US5539659A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Network analysis method
Assignee: HP Inc
•
Filing: 1994-02-18
•
Granted: 1996-07-23
•
Expires: 2014-02-18
Abstract
Abstract A network analysis method for use in relation to a network having a plurality of entities, each with associated traffic, involves an analysis task comprising the steps of monitoring the network to collect data on entity traffic for a period of network operation, analyzing this data in respect of an entity operational characteristic by which the entities may be ordered into a ranking, forming an end set of at least one entity at one end of said ranking, and storing the identity of the or each entity making up that end set. The analysis task is carried out for a succession of N periods, where N is an integer greater than unity, to form an extended historical record of entities in the end sets for those N periods; the analysis task is then carried out for a further period and the entities in the resulting newly-created end set are compared with the entities in the extended historical record, to identify any entity (an `unusually-behaved` entity) that is in the newly-created end set but not also in the historical record.
Inventors
- 👤 Neil McKee
- 👤 Peter Phaal
- 👤 Colin Low
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 19:37
CPC Classifications
H; H04; H04L; H04L43/00
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
209 words
A network analysis method for use in relation to a network having a plurality of entitles each with associated traffic, the network analysis method comprising performing plural analysis tasks, each of the analysis tasks including (a) monitoring the network to collect data on entity traffic for a period of network operation, (b) analyzing the collected data in respect to an entity operational characteristic by which the entities can be ordered into a ranking, (c) forming an end set of at least one entity at one end of said ranking, and (d) storing the identity of the or each entity making up that end set; causing respective said analysis tasks to be carried out for each of a succession of N network operation periods (where N is an integer greater than unity) and forming an extended historical record of entities in said end sets for the N periods; and carrying out another one of the said analysis tasks for a further one of said periods to produce a newly created end set, comparing the entities in the newly created end set with the entities in said extended historical record, an identifying and entity, herein an unusually-behaved entity, that is in the newly-created end set but not also in said record.
Claim 2
Dependent Claim
209 words
A network analysis method for use in relation to a network having a plurality of entitles each with associated traffic, the network analysis method comprising performing plural analysis tasks, each of the analysis tasks including (a) monitoring the network to collect data on entity traffic for a period of network operation, (b) analyzing the collected data in respect to an entity operational characteristic by which the entities can be ordered into a ranking, (c) forming an end set of at least one entity at one end of said ranking, and (d) storing the identity of the or each entity making up that end set; causing respective said analysis tasks to be carried out for each of a succession of N network operation periods (where N is an integer greater than unity) and forming an extended historical record of entities in said end sets for the N periods; and carrying out another one of the said analysis tasks for a further one of said periods to produce a newly created end set, comparing the entities in the newly created end set with the entities in said extended historical record, an identifying and entity, herein an unusually-behaved entity, that is in the newly-created end set but not also in said record.
Claim 3
Dependent Claim
80 words
A method according to claim 1, wherein step (2) further includes, after identification of any said unusually-behaved entities, updating said extended historical record by replacing the entities that are there because of their presence in the end set relevant to the eldest of the N periods covered by the record, with the entities of the end set newly created in step (2); step (2) being repeated for successive said periods whereby to identify said unusually-behaved entities on an on-going basis.
Claim 4
Dependent Claim
65 words
A method according to claim 2, wherein said analysis task analyses the traffic data in respect of a plurality of different said operational characteristics; step (1) being operative to keep a respective said extended historical record in respect of each said operational characteristic, and step (2) identifying as an unusually-behaved entity, any entity identified as such in relation to at least one said operational characteristic.
Claim 5
Dependent Claim
16 words
A method according to claim 2, wherein each said entity is a node of the network.
Claim 6
Dependent Claim
18 words
A method according to claim 2, wherein each said entity is a pairing of nodes of the network.
Claim 7
Dependent Claim
20 words
A method according to claim 5, wherein said end set formed by said analysis task represents the top communicating entities.
Claim 8
Dependent Claim
16 words
A method according to claim 2, wherein each said entity is a sub-network of the network.
Claim 9
Dependent Claim
20 words
A method according to claim 7, wherein said end set formed by said analysis task represents the top communicating entities.
Claim 10
Dependent Claim
18 words
A method according to claim 2, wherein each said entity is a pairing of sub-networks of the network.
Claim 11
Dependent Claim
65 words
A method according to claim 1, wherein said analysis task analyses the traffic data in respect of a plurality of different said operational characteristics; step (1) being operative to keep a respective said extended historical record in respect of each said operational characteristic, and step (2) identifying as an unusually-behaved entity, and entity identified as such in relation to at least one said operational characteristic.
Claim 12
Dependent Claim
15 words
A method according to claim 1, wherein said entity is a node of the network.
Claim 13
Dependent Claim
46 words
A method according to claim 11, wherein the end set formed by the analysis task is one of the following: top source nodes for traffic; top destination nodes for traffic; top server nodes; top client nodes; top source nodes for broadcasts; top source nodes for multicasts.
Claim 14
Dependent Claim
18 words
A method according to claim 1, wherein each said entity is a pairing of nodes of the network.
Claim 15
Dependent Claim
20 words
A method according to claim 13, wherein said end set formed by said analysis task represents the top communicating entities.
Claim 16
Dependent Claim
16 words
A method according to claim 1, wherein each said entity is a sub-network of the network.
Claim 17
Dependent Claim
17 words
A method according to claim 15, wherein each said sub-network is a logical segment of the network.
Claim 18
Dependent Claim
20 words
A method according to claim 15, wherein said end set formed by said analysis task represents the top communicating entities.
Claim 19
Dependent Claim
19 words
A method according to claim 1, wherein each of said entities is a pairing of sub-networks of the network.
Claim 20
Dependent Claim
20 words
A method according to claim 18, wherein said end set formed by said analysis task represents the top communicating entities.
Claim 21
Dependent Claim
18 words
A method according to claim 1, wherein each of said entities is a destination external to the network.
References Cited (Backward Citations)
WO1989001266A1
Cited
US5049873A
Cited
WO1990000331A1
Cited
US5253248A
Cited
EP0474932A1
Cited
EP0480555A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-07-23 | 2000-01-22 | 2000-07-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-07-23 | 2004-01-22 | 2004-07-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-07-23 | 2008-01-22 | 2008-07-23 | $7700.00 | Window Closed / Lapsed |