公开(公告)号：US20070025355A1

公开(公告)日：2007-02-01

申请号：US11494441

申请日：2006-07-27

申请人： Alain Cohen ,  Pradeep Singh ,  Vinod Jeyachandran ,  Nitin Gupta

发明人： Alain Cohen ,  Pradeep Singh ,  Vinod Jeyachandran ,  Nitin Gupta

IPC分类号： H04L12/56

CPC分类号： H04L45/28 ,  H04L41/0631 ,  H04L41/08 ,  H04L41/0866 ,  H04L41/14 ,  H04L41/145 ,  H04L45/02 ,  H04L45/124

摘要： A simulator simulates routing system protocols to build routing tables corresponding to a modeled network, and a comparator compares the routing tables in the actual network to these simulator-created routing tables. Because the modeled system represents a fault-free version of the actual system, and assuming that the modeled routing system protocols are representative of the algorithms used in the actual routers, these simulator-produced routing tables will represent the ‘ideal’ routing tables that should be present in the routers of the actual network. By querying each router in the actual network for its routing table and comparing each routing table to the corresponding simulator-produced routing table, any differences from the ‘ideal’ can be identified.

摘要翻译： 模拟器模拟路由系统协议以构建与建模网络相对应的路由表，并且比较器将实际网络中的路由表与这些模拟器创建的路由表进行比较。 因为建模的系统代表了实际系统的无故障版本，并且假设建模的路由系统协议代表实际路由器中使用的算法，则这些模拟器生成的路由表将表示应该应用的“理想”路由表 存在于实际网络的路由器中。 通过查询实际网络中的每个路由器的路由表，并将每个路由表与相应的模拟器生成的路由表进行比较，可以识别与“ideal”的任何差异。

公开(公告)号：US20070025328A1

公开(公告)日：2007-02-01

申请号：US11494692

申请日：2006-07-27

申请人： Alain Cohen ,  Pradeep Singh ,  Vinod Jeyachandran ,  Nitin Gupta

发明人： Alain Cohen ,  Pradeep Singh ,  Vinod Jeyachandran ,  Nitin Gupta

IPC分类号： H04L12/28 ,  H04L12/56

CPC分类号： H04L45/28 ,  H04L45/02 ,  H04L45/54

摘要： A routing validation method and system identifies routers that are likely to be the cause of differences in forwarding tables associated with two versions of a network. Each destination sub-network prefix is processed to identify all the routers that exhibit differences in their forwarding table for this prefix. Each router exhibiting a difference is assessed to determine whether the difference may have been propagated to this router from another router. If the difference could not have been propagated from another router, this router is identified as a potential source of the observed difference. By eliminating routers that could have received the effects of the differences from another router, the task of identifying the root cause of the observed differences is substantially reduced in complexity.

摘要翻译： 路由验证方法和系统识别可能是与两个网络版本相关联的转发表中的差异的原因的路由器。 处理每个目标子网络前缀以标识在其前缀的转发表中表现出差异的所有路由器。 评估每个出现差异的路由器，以确定差异是否可能已经从另一个路由器传播到该路由器。 如果差异不能从另一个路由器传播，则该路由器被识别为观察到的差异的潜在来源。 通过消除可能已经接收到来自另一个路由器的差异的影响的路由器，识别所观察到的差异的根本原因的任务在复杂性上显着降低。

公开(公告)号：US20080037532A1

公开(公告)日：2008-02-14

申请号：US11507113

申请日：2006-08-19

申请人： Edward Sykes ,  Shobana Narayanaswamy ,  Alain Cohen ,  Pradeep Singh ,  Vinod Jeyachandran ,  Vivek Narayanan ,  Yevgeny Gurevich ,  Michael Brauwerman

发明人： Edward Sykes ,  Shobana Narayanaswamy ,  Alain Cohen ,  Pradeep Singh ,  Vinod Jeyachandran ,  Vivek Narayanan ,  Yevgeny Gurevich ,  Michael Brauwerman

IPC分类号： H04L12/56

CPC分类号： H04L65/80 ,  H04L41/0893 ,  H04L41/0896 ,  H04L41/147 ,  H04L41/22 ,  H04L41/5003 ,  H04L41/5009 ,  H04L41/5012 ,  H04L41/5019 ,  H04L41/5025 ,  H04L41/5087 ,  H04L41/509 ,  H04L43/0829 ,  H04L43/0852

摘要： Devices and methods for modeling and analysis of services provided over a common network include a processor configured to track services connected to the common network through nodes and links; run service models associated with the services under selected conditions, the selected conditions including failure and repair of one of the nodes or links; and propose corrective action and/or change of network resources of the common network to minimize impact of the failure. The processor may also run Network model(s). The models may be executed successively or simultaneously, and outputs of one model may be used as input to other models, including any necessary conversions for compatibility.

摘要翻译： 用于对通过公共网络提供的服务进行建模和分析的设备和方法包括：处理器，被配置为通过节点和链路跟踪连接到公共网络的服务; 在选定条件下运行与服务相关联的服务模型，所选条件包括其中一个节点或链接的故障和修复; 并提出纠正措施和/或改变公共网络的网络资源，以尽量减少故障的影响。 处理器还可以运行网络模型。 模型可以连续或同时执行，一个模型的输出可以用作其他模型的输入，包括任何必要的兼容性转换。

公开(公告)号：US20070157286A1

公开(公告)日：2007-07-05

申请号：US11505171

申请日：2006-08-16

申请人： Pradeep Singh ,  Ankit Agarwal ,  Alain Cohen ,  Venuprakash Barathan ,  Vinod Jeyachandran

发明人： Pradeep Singh ,  Ankit Agarwal ,  Alain Cohen ,  Venuprakash Barathan ,  Vinod Jeyachandran

IPC分类号： H04L9/00

CPC分类号： H04L41/28 ,  H04L12/2697 ,  H04L41/0866 ,  H04L41/0893 ,  H04L41/145 ,  H04L41/22 ,  H04L43/50 ,  H04L63/1433 ,  H04L63/20

摘要： A security policy database identifies the intended security policies within a network, a traffic generator provides test traffic that is configured to test each defined security policy, and a simulator simulates the propagation of this traffic on a model of the network. The model of the network includes the configuration data associated with each device, and thus, if devices are properly configured to enforce the intended security policies, the success/failure of the simulated test traffic will conform to the intended permit/deny policy of each connection. Differences between the simulated message propagation and the intended security policies are reported to the user, and diagnostic tools are provided to facilitate identification of the device configuration data that accounts for the observed difference. Additionally, if a network's current security policy is unknown, test traffic is generated to reveal the actual policy in effect, to construct a baseline intended security policy.

摘要翻译： 安全策略数据库标识网络中的预期安全策略，流量生成器提供被配置为测试每个定义的安全策略的测试流量，并且模拟器模拟该流量在网络模型上的传播。 网络模型包括与每个设备相关联的配置数据，因此，如果设备被正确配置以实施预期的安全策略，则模拟测试流量的成功/失败将符合每个连接的预期允许/拒绝策略 。 向用户报告模拟消息传播与预期安全策略之间的差异，并提供诊断工具以便于识别出所观察到的差异的设备配置数据。 此外，如果网络当前的安全策略未知，则生成测试流量以显示实际的实际策略，以构建基准预期的安全策略。

公开(公告)号：US20070036088A1

公开(公告)日：2007-02-15

申请号：US11501388

申请日：2006-08-09

申请人： Pradeep Singh ,  Alain Cohen ,  Alejandro Talavera-Martinez ,  Arun Pasupathy ,  Poonam Singh ,  Ibrahim Moral

发明人： Pradeep Singh ,  Alain Cohen ,  Alejandro Talavera-Martinez ,  Arun Pasupathy ,  Poonam Singh ,  Ibrahim Moral

IPC分类号： H04J1/16 ,  H04L12/413

CPC分类号： H04W16/225 ,  H04W74/00

摘要： Simulation models of media access control and physical layer characteristics facilitate the simulation/emulation of a variety of phenomena that affect transmissions via a wireless media. Such phenomena include media access contention delays, packet drops, and retransmissions that are generally dependent upon changes in transmitter/receiver locations. Each wireless environment is characterized by a model of the communication channel that characterizes transmission effects based on the number of competing transmitters in the environment, which is dynamically determined based on the location of each node in the environment. Additionally, the location of nodes is used to simulate the effects of ‘hidden nodes’, nodes that are unknown to a transmitting node but can interfere with the reception of transmissions at a receiving node. Each device/node model in the wireless environment preferably accesses the same model of the communication channel, thereby minimizing the amount of detail required at each device model.

摘要翻译： 介质访问控制和物理层特性的仿真模型有助于模拟/仿真影响通过无线介质传输的各种现象。 这种现象包括通常取决于发射机/接收机位置的改变的媒体接入争用延迟，分组丢弃和重传。 每个无线环境的特征在于基于环境中的竞争发射机的数量来表征传输效应的通信信道的模型，其基于环境中的每个节点的位置动态地确定。 另外，节点的位置用于模拟“隐藏节点”，发送节点未知的节点的影响，但可能会干扰接收节点的传输接收。 无线环境中的每个设备/节点模型优选地访问通信信道的相同模型，从而最小化每个设备模型所需的细节量。

公开(公告)号：US20070097883A1

公开(公告)日：2007-05-03

申请号：US11506651

申请日：2006-08-18

申请人： Yigong Liu ,  Yevgeny Gurevich ,  Pradeep Singh ,  Alain Cohen ,  Vivek Narayanan ,  Russell Elsner ,  Clinton Hart

发明人： Yigong Liu ,  Yevgeny Gurevich ,  Pradeep Singh ,  Alain Cohen ,  Vivek Narayanan ,  Russell Elsner ,  Clinton Hart

IPC分类号： H04L12/28

CPC分类号： H04L41/22 ,  H04L41/12

摘要： A new network topology visualization is produced from an existing network topology using grouping algorithms that are selectively applied to selectable hierarchies of the existing network topological hierarchy. The new network topology is rendered for review. Interaction may be provided through a graphical user interface (GUI). The new network topology is provided as a previewing visualization. The previewing visualization is provided in a tree-view. The previewing visualization provides a visual differentiation between portions of the network topology that are changed by the grouping algorithm and portions that are not changed. The grouping algorithms may be provided as plug-in algorithms. A further new network topology may be rendered in response to receipt of a changed network topology.

摘要翻译： 使用分组算法从现有网络拓扑生成新的网络拓扑可视化，该算法被选择性地应用于现有网络拓扑层次结构的可选层次。 提供新的网络拓扑以供审查。 可以通过图形用户界面（GUI）提供交互。 新的网络拓扑作为预览可视化提供。 预览可视化在树视图中提供。 预览可视化提供了通过分组算法改变的网络拓扑的部分之间的视觉差异，以及未改变的部分。 分组算法可以作为插件算法提供。 响应于接收到改变的网络拓扑，可以呈现进一步的新网络拓扑。

公开(公告)号：US20070067351A1

公开(公告)日：2007-03-22

申请号：US11503553

申请日：2006-08-11

申请人： Pradeep Singh ,  Raymond Onley ,  Nishant Gupta ,  Alain Cohen

发明人： Pradeep Singh ,  Raymond Onley ,  Nishant Gupta ,  Alain Cohen

IPC分类号： G06F17/30

CPC分类号： G06F17/30286

摘要： In a network simulation system, a compiler is provided to support incremental updates to the configuration data associated with the modeled network. Each incremental change is identified and logged, to facilitate configuration management and select roll-backs to prior configurations. Because each update is processed and managed individually, and integrated automatically into the overall system configuration, the overhead associated with keeping a configuration database up-to-date is substantially reduced, thereby increasing the likelihood that all configuration changes will be reflected in the modeled network. In a preferred embodiment, the same data is used to incrementally update the configuration model and to execute the change in the actual system, thereby further reducing the overhead and assuring a correspondence between the modeled network and the actual network.

摘要翻译： 在网络仿真系统中，提供编译器来支持与建模网络相关联的配置数据的增量更新。 识别和记录每个增量更改，以便于配置管理，并选择回滚到以前的配置。 由于每个更新被单独处理和管理，并且自动整合到整个系统配置中，所以与保持配置数据库的最新状态相关联的开销大大减少，从而增加了所有配置更改将反映在建模网络中的可能性 。 在优选实施例中，相同的数据用于递增地更新配置模型并执行实际系统中的改变，从而进一步降低开销并确保建模网络与实际网络之间的对应关系。

公开(公告)号：US20070058570A1

公开(公告)日：2007-03-15

申请号：US11505228

申请日：2006-08-16

申请人： Pradeep Singh ,  Alain Cohen ,  Ankit Agarwal

发明人： Pradeep Singh ,  Alain Cohen ,  Ankit Agarwal

IPC分类号： H04L12/28

CPC分类号： H04L41/0866 ,  H04L41/0859

摘要： A contextual and semantic analysis of network entities facilitates a mapping and comparison of the entities between network models. The system includes a plurality of refine handler and match handler pairs that use rules that are specific to the type of network entities being analyzed. The refine handler analyzes the network model to identify the entities for which its rules apply, and the match handler processes these identified entities to establish a pairing between corresponding entities in each model. A sequence of refine-match processes are applied to the network models, typically in accordance with a hierarchy of rules until each entity is identified as a matched, added, or removed entity. A difference handler processes the identified pairings to provide a difference analysis that facilitates a meaningful interpretation of the configuration changes, and a user interface provides an interactive environment to view the differences from different perspectives.

摘要翻译： 网络实体的上下文和语义分析有助于网络模型之间的实体的映射和比较。 该系统包括使用特定于正在分析的网络实体的类型的规则的多个精简处理程序和匹配处理程序对。 精简处理程序分析网络模型以识别其规则适用的实体，匹配处理程序处理这些标识的实体以在每个模型中的对应实体之间建立配对。 精细匹配过程的序列通常根据规则的层次结构应用于网络模型，直到每个实体被识别为匹配的，添加的或移除的实体。 差异处理程序处理识别的配对以提供有助于对配置更改进行有意义的解释的差异分析，并且用户界面提供交互式环境以从不同的角度来查看差异。

公开(公告)号：US20050055196A1

公开(公告)日：2005-03-10

申请号：US10923214

申请日：2004-08-20

申请人： Alain Cohen ,  Pradeep Singh

发明人： Alain Cohen ,  Pradeep Singh

IPC分类号： G06F9/455 ,  H04L12/24 ,  H04L12/56

CPC分类号： H04W16/18 ,  H04L41/145 ,  H04W40/02

摘要： A simulation method and system partitions network traffic into background traffic and explicit traffic, wherein explicit traffic is processed in detail, and background traffic is processed at a more abstract level. The packets of explicit traffic are modeled in complete detail, so that precise timing and behavior characteristics can be determined, whereas large volumes of traffic are modeled more abstractly as background flows, and only certain aspects, such as routing through the network, are simulated. Tracer packets are used to model the background traffic and carry a number of characteristics of interest for generating simulation results. These tracer packets are propagated through the network in the same manner as any other simulated packet and therefore are processed through each element traversed by the propagation of the background traffic, but each single tracer packet is representative of all of the packets comprising the modeled background traffic. In this manner, the effect of the background traffic on the explicit traffic can be modeled at each network element. The abstract processing of background traffic is facilitated by techniques that include multi-variate table look-up, neural networks, and the like.

摘要翻译： 模拟方法和系统将网络流量分为后台流量和显式流量，其中详细处理显式流量，并且以更抽象的级别处理后台流量。 明确流量的数据包将被详细建模，从而可以确定精确的时序和行为特征，而大量的流量则以抽象的形式作为后台流量进行建模，只能模拟某些方面，如通过网络的路由。 示踪器数据包用于对后台流量进行建模，并携带多个感兴趣的特性以生成仿真结果。 这些示踪器分组以与任何其他模拟分组相同的方式传播通过网络，并且因此通过后台业务的传播遍历的每个元素进行处理，但是每个单个跟踪分组代表包括建模后台业务的所有分组 。 以这种方式，可以在每个网络元件上对后台流量对显式流量的影响进行建模。 通过包括多变量表查找，神经网络等的技术来促进背景流量的抽象处理。

公开(公告)号：US20050044215A1

公开(公告)日：2005-02-24

申请号：US10912704

申请日：2004-08-05

申请人： Alain Cohen ,  Robert Mollitor ,  Vicki Tardif ,  Vivek Narayanan ,  Pradeep Singh

发明人： Alain Cohen ,  Robert Mollitor ,  Vicki Tardif ,  Vivek Narayanan ,  Pradeep Singh

IPC分类号： G06F15/173 ,  H04L12/26

CPC分类号： H04L43/12

摘要： An automation engine is configured to automatically run network data collection, analysis, and reporting tools. Each tool is designed or modified to enable the parameters required for operating the tool to be read from a settings file. The automation engine is configured to provide the appropriate settings file to each tool to perform a given set of tasks. Tasks can be performed on-demand, on predefined schedules, or upon detection of a triggering event.

摘要翻译： 自动化引擎配置为自动运行网络数据收集，分析和报告工具。 每个工具都被设计或修改，以便能够从设置文件读取操作工具所需的参数。 自动化引擎被配置为向每个工具提供适当的设置文件以执行给定的一组任务。 任务可以按需执行，在预定义的时间表上执行，或者在检测到触发事件时执行。