IP Library Granted Patent US 11,032,124
Granted Patent B1
US 11,032,124 · App. 16/661,755 · Granted Jun 8, 2021

Application aware device monitoring

Inventors: Thomas Haddow (San Francisco, CA); Ricardo V. Oliveira (San Francisco, CA)
Assignee: ThousandEyes LLC
H04L41/046H04L41/0213H04L41/22H04L41/5009H04L43/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,032,124
App. No.
16/661,755
Granted
Jun 8, 2021
Kind
B1
Abstract

Techniques for application aware device monitoring are disclosed. In some embodiments, a system, a process, and/or a computer program product for providing application aware device monitoring includes collecting network layer information from one or more agents utilizing a plurality of tests; collecting device layer information from the one or more agents deployed to monitor a plurality of devices in a network computing environment; correlating the network layer information and the device layer information; and generating a graphical visualization based on the correlated network layer and device layer information (e.g., an alert, report, and/or a graphical visualization can be provided based on the correlated network layer and device layer information to facilitate root cause detection for application performance issues).

Claims (41)

1. A system, comprising:

a processor; and

a memory coupled to the processor and configured to provide the processor with instructions configured to:

collect network layer information from one or more agents utilizing a plurality of tests, wherein collecting network layer information from one or more agents utilizing a plurality of tests comprises:

performing end-to-end active network testing to discover layer-3 paths traversed by application traffic, wherein two or more paths that traverse different IP addresses belonging to a same device are grouped into a single merged device-node for visualizing the layer-3 path; and

extracting neighbor connectivity information from each monitored layer-2 device using a neighbor discovery protocol to generate a physical network map including each monitored layer-2 device

collect device layer information from the one or more agents deployed to monitor a plurality of devices in a network computing environment;

correlate the network layer information including neighbor connectivity information, IP forwarding path, routing, and application-layer metrics and the device layer information including a device name, IP address, and a MAC address and port information; and

generate an alert, a report, and/or a graphical visualization based on the correlated network layer and device layer information to facilitate root cause detection for an application performance issue.

2. The system recited in claim 1 , wherein the device layer information is collected by the one or more agents using a Simple Network Management Protocol (SNMP).

3. The system recited in claim 1 , wherein each of the one or more agents performs network monitoring tests and system monitoring tests.

4. The system recited in claim 1 , wherein each of the one or more agents is controlled by an agent controller.

5. The system recited in claim 1 , wherein a graphical visualization of an application delivery state facilitates troubleshooting of network performance problems associated with one or more of the plurality of devices.

6. The system recited in claim 1 , wherein graphical visualizations of an application delivery state facilitate troubleshooting of network performance problems associated with one or more of the plurality of devices, and wherein the graphical visualizations are generated by a web tier.

7. The system recited in claim 1 , wherein the processor is further configured to: collect information about the plurality of devices in the network computing environment; and selectively monitor one or more of the plurality of devices and one or more interfaces of each of the one or more of the plurality of devices in the network computing environment.

8. The system recited in claim 1 , wherein the processor is further configured to: collect information about the plurality of devices in the network computing environment; and periodically query one or more of the plurality of devices in the network computing environment to selectively monitor the one or more of the plurality of devices and one or more interfaces of each of the one or more of the plurality of devices in the network computing environment.

9. The system recited in claim 1 , wherein the processor is further configured to: collect information about the plurality of devices in the network computing environment; and periodically query one or more of the plurality of devices in the network computing environment to selectively monitor the one or more of the plurality of devices and one or more interfaces of each of the one or more of the plurality of devices in the network computing environment including to extract interface performance metrics and contextual device and port information to facilitate correlating the interface performance metrics and the contextual device and port information with end-to-end application performance.

10. A method, comprising:

collecting network layer information from one or more agents utilizing a plurality of tests, wherein collecting network layer information from one or more agents utilizing a plurality of tests comprises:

performing end-to-end active network testing to discover layer-3 paths traversed by application traffic, wherein two or more paths that traverse different IP addresses belonging to a same device are grouped into a single merged device-node for visualizing the layer-3 path; and

extracting neighbor connectivity information from each monitored layer-2 device using a neighbor discovery protocol to generate a physical network map including each monitored layer-2 device;

collecting device layer information from the one or more agents deployed to monitor a plurality of devices in a network computing environment;

correlating the network layer information including neighbor connectivity information, IP forwarding path, routing, and application-layer metrics and the device layer information including a device name, IP address, and/or a MAC address and port information; and

generating an alert, a report, and/or a graphical visualization based on the correlated network layer and device layer information to facilitate root cause detection for an application performance issue.

11. The system recited in claim 1 , wherein the processor is further configured to: classify a plurality of devices at the device layer information by mapping the plurality of devices into a predefined set of network device types.

12. The system recited in claim 1 , wherein the processor is further configured to: import interface identifying information and interface metadata for additional contextual device information for the device layer information including interface name, description, and alias to facilitate correlating device layer information including a device identifier with layer-3 network path information.

13. The method of claim 10 , wherein the device layer information is collected by the one or more agents using a Simple Network Management Protocol (SNMP).

14. The method of claim 10 , wherein each of the one or more agents performs network monitoring tests and system monitoring tests.

15. The method of claim 10 , wherein each of the one or more agents is controlled by an agent controller.

16. The method of claim 10 , wherein a graphical visualization of an application delivery state facilitates troubleshooting of network performance problems associated with one or more of the plurality of devices.

17. The method of claim 10 , wherein graphical visualizations of an application delivery state facilitate troubleshooting of network performance problems associated with one or more of the plurality of devices, and wherein the graphical visualizations are generated by a web tier.

18. A computer program product, the computer program product being embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:

collecting network layer information from one or more agents utilizing a plurality of tests, wherein collecting network layer information from one or more agents utilizing a plurality of tests comprises:

performing end-to-end active network testing to discover layer-3 paths traversed by application traffic, wherein two or more paths that traverse different IP addresses belonging to a same device are grouped into a single merged device-node for visualizing the layer-3 path; and

extracting neighbor connectivity information from each monitored layer-2 device using a neighbor discovery protocol to generate a physical network map including each monitored layer-2 device;

collecting device layer information from the one or more agents deployed to monitor a plurality of devices in a network computing environment;

correlating the network layer information including neighbor connectivity information, IP forwarding path, routing, and application-layer metrics and the device layer information including a device name, IP address, and/or a MAC address and port information; and

generating an alert, a report, and/or a graphical visualization based on the correlated network layer and device layer information to facilitate root cause detection for an application performance issue.

19. The computer program product recited in claim 18 , wherein the device layer information is collected by the one or more agents using a Simple Network Management Protocol (SNMP).

20. The computer program product recited in claim 18 , wherein each of the one or more agents performs network monitoring tests and system monitoring tests.

21. The computer program product recited in claim 18 , wherein a graphical visualization of an application delivery state facilitates troubleshooting of network performance problems associated with one or more of the plurality of devices.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 25, 2021
From: THOUSANDEYES LLC
To: CISCO TECHNOLOGY, INC.
Reel/Frame 056348/0993 →
CHANGE OF NAME Recorded Nov 18, 2020
From: THOUSANDEYES, INC.
To: THOUSANDEYES LLC
Reel/Frame 054476/0337 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 13, 2020
From: HADDOW, THOMAS; OLIVEIRA, RICARDO V.
To: THOUSANDEYES, INC.
Reel/Frame 051500/0965 →
Continuity (1)
Provisional Application 62750193 · Oct 24, 2018
Cited By (4)
US 12,609,883 US 12,634,319 US 12,665,804 US 12,701,054