发明名称 Forced alert thresholds for profiled detection
摘要 A node in a communication network determines a data rate capacity of one or more nodes of the communication network and creates a single managed object grouping for each node of the one or more nodes having a same data rate capacity. The node establishes one or more static thresholds for the single managed object grouping based on the data rate capacity. The static thresholds are independent of a baseline condition of detected data rates at each node of the single managed object grouping. The node further detects a current rate of received data at each node of the single managed grouping and triggers at least one alert for each node of the single managed grouping when the current rate of the received data at a particular node exceeds the one or more static thresholds.
申请公布号 US9344440(B2) 申请公布日期 2016.05.17
申请号 US201313922947 申请日期 2013.06.20
申请人 Arbor Networks, Inc. 发明人 Winquist James Edward;Welch Joseph;Hoffman Tim;Barnes Olan Patrick
分类号 H04L29/06 主分类号 H04L29/06
代理机构 Locke Lord LLP 代理人 Locke Lord LLP ;Wofsy Scott D.;Capelli Christopher J.
主权项 1. A method comprising: determining, via a node in a communication network, a data rate capacity of one or more nodes of a communication network; creating, via the node, a single managed object grouping for each node of the one or more nodes having a same data rate capacity; establishing one or more static thresholds for the single managed object grouping based on the data rate capacity, wherein the static thresholds are independent of a baseline condition of detected data rates at each node of the single managed object grouping; detecting a current rate of received data at each node of the single managed grouping; triggering at least one alert for each node of the single managed grouping when the current rate of the received data at a particular node exceeds the one or more static thresholds; determining a time period the current rate of the received data at each node of the single managed grouping exceeds the one or more static thresholds; assigning a severity to the at least one alert based on the determined time period, when the at least one alert is triggered; and adjusting the one or more static thresholds after the at least one alert is triggered; comparing the current rate of the received data at each node of the single managed grouping to at least one of the one or more static thresholds to yield a difference rate; assigning a severity to the at least one alert based on the difference rate when the at least one alert is triggered.
地址 Burlington MA US