The disclosed subject matter relates to data network monitoring systems and processes such as may find use in network performance reporting and analysis. More particularly, this disclosure relates to a novel and improved method and system for dynamically generating and presenting three-dimensional, time-based video images representing network performance and quality of service across data networks of a wide variety of sizes located in myriad geographic locations worldwide.
Network diagnostics provide requisite visibility for managing network performance to avoid unexpected and costly consequences of failing to have key diagnostic information. Visibility is so important that it stands alone as a sentence in any document, text, or presentation on network performance. Imagine attempting to manage network performance across an enterprise without knowing who is using the network, when they are using the network, and without knowing if the routers and switches are running at their limits, or are failing intermittently.
The main areas of visibility required to effectively manage a network for performance may be divided into three major categories, including end-to-end response time, traffic flow data, and device performance information. Presently, a need exists to improve visibility in these three categories to provide necessary and sufficient visibility into or perception of the performance end users are experiencing as well as the performance of an IT organization's network. There is also the need to provide relevant diagnostic information to identify, manage, verify, and solve root cause issues within a network. While network availability may be visualized as red or green, for example, performance understanding may require many shades of colors in between.
Once a performance problem is identified, a next hurdle to overcome is lack of visibility into the root cause of the problem or even where the problem occurred. The causer may be within an application itself, a server that's hosting an application or the network. Often up to twenty highly paid IT professionals may require hours or even days to diagnose performance problems. Then, there is the time and expense of repairing the identified problems.
To determine if an application performance problem is caused by the network, engineers and managers need to know three things about the performance of critical links: (a) latency-how much time does it take for traffic to pass down the link?; (b) utilization and protocol information—what is using network links, when, and for how long?; and (c) packet drop-how much traffic is lost or delayed because of overflows in the queues?
Also, CPU use should be monitored and trended to ensure it remains within accepted bounds for optimal performance while providing enough room to handle atypical events that may occur within the network (such as an outbreak of a virus, or a major change in routing or switching tables). Memory utilization should also be monitored and trended to ensure that enough memory is available in free memory pools and available for allocation to key processes. Over-utilization of interface and backplane resources also can lead to packet drop, route flapping, reduction of data throughput, and device instability. For this reason, traffic utilization in both directions should be monitored separately so that congestion in either direction may be detected and corrected. Another significant contributor to network performance issues concerns the existence of errors in networking equipment due to hardware/software malfunction or configuration errors.
Presently, the methods and systems for dynamically viewing or otherwise sensing network performance are limited. Generally, such systems, while perhaps being capable of performing dynamic reporting and visualization, are two-dimensional, providing graphs and charts of network performance, and may fail to portray a clear view for all concerned with network performance analysis. Even for such systems and methods that provide understandable graphical representations of network performance, there is still much room for improvement and invention over presently known systems and methods.
Also, because of the large amount of network performance data that may be generated across a large enterprise network, it is simply not possible, using known systems to extract all meaningful data that network performance system may provide.
Accordingly, there is the need for a system that improvises the ability of a network provider to focus on the performance of key applications running over the network and identifying where there is opportunity for improvement.
There is a need for an improved visualization tool that allows an IT organization to make more informed infrastructure investments and resolve problems that impact the business.
There is a further need for a network performance monitoring system and method of operation that allows for global visibility for even the largest enterprises into all key metrics necessary to take a performance first approach to network management.
Techniques for dynamic, three-dimensional network performance and quality of service presentation and analysis are here provided that overcome or substantially eliminate limitations associated with prior methods and systems.
According to one aspect of the disclosed subject matter, a method and system are provided for representing network performance characteristics from a plurality of sources by providing in three-dimensions a plurality of client stations representations associated with a predetermined data and communications network using a video animation subsystem. The disclosed subject matter provides in three-dimensions at least one server station representations associated with a predetermined data and communications network using the video animation subsystem and a plurality of forms of data transmission representations for representing data transmission and communications between the plurality of client stations and the at least one server system using the video animation subsystem. The present disclosure further forms operational characteristics representations associated with the plurality of client stations representations, the at least one server system representation, and the plurality of forms of data transmission representations using the video animation subsystem, thereby forming a dynamic, three-dimensional representation of the network comprising the operational characteristics, the plurality of client stations, the at least one server system, the plurality of forms of data transmission. The dynamic, three-dimensional representation of the network interfaces with a network performance analysis system for further analyzing perceived operational characteristics representations with reference to a plurality of network performance metrics associated with the network performance analysis system.
These and other advantages of the disclosed subject matter, as well as additional novel features, will be apparent from the description provided herein. The intent of this summary is not to be a comprehensive description of the claimed subject matter, but rather to provide a short overview of some of the subject matter's functionality. Other systems, methods, features and advantages here provided will become apparent to one with skill in the art upon examination of the following FIGUREs and detailed description. It is intended that all such additional systems, methods, features and advantages be included within this description, be within the scope of the accompanying claims.
The features, nature, and advantages of the disclosed subject matter may become more apparent from the detailed description set forth below when taken in conjunction with the drawings in which like reference characters identify correspondingly throughout and wherein:
The disclosed subject matter provides data center appliance that passively monitors end-to-end performance for all users accessing local server farm services. The present disclosure provides, in particular, a dynamic three-dimensional, visual representation of end-user response time and identifies network, server, and application components for measuring user throughputs, loss rates, byte rates, session refusals, and other metrics. In certain embodiments, the present disclosure dynamically provides visual and auditory representations of network performance metrics, which metrics representations are highly user controllable. As a result, the present disclosure allows a user to automatically detect and investigate performance issues in real time. Using the dynamic three dimensional representation of the present disclosure, both availability and performance SLAs to document consistent levels of service quality for internal and external use.
The disclosed subject matter technique interprets network performance data from various sources and renders the results as an interactive, three-dimensional animation with associated sound. The output of this method is intuitive to understand, and offers an alternative method of viewing network performance data that presents the big picture and draws attention to where it is needed with reduced attentional and cognitive demands on the user.
This work is most likely differentiated from prior work in its use of domain-specific information to enhance the visualization's interpretability. It directly visualizes what is being measured and does so within a context that users can easily translate back to reality.
The dynamic, three-dimensional network performance monitoring display of the present disclosure provides a novel and valuable means of expressing the numerous functions that network performance monitoring system 54 performs. These processes include, but are not limited to a data pump service, a collector management service, a messenger service, a master batch service, a collector batch service, an inspector service, an inspector agent service, and a MySQL service.
The network performance monitoring service connects back to the master database and pulls configuration to perform the actual data collection by listening in on the monitor NIC(s). It creates data files that are transferred by the collector management service and on the other end, the master batch service.
The collector management service listens on port 8080 for requests for moving super agent data files to the collector. The messenger service listens for commands for controlling the collector (reboot, restart, reload, status, etc.) on port 1000. The inspector agent service can be stopped/restarted at anytime. Whenever an investigation occurs, it goes through the inspector agent. Any failures that occur in the inspector service are logged into the Windows event log under application. The Windows event log is adjusted to become a circular log to avoid disk space failures related to log growth. The master batch service pulls datafiles and places them in the datafiles directory and polls collectors via port 8080. The data pump service loads data into database, constructs cache files to speed up common reports, builds summary database tables, performs backup database if scheduled backup is enabled, deletes old data, and cleans up old images.
The inspector service conducts scheduled investigations. Opens/Closes and tracks incidents. When appropriate, the service will attempt to send email via mailpage.exe. The inspector service performs the availability checking, which may involve pinging servers or connecting to application ports if there is no passive evidence that the application is working. Also, the inspector service computes nightly baselines and alarm thresholds. Network performance monitoring system 54 also provides event detection, basic event reduction, and active investigations based on type of event detected. For a server it is possible to launch an SNMP poll and/or ping response times. For a client region it is possible to launch a trace route. For an application it is possible to launch an application port. For ping investigation it is possible to manually ping a device with a range of packet sizes. All of the above services are described in product literature associated with the NetQoS SuperAgent® product line and are here incorporated by reference.
Thus, as
Having introduced the collector processes 120 and master processes 140 of network performance monitoring system 54, the interaction between these processes is presented.
The XNA Framework is based on the .NET Framework 2.0. It includes an extensive set of class libraries, specific to game development, to promote maximum code reuse across target platforms. The framework runs on a version of the Common Language Runtime that is optimized for gaming to provide a managed execution environment. The runtime is available for Windows XP, Windows Vista and Xbox 360. Since XNA games are written for the runtime, they can run on any platform that supports the XNA Framework with minimal or no modification. Games that run on the framework may be written in C# using the XNA Game Studio Express IDE.
The XNA Framework encapsulates low-level technological details involved in coding a game, making sure that the framework itself takes care of the difference between platforms when games are ported from one compatible platform to another, and thereby allowing game developers to focus more on the content and gaming experience. The XNA Framework integrates with a number of tools, such as XACT, to aid in content creation. These tools can help author the visuals or sounds in the game, and model characters with life-like dynamism.
The XNA Framework provides support for 3D game creation, and allows use of the Xbox 360 controllers and vibrations. The Xbox Live Marketplace allows programmers to upgrade their version of XNA Game Studio Express and let them play games on their Xbox 360.
XNA also provides a set of game asset pipeline management tools, which help by defining, maintaining, debugging, and optimizing the game asset pipeline of individual game development efforts. A game asset pipeline describes the process by which game content, such as textures and 3D models, are modified to a form suitable for use by the gaming engine. XNA Build helps identify the pipeline dependencies, and also provides API access to enable further processing of the dependency data. The dependency data can be analyzed to help reduce the size of a game by finding content that is not actually used.
Now, with reference to
Using the present system, numerous metrics can be presented simultaneously, increasing the amount of information conveyed and allowing users to make visual correlations to identify significant events. Auditory cues inform users whose attention is primarily elsewhere. While graphs require full attention, sounds can be readily ignored until their pattern is broken. Visual and auditory cues presented in this manner leverage the pattern-detecting abilities of the human brain: rather than using machine pattern detection to send single alerts, a continuous stream of background noise affected in subtle ways by network performance data invokes the user's natural pattern-detection abilities. Since this application provides a great deal of information at a glance, it can be used as an entry point to a more detailed analysis environment within the context of interest. For example, a means could be provided by which one could launch a web application to view various information about a server's performance by clicking on that server from within the visualization. In general, this method would be useful in a number of domains. However, each particular implementation is inherently domain-specific.
The speed of the request varies according to Network Round Trip Time, and its length or size, depending on a particular implementation, varies according to the measured volume of data. As used herein, the term “request” within a visualization includes a representation of the traffic for a particular application from a particular client region to a particular server summarized over a period of time (e.g, five (5) minutes, such as in the SuperAgent® network performance monitoring system 54. Upon reaching the server, the request stops for a period of time related to the server response time as measured by SuperAgent, and is then sent back to the client.
In summary, the disclosed subject matter provides a method and system for representing network performance characteristics from a plurality of sources and provides in three-dimensions a plurality of client stations representations, at least one server station representations, and a plurality of forms of data transmission representations for representing data transmission and communications between said plurality of client stations and said at least one server system using said video animation subsystem. The present disclosure includes forming operational characteristics representations associated with said plurality of client stations representations, said at least one server system representation, and said plurality of forms of data transmission representations using said video animation subsystem, thereby forming a dynamic, three-dimensional representation of the network comprising said operational characteristics, said plurality of client stations, said at least one server system, said plurality of forms of data transmission. Furthermore, the present disclosure interfaces said dynamic, three-dimensional representation of the network with a network performance analysis system for further analyzing perceived operational characteristics representations with reference to a plurality of network performance metrics associated with said network performance analysis system.
The presently disclosed subject matter presenting dynamic, three-dimensional representation of the network as a navigable three-dimensional space through which a user may travel to more closely analyze selected aspects of the network and simultaneously forming operational characteristics representations associated with said plurality of client stations representations, said at least one server system representation, and said plurality of forms of data transmission representations from a plurality of independent sources providing operational characteristics. Furthermore, the present disclosure includes generating auditory signals relating to said operational characteristics representations and correlating the speed of transmitting said data transmission within said network to a pitch of said auditory signal.
A further aspect of the present disclosure includes presenting said operational characteristics representations as a plurality of differing colors for said plurality of client stations representations, said at least one server system representation, and/or said plurality of forms of data transmission representations according to the network performance of said plurality of client stations, said at least one server system, and said plurality of forms of data communication. The present system correlates auditory signals relating to said operational characteristics representations with said plurality of differing colors.
The disclosed method and system visually demonstrate an alarm condition for said plurality of client stations representations, said at least one server system representation, and/or said plurality of forms of data transmission representations according to respectively reaching an alarm setpoint relating to said plurality of client stations, said at least one server system, and/or said plurality of forms of data transmission. The representations appear as smoking in the event of a respectively reaching a reduced operational status and as burning in the event of an even further reduced operational status. In addition, the disclosed system visually demonstrates the rate of transmitting said plurality of forms of data transmission, as well as visually demonstrating the failure of transmitting any one of said plurality of forms of data transmission.
A further aspect of the disclosed subject matter includes selectively providing a reduced subset of said plurality of client stations representations, said at least one server system representation, and/or said plurality of forms of data transmission representations using a filtering operation for said selected ones of said plurality of client stations, said at least one server system, and/or said plurality of forms of data transmission.
As seen above, the data network representation features and functions described herein for representing network performance characteristics from a plurality of sources and providing in three-dimensions a plurality of client stations representations associated with a predetermined data and communications network using a video animation subsystem may be implemented in various manners. For example, the present embodiments may be implemented in an application specific integrated circuit (ASIC), a microcontroller, a digital signal processor, or other electronic circuits designed to perform the functions described herein. Moreover, the process and features here described may be stored in magnetic, optical, or other recording media for reading and execution by such various signal and instruction processing systems. The foregoing description of the preferred embodiments, therefore, is provided to enable any person skilled in the art to make or use the claimed subject matter. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without the use of the innovative faculty. Thus, the claimed subject matter is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.