Computer Associates Think, Inc.

Ca, Inc.

Concord Communications, Inc.

Bradley S Carey

Lawrence A Stabile

Mark W Sylor

Albert Briner

David William Russo

Matthew Eric Baddeley

Kevin M Jackson

Thomas Allen LaRosa

Jeremiah David Small

Will C Lauer

Jay B Wolf

David L Shepard

A computer-implemented method for detecting alarm conditions, the method involving receiving at a first time a trigger notification describing a monitored occurrence on a network; setting a redundancy window to begin at the first time and to end at an expiration time; designating a first alarm condition to represent the trigger notification; receiving a second notification at a second time after the first time, the second notification describing the monitored occurrence; and determining whether a second alarm condition exists by testing whether the second time is within the redundancy window.

Network fault manager

The network fault manager described herein may include one or more processors configured to detect alarms. For example, the one or more processors may periodically sample rates at which similar events that relate to occurrences on a network arrive, compare the periodically sampled rates to a first threshold, and determine whether a preexisting alarm exists. In response to a number of the periodically sampled rates that exceeded the first threshold within a preceding time window exceeding a second threshold and the preexisting alarm not existing, the one or more processors may assert a first alarm. Otherwise, if the number of periodically sampled rates that exceeded the first threshold within the preceding time window exceeds the second threshold but the preexisting alarm does exist, the one or more processors may maintain the preexisting alarm for a predetermined time period.

The network fault manager described herein may generate an alarm data table having various columns and rows respectively corresponding to different alarm data fields and different alarms. The alarm data table may be associated with a primary key that includes a subset of the different data fields in the multiple columns to uniquely represent the different alarms in the multiple rows. In response to removing one or more of the different alarm data fields in the subset from the primary key, the primary key may non-uniquely represent the different alarms in a plurality of the multiple rows. Thus, the alarm data table may be collapsed to combine the different alarms non-uniquely represented in the plurality of the multiple rows into one combined row uniquely representing the different alarms, whereby the collapsed alarm data table may replace the plurality of the multiple rows with the combined row.

Network fault manager for maintaining alarm conditions

A method of merging a list of newly found network elements and a list of previously known network elements includes arranging the newly found network elements in a hierarchical structure, and determining one or more device matches between each network device in the list of newly found network elements and one or more network devices in the list of previously known network elements. The method further includes, for each of the one or more device matches, determining one or more network element matches between the newly found network element and the corresponding previously stored network device. The method also includes updating the previously found network device corresponding to each of the one or more device matches with the corresponding newly found network device.

Discovering and merging network information

A method for collecting and reporting monitored data for network traffic, which has been accumulated by a plurality of remote probes. The method includes making a series of polling requests for lists of monitoring data to each probe and receiving the requested lists. Each list has traffic count values that are identified by at least a sampling time, a source address, a destination address and a probe identifier. The method also includes calculating the traffic observed by each probe between successive sampling times and apportioning the calculated traffic data among a single set of consecutive temporal intervals and selecting best counts to avoid overcounting.

Growing community of inventors

Wrentham, MA, United States of America

Bradley S Carey