IP Library Granted Patent US 10,958,549
Granted Patent B2
US 10,958,549 · App. 16/106,833 · Granted Mar 23, 2021

Method and system for analyzing protocol message sequence communicated over a network

Inventors: Varadaraj Yatirajula (Bengaluru, IN); Ajay Talreja (Pune, IN)
Assignee: Wipro Limited
H04L43/0823G06N20/00H04L41/0631H04L41/0654H04L41/16H04L65/102H04L65/1006H04L65/1083H04L69/22
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,958,549
App. No.
16/106,833
Granted
Mar 23, 2021
Kind
B2
Abstract

A method of analyzing protocol message sequence communicated over a network, involves receiving one or more protocol messages associated with a real-time communication session between a first network node and a second network node in the network. A set of packet attributes corresponding to the one or more protocol messages associated with the real-time communication session may be extracted. Each one of the set of packet attributes may be compared with a plurality of baseline attributes. At least one error condition in at least one protocol message received from the first network node may be determined based on the comparison. A corrective measure on the first network node may be performed based on the at least one error condition in the at least one protocol message received from the first network node.

Claims (48)

1. A method of analyzing a protocol message sequence communicated over a network, the method comprising:

receiving, by a network analyzer, one or more protocol messages associated with a real-time communication session between a first network node and a second network node in the network;

extracting, by the network analyzer, data-field-values that pertain to: Maximum (Max)-forwards, Command Sequence (CSeq) number, content-type, and content-length for each protocol message received from the first network node;

comparing, by the network analyzer, each one of the extracted data-field-values with a plurality of baseline values associated with each of the plurality of network protocols, wherein comparison is based on the plurality of baseline values, which are dynamically updated by the network analyzer based on learning from a mapped information of corrective measures and associated errors relevant to the one or more protocol messages;

determining, by the network analyzer, at least one error condition pertaining to: invalid Max-forwards, invalid CSeq number, invalid content length, and invalid content-type in at least one protocol message received from the first network node based on the comparison; and

performing, by the network analyzer, a corrective measure on the first network node based on the at least one error condition in the at least one protocol message received from the first network node, wherein performing the corrective measure by the network analyzer comprises:

adjusting a configuration setting that comprises: nodal tables, addresses and/or policies in the first network node corresponding to the at least one error condition in the at least one protocol message; and

generating the at least one protocol message with the valid data fields or the valid extensions for a subsequent communication session based on the adjusted configuration setting in the first network node.

2. The method of claim 1 , wherein at least one error condition is detected in one or more messages further comprising invalid extensions in the protocol messages.

3. The method of claim 2 , wherein performing the corrective measure by the network analyzer, comprises:

adjusting the configuration setting based on the invalid extensions in the at least one protocol message associated with the real-time communication session; and

commanding the first network node to generate the at least one protocol message with the valid extensions for the subsequent communication session based on the adjusted configuration setting in the first network node.

4. The method of claim 1 further comprising:

dynamically updating, by the network analyzer, the baseline values associated with each of the plurality of network protocols; and

analyzing, by the network analyzer, data-field-values associated with the subsequent communication session using the updated baseline attributes.

5. The method of claim 1 further comprising determining, by the network analyzer, one or more root causes associated with the at least one error condition in the at least one protocol message received from the first network node.

6. The method of claim 1 further comprising:

storing, in a database, the one or more protocol messages associated with the real-time communication session between the first network node and the second network node; and

porting the one or more protocol messages with the at least one error condition to a testing simulator to determine one or more root causes associated with at least one error condition.

7. A network analyser comprising:

a processor; and

a memory coupled to the processor which is configured to be capable executing programmed instructions comprising and stored in the memory to:

receive one or more protocol messages associated with a real-time communication session between a first network node and a second network node in the network;

extract data-field-values that pertain to: Maximum (Max)-forwards, Command Sequence (CSeq) number, content-type, and content-length for each protocol message received from the first network node;

compare each one of the extracted data-field-values with a plurality of baseline values associated with each of the plurality of network protocols, wherein the comparison is based on the plurality of baseline values, which are dynamically updated by the network analyzer based on learning from a mapped information of corrective measures and associated errors relevant to the one or more protocol messages;

determine at least one error condition pertaining to: invalid Max-forwards, invalid CSeq number, invalid content length, and invalid content-type in at least one protocol message received from the first network node based on the comparison; and

perform a corrective measure on the first network node based on the at least one error condition in the at least one protocol message received from the first network node, wherein performing the corrective measure by the network analyzer comprises:

adjusting a configuration setting that comprises: nodal tables, addresses and/or policies in the first network node corresponding to the at least one error condition in the at least one protocol message; and

generating the at least one protocol message with the valid data fields or the valid extensions for a subsequent communication session based on the adjusted configuration setting in the first network node.

8. The network analyser of claim 7 , wherein at least one error condition is detected in one or more messages further comprising invalid extensions in the protocol messages.

9. The network analyser of claim 8 , wherein the processor is further configured for the perform the corrective measure on the first network node to be capable of executing the stored programmed instructions to:

adjust the configuration setting in the first network node based on the invalid extensions in the at least one protocol message associated with the real-time communication session; and

command the first network node to generate the at least one protocol message with the valid extensions for the subsequent communication session based on the adjusted configuration setting in the first network node.

10. The network analyser of claim 7 wherein the processor is further configured to be capable of executing the stored programmed instructions to:

dynamically update the baseline values associated with each of the plurality of network protocols; and

analyze data-field-values associated with the subsequent communication session using the updated baseline attributes.

11. The network analyser of claim 7 wherein the processor is further configured to be capable of executing the stored programmed instructions to determine one or more root causes associated with the at least one error condition in the at least one protocol message received from the first network node.

12. The network analyser of claim 7 wherein the processor is further configured to be capable of executing the stored programmed instructions to store the one or more protocol messages associated with the real-time communication session between the first network node and the second network node.

13. The network analyser of claim 7 wherein the processor is further configured to be capable of executing the stored programmed instructions to port the one or more protocol messages with the at least one error condition to a testing simulator to determine one or more root causes associated with at least one error condition.

14. A non-transitory computer-readable storage medium having stored thereon instructions comprising executable code which when executed by one or more processors, causes the one or more processors to:

receive one or more protocol messages associated with a real-time communication session between a first network node and a second network node in the network;

extract data-field-values that pertain to: Maximum (Max)-forwards, Command Sequence (CSeq) number, content-type, and content-length for each protocol message received from the first network node;

compare each one of the extracted data-field-values with a plurality of baseline values associated with each of the plurality of network protocols, wherein the comparison is based on the plurality of baseline values, which are dynamically updated by the network analyzer based on learning from a mapped information of corrective measures and associated errors relevant to the one or more protocol messages;

determine at least one error condition pertaining to: invalid Max-forwards, invalid CSeq number, invalid content length, and invalid content-type in at least one protocol message received from the first network node based on the comparison; and

perform a corrective measure on the first network node based on the at least one error condition in the at least one protocol message received from the first network node, wherein performing the corrective measure by the network analyzer comprises:

adjusting a configuration setting that comprises: nodal tables, addresses and/or policies in the first network node corresponding to the at least one error condition in the at least one protocol message; and

generating the at least one protocol message with the valid data fields or the valid extensions for a subsequent communication session based on the adjusted configuration setting in the first network node.

15. The method of claim 6 further comprising porting the one or more protocol messages with the at least one error condition to a testing simulator to determine one or more root causes associated with at least one error condition.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 4, 2018
From: YATIRAJULA, VARADARAJ; TALREJA, AJAY
To: WIPRO LIMITED
Reel/Frame 046780/0219 →
Priority Claims (1)
IN IN201841024386 · Jun 29, 2018 · national
Continuity (1)
Related Publication 20200007423A1 · Jan 2, 2020