about the traffic management server 110 and the traffic database 120 will be described later.

As shown in FIG. 6, the traffic management server 110 includes a data collection module 111, a data processing module 113, a cumulative average processing module 115, a threshold setting module 117, and an alarm detection module 119. And a display module.

The data collection module 111 may collect various traffic data using various communication protocols such as SNMP, CLI, and CORBA from various network equipment.

The data processing module 113 may classify the data collected from the data collection module 111 for each device or port and store the data in the traffic database 120. In addition, the data processing module 113 may classify and store data collected from the data collection module 111 by day and time zone for each device or port, and store traffic history information according to the passage of time through the traffic database 120. ) Can be stored.

The cumulative average processing module 115 may calculate the average value by summing the collected traffic data and the traffic data of the same time zone or the same day collected before, and store the calculated average value in the traffic database 120.

The threshold setting module 117 may set a reference threshold based on the cumulative average value, and set an upper limit value and a lower limit management value based on an input or preset tolerance value input from a user, or allow the maximum variation value without setting an upper / lower limit management value. Only can be set.

In addition, the threshold setting module 117 may set an upper limit and a lower limit management value by applying different allowable variation widths according to the grade of the traffic management level, or may set only the allowable variation width value.

In addition, the threshold setting module 117 may store a reference threshold, an upper limit, and a lower limit management value applicable to each device or each port in the same day or the same time zone in the traffic database 120.

The alarm detection module 119 may analyze the collected traffic data and determine whether the alarm detection module 119 falls within the allowable variation range from the reference threshold by comparing with the threshold of the corresponding time zone or the corresponding day of the week.

The alarm detection module 119 may display an alarm when the allowable variation is exceeded and discard the corresponding data when the allowable variation is not exceeded.

The display module 118 may allow the alarm to be visually represented through the screen, and may provide the alarm through sound.

Meanwhile, the traffic database 120 may include a traffic data database 121, a traffic history database 123, a cumulative average traffic database 125, and a threshold setting history database 127.

The traffic data database 121 may store the collected traffic data. In particular, the traffic data database 121 may classify and store traffic data for each device or port for each day or time zone.

The traffic history database 123 may store traffic information over time.

The cumulative average traffic database 125 may store and update the cumulative average value of the traffic data for each device or port by day or time zone.

The threshold setting history database 127 may store the reference threshold information set based on the cumulative average value, and store the allowable fluctuation range, the upper limit, and the lower limit management value from the reference threshold.

In addition, the threshold setting history database 127 may store allowable fluctuation range, upper limit, and lower limit management value information respectively set according to the traffic management class.

7 is a diagram illustrating a threshold setting method according to an embodiment of the present invention.

The data collection module 111 may collect traffic data from various network equipment through the interface protocol (S100).

Next, the data processing module 113 may classify the data collected from the data collection module 111 by device or port, and classify and store data by day of the week and time zone for each device or port (S110). S120).

The cumulative average processing module 115 may calculate the average value by summing the collected traffic data and the traffic data of the same time zone or the same day collected before, and store the calculated average value in the traffic database 120 (S130). .

At this time, the cumulative average processing module 115 may calculate a new cumulative average value by summing the average value of traffic collected in the same time zone or the same day of the week and the collected traffic data.

In addition, the threshold setting module 117 may set a reference threshold based on the cumulative average value, and may set an upper limit value and a lower limit management value or set an allowable variation width value only based on an allowable variation value input or preset by a user ( S140).

In this case, the threshold setting module 117 may use the cumulative average value itself as a reference threshold, and may use the average value of previously collected traffic data and the weight of the current traffic data value as reference thresholds.

Alternatively, the threshold setting module 117 may derive a reference threshold by calculating a predetermined formula using the cumulative average value as an input variable.

The threshold setting module 117 may set an upper limit and a lower limit management value by applying different allowable variation widths according to the grade of the traffic management level, or may set only the allowable variation width value.

For example, the higher the management grade, the narrower the allowable variation from the reference threshold, and the lower the management grade, the larger the allowable variation from the reference threshold.

Alternatively, the threshold setting module 117 may set different management classes according to the extent to which the allowable variation range is exceeded, so that the alarm detection module 119 may display corresponding alarms.

For example, depending on the degree to which the current traffic data exceeds the allowable fluctuation range, it may be divided into critical, major, minor, and wearing states.

8 is a diagram illustrating a method of managing traffic through a threshold set according to an embodiment of the present invention.

First, when the data collection module 111 collects traffic data from various network equipment through the interface protocol, the alarm detection module 119 may analyze the collected traffic data (S200 and S210).

The alarm detection module 119 may determine whether the collected traffic data falls within the allowable variation range from the reference threshold by comparing with the threshold of the corresponding time zone or the day of the week.

The alarm detection module 119 may display an alarm when the allowable variation is exceeded, and may display an alarm state differently according to a preset level.

For example, it may be divided into critical, major, minor, and wearing according to the allowable variation exceeding degree (S220, S230, S240, S250, S260, S260, S270).

The alarm detection module 119 may discard the corresponding data when the collected traffic data does not exceed the allowed variation (S280).

That is, as shown in FIG. 9, the traffic management system 100 according to an embodiment of the present invention may set a reference threshold based on the cumulative average data, and generate an alarm when the allowable variation is exceeded from the reference threshold. have.

That is, according to the present invention, since the collected and stored data is used for traffic management, a separate processor for generating a threshold value is not required, thereby saving computer resources.

In addition, since the average value accumulated for traffic occurrences of the same day and the same time period over a long period of time is used, accurate traffic patterns can be applied.

Therefore, even if the traffic is suddenly increased or decreased, it is possible to accurately determine whether the current traffic pattern is normal or abnormal compared to the usual traffic pattern, and even if the traffic is measured as zero, blocking traffic due to a failure Perception It is possible to make an accurate determination of whether the traffic in this time zone is zero, which makes the traffic management efficiency much higher.

What has been described above is only an embodiment of the present invention, and the scope of the present invention is not limited thereto, and various modifications can be made to those skilled in the art. For example, the servers constituting the traffic management system and the modules constituting each server may be additionally configured or merged according to their function. The scope of the present invention will include the description of the claims to be described later and all technical elements recognized as equivalents thereof.

1 is an example of a traffic pattern in a PSTN.

2 is an example of various traffic patterns for each link in an IP network.

3 is a diagram illustrating a method of managing traffic by setting a fixed threshold.

4 is a diagram illustrating a method of managing traffic by setting a variable threshold.

5 is a diagram illustrating a traffic management system connected to a network according to an embodiment of the present invention.

6 is a block diagram of a traffic management server and a traffic database according to an embodiment of the present invention.

7 is a diagram illustrating a threshold setting method according to an embodiment of the present invention.

8 is a diagram illustrating a method of managing traffic through a threshold set according to an embodiment of the present invention.

9 is a diagram illustrating a method for managing traffic by setting a threshold using a cumulative average according to an embodiment of the present invention.

Claims (11)

In a traffic management system, A traffic management server summing traffic data collected from network equipment with previously collected data to calculate a cumulative average, and setting a threshold based on the calculated cumulative average value to manage traffic data; And It includes a traffic database for storing the traffic data collected from the traffic management server Traffic management system. The method of claim 1, The traffic management server, An alarm is generated when the allowable variation is exceeded based on the reference threshold based on the cumulative average value and the allowable variation from the reference threshold. Traffic management system. The method of claim 2, The traffic management server, A data collection module for collecting traffic data from network equipment using an interface protocol; A data processing module for classifying the data collected from the data collection module by device or by port, and classifying and storing each device or port by time zone or day of the week; A cumulative average processing module that calculates a cumulative average value by summing traffic data collected for each device or port and traffic data of the same time zone or the same day collected previously; A threshold setting module for setting a reference threshold based on the cumulative average value, and setting an allowable variation range from the reference threshold; And An alarm detection module for displaying an alarm if the permissible variation from the reference threshold is exceeded; Traffic management system. The method of claim 3, The threshold setting module Depending on how far the permissible variation is exceeded, you can set different control levels The alarm detection module If the permissible fluctuation is exceeded, an alarm indication for each control class is provided. Traffic management system. The method according to claim 1, wherein The traffic database, A traffic data database for classifying and storing the collected traffic data for each device or port by day or time zone; A traffic history database for storing traffic history information; Cumulative average traffic database for storing the cumulative average traffic value of each day or time for each device or port; And A threshold setting history database for storing reference threshold information set based on a cumulative mean value; Traffic management system. In the traffic management method, a) collecting traffic data from network equipment; And b) summing the collected traffic data with previously collected data to calculate a cumulative average, and setting a threshold based on the calculated cumulative average value to manage the traffic. How to manage traffic. The method of claim 6, Step b), And generating an alert if the current traffic data exceeds the allowable variation based on the reference threshold based on the cumulative mean value and the allowable variation from the reference threshold. How to manage traffic. The method of claim 6, Step a) is Classifying the collected data by device or port, and storing the data by classifying each device or port by time zone or day of the week. How to manage traffic. The method of claim 8, Step b), b-1) calculating a cumulative average value by summing traffic data collected for each device or port and traffic data collected in the same time zone or day of the week previously collected; b-2) setting a reference threshold based on the cumulative average value and setting an allowable variation width from the reference threshold; b-3) displaying an alarm if the permissible variation is exceeded. How to manage traffic. The method of claim 9, Step b-3), Displaying a management class alarm that is set differently depending on the degree to which the allowable variation is exceeded. How to manage traffic. A storage medium having recorded thereon a program for executing a method according to any one of claims 6 to 10 on a computer.

Images