Research And Design Of Event-based Network Management System

With the development of network technology, computer network becomes larger and larger in its scale, gets increasingly complicated in its topological architecture. More and more network elements are included into network. Network elements can produce various kinds of routine events which can indicate their running state, e.g. broken link, network congestion, etc. It is very important to effectively monitor these network events for sound network management. Traditional network management systems focus on monitoring current state of a single network element, collecting state data and directly submitting them to administrators for analysis. However, in computer network, there are correlations among events. A simple network problem alone can make many devices and subsystems produce a lot of related events, even worse, an "event storm" may arise as a result. So network management system must be capable of managing and correlating events, which will help administers to quickly decide original faults and detect security attack events.Based on the analysis of event correlation methodology, this paper is expected to discuss a basic model of event-based network management system, and develop an event-based network management system, named ESEC, to meet real-life requirements.ESEC has two ways to collect network events:polling and asynchronous detecting methods. Using plug-in to collect data is one of characteristics of ESEC. In ESEC, hard coding and rule-based reasoning are used to correlate events. The former is suitable for event correlation based on network topological architecture; the latter is used to correlate asynchronous events with rule-based reasoning, e.g. Syslog, SNMP Trap. To have powerful ability of rule-based reasoning, SEC is integrated in the system. On event alert function, ESEC provides there ways to notify administrators, display in management GUI, Email and make sound to notice.Core code of ESEC network management system is developed with C program. Integration of the core and SEC make ESEC system highly effective. GUI of ESEC is based on B/S, which is easy to use.ESEC network management system aims at reducing repeated and redundant network events. With the help of event correlation technology, ESEC make it, and can monitor network devices, servers and network services.