Cisco Technology, Inc.

Sundar Ramakrishnan

Krishna Sathyanarayana

Preetham Kajekar

Varakuti Venugopal Reddy

Ganesh Krishnamurthy Bangalore

Prashant Anand

Dharmarajan Subramanian

Parthibhan Paramaguru

Vasudevan Visvanathan

Rohit Kumar Gupta

Abhishek Chaudhary

Techniques for use in network incident identification are described. In response to an occurrence of an unknown network incident, a plurality of log messages (e.g. syslog messages) are received from a plurality of network components in one or more networks. In one illustrative example, a plurality of relationships between interfaces and events are derived from the received log messages and characterized as a plurality of graphical component relationships. One or more groups of connected components are determined from the graphical component relationships and network component connection data which indicate interface relationships of the network components. Here, groups of connected components may be logically joined based on the network component connection data indicating one or more interface relationships. A network incident may then be identified based on at least one of the determined groups of connected components being associated with at least one identified set of events that has the closest or substantial match with at least one predetermined set of events associated with the network incident.

Network incident identification based on characterizing relationships between interfaces and events as graphical component relationships

Methods and systems have been provided for removing dead Access Control Entries (ACEs) in an Access Control List (ACL). In one embodiment, the dead ACEs can be detected for an egress as well as an ingress ACL. The ACEs that have a hit count above a user-specified hit count are checked for their validity. The validity of the ACE is checked, using the information based on a Forwarding Information Base (FIB). If an ACE is found to be invalid, it is considered dead. The dead ACEs are referred as candidates for removal from the ACL. If the ACE is found to be a candidate for removal, a system administrator can either warn the network administrator about the candidate for removal or delete the ACE from the ACL after a pre-defined time limit.

Method and system for removing dead access control entries (ACEs)

Growing community of inventors

Bengaluru, India

Sundar Ramakrishnan