Systems and methods for time based sorting and display of captured data events in a multi-protocol communications system
View Patent ↗Systems, device and methods are provided for displaying time sorted data events captured in a multi-protocol communications system. Initially, data events are captured in connection with detection of one or more trigger conditions, and each captured data event includes a clock timestamp. The captured data events are then sorted and displayed by a graphical user interface according to their respective clock timestamp. Once the data events have been sorted and displayed, then the temporal relationships and causal relationships, if any, between and among the captured data events can be determined.
1. A method for processing data events captured in a multi-protocol communications system, the method comprising:
capturing first data events at a first link analyzer, the first link analyzer being disposed in an in-line arrangement with respect to a first data stream corresponding to a first communication protocol;
capturing second data events at a second link analyzer, the second link analyzer being disposed in an in-line arrangement with respect to a second data stream corresponding to a second communication protocol that is different from the first communication protocol;
generating a clock at the first link analyzer;
timestamping the first data events with timestamps using the clock as a reference;
propagating the clock from the first link analyzer to the second link analyzer;
timestamping the second data events with timestamps using the propagated clock as a reference;
sorting at least some of the first captured data events with respect to at least some of the second captured data events according to the respective clock timestamps associated with each of the first and second captured data events; and
displaying at least some of the sorted data events by way of a graphical user interface.
2. The method as recited in claim 1 , wherein the displayed data events represent at least two different communication protocols selected from the group consisting of: Infiniband; Gigabit Ethernet; SONET; Fibre Channel; and PCI Express.
3. The method as recited in claim 1 , wherein the clock is one of: a reference clock; and a protocol clock.
4. The method as recited in claim 1 , wherein the displayed data events are presented on the graphical user interface such that a temporal relationship between at least two of the displayed data events is apparent from the display.
5. The method as recited in claim 4 , wherein the temporal relationship comprises one of the following: a first data event preceded by a second data event; a first data event followed by a second data event; a first data event overlapped by a second data event; and a first data event and second data event commenced simultaneously and also concluded simultaneously.
6. The method as recited in claim 4 , further comprising using information concerning the temporal relationship to facilitate determination of whether or not a causal relationship exists between the at least two sorted data events.
7. The method as recited in claim 1 , further comprising displaying information concerning at least some of the displayed data events, wherein the displayed information includes at least one of: a data event start time; a data event stop time; a data event delta time; a data event type; an analyzer port in connection with which a data event was captured; a timestamp value; and a protocol type.
8. A method for processing data events associated with a multi-protocol communications system, the method being suitable for use in connection with a multi-link protocol analyzer and comprising:
capturing first data events at a first link analyzer, the first link analyzer being disposed in an in-line arrangement with respect to a first data stream corresponding to a first communication protocol;
capturing second data events at a second link analyzer, the second link analyzer being disposed in an in-line arrangement with respect to a second data stream corresponding to a second communication protocol that is different from the first communication protocol;
generating a clock at the first link analyzer;
timestamping the first data events with timestamps using the clock as a reference;
propagating the clock from the first link analyzer to the second link analyzer;
timestamping the second data events with timestamps using the propagated clock as a reference;
sorting at least some of the first captured data events with respect to at least some of the second captured data events according to the respective clock timestamps associated with each of the first and second captured data events; and
displaying at least some of the sorted data events by way of a graphical user interface such that a temporal relationship between at least two of the displayed data events is apparent from the display.
9. The method as recited in claim 8 , wherein the displayed data events represent at least two different communication protocols selected from the group consisting of: Infiniband; Gigabit Ethernet; SONET; Fibre Channel; and PCI Express.
10. The method as recited in claim 8 , wherein the clock is one of: a reference clock; and a protocol clock.
11. The method as recited in claim 8 , wherein the temporal relationship comprises one of the following: a first data event preceded by a second data event; a first data event followed by a second data event; a first data event overlapped by a second data event; and a first data event and second data event commenced simultaneously and also concluded simultaneously.
12. The method as recited in claim 8 , further comprising determining whether a causal relationship exists between at least two displayed data events based upon the temporal relation between the at least two displayed data events.
13. The method as recited in claim 8 , further comprising displaying information concerning at least some of the displayed data events, wherein the displayed information includes at least one of: a data event start time; a data event stop time; a data event delta time; a data event type; an analyzer port in connection with which a data event was captured; a timestamp value; and a protocol type.
14. A method for processing data events associated with a multi-protocol communications system, the method being suitable for use in connection with a multi-link protocol analyzer and comprising:
capturing first data events at a first link analyzer, the first link analyzer being disposed in an in-line arrangement with respect to a first data stream corresponding to a first communication protocol;
capturing second data events at a second link analyzer, the second link analyzer being disposed in an in-line arrangement with respect to a second data stream corresponding to a second communication protocol that is different from the first communication protocol;
capturing third data events at a third link analyzer, the third link analyzer being disposed in an in-line arrangement with respect to a third data stream corresponding to a third communication protocol that is different from the first and second communication protocols;
generating a clock at the first link analyzer;
propagating the clock from the first link analyzer to the second and third link analyzers;
timestamping the first, second, and third data events with timestamps using the clock propagated from the first link analyzer as a reference;
sorting at least some of the captured first captured data events with respect to at least some of the second data events according to the respective clock timestamps associated with each of the first and second captured data events; and
displaying the sorted data events in a display by way of a graphical user interface such that a temporal relationship between at least two of the displayed data events is apparent from the display.
15. The method as recited in claim 14 , wherein the displayed data events represent at least two different communication protocols selected from the group consisting of: Infiniband; Gigabit Ethernet; SONET; Fibre Channel; and PC1 Express.
16. The method as recited in claim 14 , wherein the clock is one of: a reference clock; and a protocol clock.
17. The method as recited in claim 14 , wherein the temporal relationship comprises one of the following: a first data event preceded by a second data event; a first data event followed by a second data event; a first data event overlapped by a second data event; and, a first data event and second data event commenced simultaneously and also concluded simultaneously.
18. The method as recited in claim 14 , further comprising determining whether a causal relationship exists between at least two displayed data events based upon the temporal relation between the at least two displayed data events.
19. The method as recited in claim 14 , further comprising displaying information concerning at least some of the displayed data events, wherein the displayed information includes at least one of: a data event start time; a data event stop time; a data event delta time; a data event type; an analyzer port in connection with which a data event was captured; a timestamp value; and a protocol type.
20. The method as recited in claim 14 , wherein the clock is propagated in series from the first link analyzer to the second link analyzer and from the second link analyzer to the third link analyzer.
21. The method as recited in claim 14 , wherein the clock is propagated in parallel from the first link analyzer to the second and third link analyzers.
22. A computer program product for implementing a method for processing data events captured in a multi-protocol communications system, the computer program product comprising:
physical storage computer readable medium storing computer executable instructions for performing the method, wherein the method comprises:
capturing first data events at a first link analyzer from a data stream corresponding to a first communication protocol;
capturing second data events at a second link analyzer from a data stream corresponding to a second communication protocol that is different from the first communication protocol;
timestamping the first data events with timestamps using a clock generated at the first link analyzer as a reference;
timestamping the second data events with timestamps using the clock generated at the first link analyzer as a reference;
sorting at least some of the captured first captured data events with respect to at least some of the second data events according to the respective clock timestamps associated with each of the captured first and second data events; and
displaying at least some of the sorted data events by way of a graphical user interface such that a temporal relationship between at least two of the displayed data events is apparent from the display.
23. The computer program product as recited in claim 22 , wherein the displayed data events represent at least two different communication protocols selected from the group consisting of: Infiniband; Gigabit Ethernet; SONET; Fibre Channel; and PCI Express.
24. The computer program product as recited in claim 22 , wherein the clock is one of: a reference clock; and a protocol clock.
25. The computer program product as recited in claim 22 , wherein the temporal relationship comprises one of the following: a first data event preceded by a second data event; a first data event followed by a second data event; a first data event overlapped by a second data event; and, a first data event and second data event commenced simultaneously and also concluded simultaneously.
26. The computer program product as recited in claim 22 , wherein the method further comprises determining whether a causal relationship exists between at least two displayed data events based upon the temporal relation between the at least two displayed data events.
27. The computer program product as recited in claim 22 , wherein the method further comprises displaying information concerning at least some of the displayed data events, wherein the displayed information includes at least one of: a data event start time; a data event stop time; a data event delta time; a data event type; an analyzer port in connection with which a data event was captured; a timestamp value; and, a protocol type.