Method for monitoring a network and network including a monitoring functionality

摘要

A method for monitoring a network, wherein the network has a connected graph topology, in particular a tree structure, including a plurality of monitoring nodes that collect network measurement data, a plurality of mediator nodes each performing at least the task of aggregating network measurement data received from different monitoring nodes and/or other mediator nodes, and at least one root entity that receives network measurement data and/or aggregated network measurement data from the mediator nodes, is characterized in that the aggregation of network measurement data is performed by condensing network measurement data into a summarized probabilistic data structure. Furthermore, a network including a monitoring functionality is disclosed.

主权项

1. A method for monitoring a network, wherein said network has a connected graph topology, in particular a tree structure, said method comprising:
a plurality of monitoring nodes collecting network measurement data, each of a plurality of mediator nodes performing at least a task of aggregating the collected network measurement data received from different monitoring nodes and/or other mediator nodes, and at least one root entity that receives the collected network measurement data and/or the aggregated network measurement data from said mediator nodes, wherein said aggregation of the collected network measurement data is performed by said mediator nodes condensing network measurement data into a summarized probabilistic data structure, wherein each of said mediator nodes performs a pattern check on its summarized data structure for an anomalous pattern, wherein a mediator node, in case a pattern check outputs any anomalous pattern, triggers a recursive backtracking process to the monitoring nodes and/or other mediator nodes that have collected the data measurement data relevant to the output anomalous pattern, the backtracking process using the locally cached of said summarized data structure to locate said the monitoring nodes and/or other mediator nodes that have collected the data measurement data relevant to the output anomalous pattern, and wherein at each of said monitoring nodes and/or other mediator nodes that have collected the data measurement data relevant to the output anomalous pattern, the backtracking process recursively uses locally cached information to locate further ones of said the monitoring nodes and/or other mediator nodes that have collected the data measurement data relevant to the output anomalous pattern.