Inferring connectivity in the presence of conflicting network data
View Patent ↗The connectivity information provided by a variety of inference engines is integrated to provide a set of inferred links within a network. A consolidation is performed among inference engines that operate at a base level of connectivity detail to create a model of the network at this base level. The connectivity information provided by inference engines at each subsequent higher level of connectivity abstraction is then overlaid on the base level connectivity. By separately consolidating the connectivity information at each level of abstraction, the rules for dealing with conflicts can be simplified and/or better focused to resolve the conflict. By assuming that the more detailed lower level information is likely to be more accurate, rules can be developed to modify the connectivity models produced by the higher level techniques to conform to the lower level connectivity details while still maintaining the integrity of the higher level connectivity models.
1. A non-transitory computer-readable medium that includes a program that, when executed by a processor, causes the processor to:
obtain sets of configuration data of a plurality of devices in a network; each set of configuration information being associated with a hierarchical level of connectivity information;
consolidate the sets of configuration data associated with a first hierarchical level to create a connectivity graph,
consolidate the sets of configuration data associated with a second hierarchical level to identify connections at the second hierarchical level,
for each identified connection at the second hierarchical level:
determine whether the identified connection is consistent with the first-level connectivity graph, and
if consistent, modify the connectivity graph to include the identified connection,
wherein one or more user-defined golden rules are received, and any conflicts are resolved so as to be consistent with the golden rules.
2. The medium of claim 1 , wherein the program causes the processor to infer an additional connection at the first hierarchical level to enable the identified connection at the second hierarchical level, and modify the connectivity graph by including the inferred additional connection.
3. The medium of claim 1 , wherein if a conflict exists between the connectivity graph and the identified connection at the second hierarchical level, the program causes the processor to resolve the conflict so as to be consistent with the connectivity graph.
4. The medium of claim 1 , wherein the program causes the processor to:
consolidate the sets of configuration data associated with a third hierarchical level to identify connections at the third hierarchical level, and
after the connectivity graph has been modified to include the identified connections at the second hierarchical:
for each identified connection at the third hierarchical level:
determine whether the identified connection at the third hierarchical level is consistent with the connectivity graph, and
if consistent, further modify the connectivity graph to include the identified connection at the third hierarchical level.
5. The medium of claim 4 , wherein the program causes the processor to infer an additional connection at the first hierarchical level to enable the identified connection at the third hierarchical level, and modify the connectivity graph by including the inferred additional connection.
6. The medium of claim 4 , wherein if a conflict exists between the connectivity graph and the identified connection at the second hierarchical level, the program causes the processor to resolve the conflict so as to be consistent with the connectivity graph.
7. The medium of claim 1 , wherein the first hierarchical level corresponds to physical-level links, and the second hierarchical level corresponds to IP-level links.
8. A method comprising:
obtaining, by a network analysis system, sets of configuration data of a plurality of devices in a network; each set of configuration information being associated with a hierarchical level of connectivity information;
consolidating, by the network analysis system, the sets of configuration data associated with a first hierarchical level to create a connectivity graph in a computer-readable memory element,
consolidating, by the network analysis system, the sets of configuration data associated with a second hierarchical level to identify connections at the second hierarchical level,
for each identified connection at the second hierarchical level:
determining whether the identified connection is consistent with the first-level connectivity graph, and
if consistent, modifying the connectivity graph in the computer-readable memory to include the identified connection,
wherein the first hierarchical level corresponds to physical-level links, and the second hierarchical level corresponds to IP-level links.
9. The method of claim 8 , including inferring an additional connection at the first hierarchical level to enable the identified connection at the second hierarchical level, and modifying the connectivity graph by including the inferred additional connection.
10. The method of claim 8 , including resolving a conflict between the connectivity graph and the identified connection at the second hierarchical level so as to be consistent with the connectivity graph.
11. The method of claim 8 , including receiving one or more user-defined golden rules, and resolving any conflicts so as to be consistent with the golden rules.
12. The method of claim 8 , including:
consolidating the sets of configuration data associated with a third hierarchical level to identify connections at the third hierarchical level, and
after the connectivity graph has been modified to include the identified connections at the second hierarchical level:
for each identified connection at the third hierarchical level:
determining whether the identified connection at the third hierarchical level is consistent with the connectivity graph, and
if consistent, further modifying the connectivity graph to include the identified connection at the third hierarchical level.
13. The method of claim 12 , including inferring an additional connection at the first hierarchical level to enable the identified connection at the third hierarchical level, and modify the connectivity graph by including the inferred additional connection.
14. A system comprising:
a non-transitory computer readable medium having instructions;
a processor which upon executing the instructions performs the following:
obtaining sets of configuration data of a plurality of devices in a network; each set of the configuration information being associated with a hierarchical level of connectivity information;
consolidating the sets of configuration data associated with a first hierarchical level to create a connectivity graph in the non-transitory computer-readable memory;
consolidating the sets of configuration data associated with a second hierarchical level to identify connections as the second hierarchical level, for each identified connection at the second hierarchical level;
determining whether the identified connection is consistent with the connectivity graph,
if consistent, modifying the connectivity graph in the non-transitory computer readable medium to include the identified connection, consolidating the sets of configuration data associated with a third hierarchical level to identify connections at the third hierarchical level, and after the connectivity graph has been modified to include the identified connections at the second hierarchical level;
for each identified connection at the third hierarchical level;
determining whether the identified connection at the third hierarchical level is consistent with the modified connectivity graph and
if consistent, further modifying the modified connectivity graph to include the identified connection at the third hierarchical level, and
inferring an additional connection at the first hierarchical level to enable the identified connection at the third hierarchical level, and modifying the connectivity graph by including the inferred additional connection.
15. The system of claim 14 , wherein the non-transitory computer readable medium further comprises: first additional instructions which upon execution by the processor perform the following:
inferring an additional connection at the first hierarchical level to enable the identified connection at the second hierarchical level, and modifying the connectivity graph by including the inferred additional connection.
16. The system of claim 14 , the non-transitory computer readable medium further comprising: second additional instructions which upon execution by the processor perform the following:
resolving conflicts between the connectivity graph and the identified connection at the second hierarchical level so as to be consistent with the connectivity graph.
17. The system of claim 14 , wherein the first hierarchical level corresponds to physical-level links, and the second hierarchical level corresponds to Internet Protocol-level (IP-level) links.