A network management apparatus according to an embodiment includes: an acquiring unit which acquires an information object related to a plurality of occurrence paths of a failure in a logical layer of a network configuration; and a retrieving unit which: retrieves, as a candidate of a facility to be a failure cause, information objects related to the facility layer and the physical layer commonly associated with the information object related to the plurality of occurrence paths of the failure having been acquired by the acquiring unit among information objects related to the facility layer; calculates, for each of the retrieved information objects related to the candidate of a facility to be the failure cause, the number of information objects which are associated with the object and which are related to the plurality of occurrence paths of the failure as a multiplicity; and calculates, for each of the retrieved information objects related to the candidate of a facility to be the failure cause, a proportion of the multiplicity with respect to the number of information objects in the logical layer which are affected when the failure occurs in the object.

An information processing method executed by a processor included in an information processing device includes acquiring, when an error occurred at the information processing device is detected, first identification information that include identification information of a transmission source of a first packet transmitted or received when the error has occurred and identification information of a transmission destination of the first packet; receiving a second packet; determining whether second identification information included in the second packet matches with the first identification information, the second identification information including identification information of a transmission source of the second packet and identification information of a transmission destination of the second packet; storing data corresponding to the second packet when it is determined that the second identification information matches with the first identification information; and transmitting the data to a management device that analyzes the error when an instruction is received from the management device.

Various embodiments are generally directed to techniques for dynamic network resiliency, such as by monitoring and controlling the configuration of one or more network components to ensure proper endpoint alignment, for instance. Some embodiments are particularly directed to a tool (e.g., resiliency agent) that can automatically recognize symptoms of issues with a network component, such as autoscaling, latency, traffic spikes, resource utilization spikes, etcetera, and respond appropriately to ensure continued and optimized operation of the network component. In many embodiments, the tool may dynamically reroute endpoint traffic, perform traffic balancing, and/or drive autoscaling to optimize operation of the network component in response to recognizing symptoms.

The disclosure describes techniques that enable a network device to determine a confidence level for a network alarm and provide information indicative of the confidence level to other devices. For example, a network device may experience any number of conditions that cause the network device to output an alarm. In addition to or instead of simply sending out the alarm, the network device may perform operations to determine a confidence level associated with the alarm. For instance, the network device may determine whether the conditions that caused the alarm continue or whether the conditions can be validated. The network device may output information indicative of the confidence level.

Techniques for identifying nodes in a data center fabric that are affected by a failure in the fabric, and selectively sending disaggregation advertisements to the nodes affected by the failure. The techniques include a process where a component monitors the network fabric to identify communication paths between leaf nodes, and determines what leaf nodes would be affected by a failure in those communication paths. The component may detect a failure in the network and determine which communication paths, and thus which leaf nodes, are affected by the failure and send disaggregation advertisements to the affected leaf nodes. In some examples, ingress leaf nodes send data through the fabric that indicate egress nodes for the communication paths. Intermediate nodes along may receive the data from the leaf nodes to identify communication paths, and the notify only affected nodes upon detecting a failure in the network.

Embodiments of the present invention disclose an alarm information processing method, including: acquiring, by an EMS, a first alarm information set reported by a VNFM, where the first alarm information set is generated after the VNFM performs correlation analysis on at least one piece of NFVI alarm information and at least one piece of VIM alarm information; acquiring, by the EMS, a second alarm information set reported by a VNF, where the second alarm information set includes at least one piece of VNF alarm information; and performing, by the EMS, correlation analysis on the first alarm information set and the second alarm information set, and dispatching a configured work order for alarm information that has a correlation relationship. By using the present invention, a cross-layer association between alarm information can be implemented to reduce a quantity of work orders.

Generally described, systems and methods are provided for monitoring and detecting causes of failures of network paths. The system collects performance information from a plurality of nodes and links in a network, aggregates the collected performance information across paths in the network, processes the aggregated performance information for detecting failures on the paths, analyzes each of the detected failures to determine at least one root cause, and initiates a remedial workflow for the at least one root cause determined. In some aspects, processing the aggregated information may include performing a statistical regression analysis or otherwise solving a set of equations for the performance indications on each of a plurality of paths. In another aspect, the system may also include an interface which makes available for display one or more of the network topology, the collected and aggregated performance information, and indications of the detected failures in the topology.

A system may monitor transaction data pertaining to a plurality of transaction types received by a network order fulfillment system. The system may classify the transaction data into a plurality of alarm types based on pre-defined impact of an alarm type to a given transaction type. The system may analyze a plurality of performance parameters influencing a performance of the network order fulfillment system, and identify a performance parameter exhibiting an anomaly based on historical data, a current status of the plurality of the performance parameters and a predefined prediction model. The system may ascertain whether the identified performance parameter negatively impacts the performance of the network order fulfillment system, based on evaluation rules. The system may proactively implement a remediation action to remediate a potential fault caused by the identified performance parameter when the identified performance parameter negatively impacts the performance of the network order fulfillment system.

A controller implemented on computing equipment may control switches in a network. The controller may provide flow tables that implement network policies to the switches to control packet forwarding through the network. The controller may provide debug table entries to the switches for use in a debug table that is separate from the flow table. The debug table entries may match incoming network packets and increment corresponding counters on the switches. The controller may retrieve count information from the counters for performing debugging operations on the network. For example, the controller may identify conflicts between fields of a selected flow table entry, determine whether elephant packet flows are present between switches, determine whether desired load balancing is being performed, determine whether a network path has changed, determine whether packet loss has occurred, and/or determine whether network packets are taking undesired paths based on the retrieved count information.

A method of detecting loss of data connection in a plurality of links between an exchange and one or more of a plurality of network terminals arising during presence of a user at an intervention point node on the links between the exchange and the network terminals, comprising: receiving connection information about a loss of data connection on any one of the links; receiving duration information about a duration of the user presence at the intervention point node; determining if the loss of data connection occurred within the user presence duration; causing line tests to be conducted on each of the links for which loss of data connection is determined to have occurred within the user presence duration; receiving results of the line tests including a number of links being determined, by the line test, to exhibit a fault; and determining if the number of links determined to exhibit a fault exceeds a predetermined threshold number.