Monitoring and analyzing watchdog messages in an internet of things network environment
Technologies are provided in embodiments to monitor and analyze networks. The embodiments can cause a bit in a first bit sequence of a device filter to indicate a failure state based on not receiving a message from a node in a network during a reporting time interval, and upon the reporting time interval expiring, to combine the first bit sequence with a corresponding bit sequence of a shadow filter. The combination preserves, in the shadow filter, an indication of the failure state from the bit in the first bit sequence and any other indications of failure states from bits of the corresponding bit sequence of the shadow filter. More specific embodiments cause, upon the reporting interval expiring, a bit in a second bit sequence of the device filter to indicate a no failure state based on an indication of another no failure state in the first bit sequence.
1. At least one machine readable storage medium having instructions stored thereon to monitor nodes in a network, the instructions when executed by at least one processor cause the at least one processor to:
cause a bit in a first bit sequence of a device filter to indicate a failure state based on not receiving a message from a node in the network during a reporting time interval; and
upon the reporting time interval expiring, combine the first bit sequence with a corresponding bit sequence of a shadow filter to preserve, in the shadow filter, an indication of the failure state based on the bit in the first bit sequence and any other indications of failure states from bits of the corresponding bit sequence of the shadow filter.
2. The at least one machine readable storage medium of claim 1 , wherein the message is expected to be received based on a reporting schedule associated with the node.
3. The at least one machine readable storage medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
reset the first bit sequence to default values after combining the first bit sequence with the corresponding bit sequence.
4. The at least one machine readable storage medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
cause another bit in the first bit sequence to indicate a no failure state based on receiving another message from the node during the reporting time interval.
5. The at least one machine readable storage medium of claim 1 , wherein to combine the first bit sequence with the corresponding bit sequence in the shadow filter is to at least:
perform a logic operation between bits in the first bit sequence of the device filter and the bits in the corresponding bit sequence of the shadow filter.
6. The at least one machine readable storage medium of claim 1 , wherein the bit in the first bit sequence is allocated for one time period of a plurality of time periods in the reporting time interval.
7. The at least one machine readable storage medium of claim 1 , wherein a second bit sequence of the device filter is allocated for a time interval of a higher order than the reporting time interval.
8. The at least one machine readable storage medium of claim 7 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
upon the reporting time interval expiring, cause a bit in the second bit sequence of the device filter to indicate a no failure state based on at least one indication of another no failure state in the first bit sequence.
9. The at least one machine readable storage medium of claim 7 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
upon the reporting time interval expiring, cause a bit in the second bit sequence of the device filter to indicate a failure state based on each bit in the first bit sequence indicating a respective failure state.
10. The at least one machine readable storage medium of claim 7 , wherein a bit in the second bit sequence indicates another failure state based on a message not being received from another node during the higher order time interval.
11. The at least one machine readable storage medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
cause one or more bits in the first bit sequence in the device filter to indicate one or more respective failure states based on not receiving respective messages from another node during the reporting time interval.
12. The at least one machine readable storage medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
determine the node is in a sleep mode based on contents of another message received from the node; and
block updates to the device filter based on determining the node is in the sleep mode.
13. The at least one machine readable storage medium of claim 12 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
allow updates to the device filter based on receiving a subsequent message from the node.
14. The at least one machine readable storage medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
combine the shadow filter with a subnet filter to preserve, in the subnet filter, indications of one or more failure states by one or more bits in the shadow filter, wherein the subnet filter is associated with a plurality of nodes in a sub-network, the plurality of nodes including the node and one or more other nodes.
15. The at least one machine readable storage medium of claim 14 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
combine a second shadow filter with the subnet filter to preserve, in the subnet filter, indications of one or more other failure states by one or more other bits in the second shadow filter, the one or more other failure states associated with at least one of the one or more other nodes.
16. The at least one machine readable storage medium of claim 14 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
propagate the subnet filter to a network device to be combined with a network filter to preserve, in the network filter, the indications of the one or more failure states preserved in the subnet filter and any other indications of any other failure states in the network filter.
17. The at least one machine readable storage medium of claim 1 , wherein the instructions, when executed by the at least one processor, cause the at least one processor to:
cause one or more bits in the first bit sequence to indicate one or more failure states associated with the node based on whether one or more other messages are received from the node during a subsequent reporting time interval; and
combine the first bit sequence with the corresponding bit sequence in the shadow filter based on the subsequent reporting interval expiring to preserve, in the shadow filter, the indications of the one or more failure states from the one or more bits in the first bit sequence and all indications of failure states from the bits of the corresponding bit sequence of the shadow filter.
18. The at least one machine readable storage medium of claim 1 , wherein the indication of the failure state is a binary digit 0, and wherein an indication of a no failure state is a binary digit 1.
19. The at least one machine readable storage medium of claim 1 , wherein the device filter is a bloom filter.
20. An apparatus for monitoring nodes in a network, the apparatus comprising:
at least one processor; and
a monitor including logic configured for execution by the at least one processor to:
cause a bit in a first bit sequence of a device filter to indicate a failure state based on not receiving a message from a node in the network during a reporting time interval; and
upon the reporting time interval expiring, combine the first bit sequence with a corresponding bit sequence of a shadow filter to preserve, in the shadow filter, an indication of the failure state based on the bit in the first bit sequence and any other indications of failure states from bits of the corresponding bit sequence of the shadow filter.
21. The apparatus of claim 20 , wherein the apparatus is the node.
22. The apparatus of claim 20 , wherein a second bit sequence of the device filter is allocated for a time interval of a higher order than the reporting time interval.
23. The apparatus of claim 22 , wherein the logic is configured for execution by the at least one processor to:
upon the reporting time interval expiring, cause a bit in the second bit sequence of the device filter to indicate a no failure state based on at least one indication of another no failure state in the first bit sequence.
24. A method for monitoring nodes in a network, the method comprising:
causing a bit in a first bit sequence of a device filter to indicate a failure state based on not receiving a message from a node in the network during a reporting time interval; and
upon the reporting time interval expiring, combining the first bit sequence with a corresponding bit sequence of a shadow filter to preserve, in the shadow filter, an indication of the failure state based on the bit in the first bit sequence and any other indications of failure states from bits of the corresponding bit sequence of the shadow filter.
25. The method of claim 24 , further comprising:
combining the shadow filter with a subnet filter to preserve, in the subnet filter, indications of one or more failure states by one or more bits in the shadow filter, wherein the subnet filter is associated with a plurality of nodes in a sub-network, the plurality of nodes including the node and one or more other nodes.