Method and apparatus for collecting and displaying network device information

TECHNICAL FIELD

0001This disclosure relates in general to network monitoring systems. More specifically, the disclosure relates to a method and apparatus for collecting and displaying data associated with network devices.

BACKGROUND ART

0002The Simple Network Management Protocol (SNMP) has become the standard for network management. Network management systems utilizing SNMP contain two primary elements: a manager and agents. The Manager is the console through which the network administrator performs network management functions. Agents are the entities that interface to the actual device being managed. Hubs, bridges, routers and servers are examples of managed devices that contain managed objects. These managed objects might contain hardware inventory data, configuration parameters, and performance statistics that directly relate to the current operation of the device. These objects are arranged in what is known as a management information base (MIB). Each managed object has an object identifier SNMP allows managers and agents to communicate for the purpose of accessing these objects.

0003With the embracing of SNMP by network device vendors, the amount of MIB data contained in an organization's information technology (IT) department has become so large that isolating useful management information requires a fair degree of knowledge, expertise, and time. As a result, much of the SNMP instrumentation developed by device vendors, and the resulting network management capabilities, are not utilized by the typical IT professional.

0004As such, many typical network management systems suffer from deficiencies in providing easy access to and use of management information. Accordingly, there is a need for an improved method and apparatus for collecting and displaying network device information.

0005<patcit id="pcit0001" dnum="US6272537B"><text>US Patent No. 6272537</text></patcit> discloses a client-server network management system that includes: a plurality of managed computer network elements, a managed element server that executes on a first computer; and at least one managed element server client that typically executes on a second computer. The managed element server and managed element server client are computer processes that execute from memory of their respective computers. The client-server network management system is really two applications in one: a visual element manager builder and a manager. The manager provides the run-time environment in which element managers are executed to monitor and manage computer network behavior such as network throughput, collision rate, and number of duplicate IP packets, to name a few. The manager portion of managed element server is independent of any graphic user interface. The logic and structure of the manager of managed element server is cleanly separated from the graphic user interfaces. The visual element manager builder is a visual development environment in which device vendors or network managers may create standardized element management applications, called element managers. A user can build an element manager without writing any computer code. In addition, a user can edit an element manager without writing any computer code. A graphic user interface displayed by the client includes a visual image of a computer network element being managed. As a user looks at the visual display in the graphic user interface, the user is provided the same visual information as if the user where physically present at the location of the managed computer network element. Thus, at a glance, a user can obtain considerable information about the status of the computer network element as represented by the visual display.

DISCLOSURE OF THE INVENTION

0006In one aspect the present invention provides a network monitoring system as claimed in Claim 1. In another aspect the present invention provides a method of monitoring a network as claimed in Claim 9.

0007In an additional embodiment, the disclosure is directed to a device definition file. The device definition file includes query instructions for accessing a management information base using the simple network management protocol, supplemental data associated with the network device, and computer-implement instructions for unit conversion of at least one field of retrieved data associated with the query instructions.

0008Another embodiment disclosed is an interface. The interface is presented on a display. The interface includes response data from a query to a network device using a simple network management protocol and a device definition file. The user interface also includes supplemental data associated with the network device and stored in the device definition file. The user interface also includes converted data derived from the response data in accordance with the device definition file.

0009Further exemplary embodiments are directed to a method of generating a device definition file. The method includes the steps of determining an object identification associated with a management information base of a network device; generating query instructions associated with the object identification; adding supplemental data to the query instructions, and providing a unit conversion code to the query instructions. The supplemental data and unit conversion code are associated with the object identification.

0010Additional exemplary embodiments are directed to a method of producing data associated with a network device. The method includes the steps of accessing the network device using query instructions associated with a device definition file and an associated simple network management protocol interface; receiving response data from the network device; converting the response data in accordance with the device definition file to produce converted data. <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">FIGs. 1 and 2</figref> depict exemplary embodiments of network management systems.</li><li><figref idref="f0002">FIG. 3</figref> depicts an exemplary embodiment of a device definition file.</li><li><figref idref="f0002">FIGs. 4</figref> and <figref idref="f0003">5</figref> depict exemplary methods for use by a network management system.</li><li><figref idref="f0004">FIGs. 6, 7</figref>, <figref idref="f0005">8 and 9</figref> depict exemplary interfaces of a network management system.</li></ul>

0011The use of the same reference symbols in different drawings indicates similar or identical items.

MODE(S) FOR CARRYING OUT THE INVENTION

0012A large number of networkable devices conform to Simple Network Management Protocol (SNMP). Each of these devices has a management information base (MIB) that may contain several thousand entries or object identifications (OID). A few of these OIDs relate to environmental and physical conditions such as temperature, power quality, and fan speed. Some other OIDs may relate to current, voltage, humidity, dew point, audio, and motion. Other OIDs provide descriptions relating to OIDs having numerical values. The present disclosure describes a system and method for accessing, collecting, and storing selected data using SNMP, MIBs, and OIDs.

0013The disclosure discusses a data preparation system and a network monitoring system. The data preparation system has a set of mechanisms to prepare a data file that isolates and surfaces the pertinent OIDs for a specified network-attached device, optionally adds supplemental data, and performs unit conversions. The network monitoring system displays the results from the data preparation system in a user-interface, in which typical SNMP-based monitoring activities can be performed by the user.

0014<figref idref="f0001">FIG. 1</figref> depicts an exemplary embodiment of a network management system. The network management system 102 includes a device definition file (DDF) 104. This device definition file 104 may be considered as part of the data preparation system and may include query instructions, supplemental data, conversion instructions, and other information associated with a network device 108. The network management system 102 may be coupled to the network device 108 through the network and may communicate using network management protocols, such as Simple Network Management Protocol (SNMP), and other communications protocols. For example, the network management system 102 may use the query instructions associated with the device definition file 104 to make an SNMP query to the network device 108. The query may, for example, request physical and environmental data such as temperature, fan speeds, and power quality. In other example, the data may include current, voltage, humidity, dew point, audio information, and motion information. The network device 108 may then return response data to the network management system 102. The network management system 102 may augment the response data with supplemental data associated with the device definition file 104 or may perform calculation on the data such as unit conversions in accordance with the device definition file 104. The network management system 102 may also compare the response data with threshold values. In response to this comparison, the network management system 102 may send a notification to the user 106.

0015The network management system 102 may query the network device 108 periodically or on prompting by a user 106. The network management system 102 may monitor the performance of the network device 108 by periodically querying the network device 108 with the queries associated with the device definition file 104. Alternately, a user 106 may request information or data regarding network device 108. In response to this request, the network management system 102 may access the network device 108 with queries associated with the device definition file 104. In either case, the network device 108 returns response data, which is then augmented with supplemental data and unit conversions associated with the device definition file 104 and provided to the user 106.

0016The user 106 and network device 108 may be coupled to the network management system 102 through the same or different networks. The device data may be supplied to the user 106 using various transfer protocols and methods including HTTP, FTP, and TCP/IP, among others. For example, the network management system 102 may supply an HTML-based page to the user 106. Alternately, the network management system 102 may provide a data file to the user 106 through FTP transfer. In a further example, the network monitoring system 102 may send a notification of the data through Simple Mail Transfer Protocol (SMTP) or a text messaging protocol.

0017The network management system 102 may acquire the device definition file 104 from a repository 110. This acquisition may be in response to discovering a device 108 on the network, periodically checking for updates to device definition files, or at the prompting of the user 106.

0018Exemplary embodiments may be implemented on various forms of equipment. One exemplary embodiment may be implemented on a network appliance. A network appliance may be, for example, a stand-alone device built to perform a well-defined set of functions and that is capable of connecting to a global network such as the Internet. The appliance may include software to configure, monitor, and control its functions via the global network. The appliance may include a processor subsystem. The processor subsystem may have a microprocessor, memory, and associated support circuitry necessary for the microprocessor to function. One exemplary embodiment may use a 32-bit RISC processor manufactured by Motorola. Other embodiments could utilize 16-bit or even 8-bit microprocessors. Other embodiments may include 64MB Flash memory for program storage, 128MB of RAM for data storage, and a real time clock (RTC).

0019The appliance may also include nonvolatile memory for maintaining state information in the event of power loss. The information stored in nonvolatile memory may include: device definition files (DDFs), configuration files, the values of the RTC for the beginning and end of the period that network performance data was measured, the last known state of network devices, and threshold data.

0020In one exemplary embodiment, the network management system 102 may be a miniaturized environmental monitoring unit with a web-enabled interface. This miniaturized environmental monitoring apparatus may be coupled to an intranet. Using device definition files, the miniaturized environmental monitoring unit may also communicate with devices on the intranet. This communication may be used to monitor environmental sensors on the devices or operational characteristics of the devices. The data acquired from the devices on the intranet may then be provided to a user. The user may be on a wide-area network or global network separate from the intranet. The miniaturized environmental monitoring system may also communicate with a central data repository or centralized management system such as Netbotz Central.

0021<figref idref="f0001">FIG. 2</figref> depicts an exemplary network management system 202. The network management system 202 may include computational circuitry 204, network connection(s) 206, a query engine 208, a device definition file(s) 210, an SNMP-enabled interface 212, and a data access interface 214. The network management system 202 may also include a device definition file generator 216 and threshold values 218.

0022The computational circuitry 204 may take the form of processors, memory and other communications circuitry for providing a computational platform. The network connections 206 may take various forms including wireless and hard-wired network connections such as Ethernet, wireless Ethernet, Bluetooth®, USB, serial connections, pager networks, telephone networks, other radio frequency connections, and other hard-wired connections. The network connections 206 may permit communication with other networked devices via various protocols including TCP/IP, HTTP, FTP, SNMP, SMTP, SNPP, text messaging protocols, and UDP, among others. The network management system 202 may include more than one network connection 206. For example, the network management system 202 may include a connection to an intranet. In addition, the network management system 202 may include a connection to an external network such as a wide-area network or a global network such as the Internet.

0023The network management system 202 may include a query engine 208 and device definition files 210 associated with devices to be monitored on a network. The query engine 208 may interpret query instructions associated with the device definition file 210. The device definition files 210 may include query instructions, associated OIDs, associated values and units, and descriptions associated with devices on the network. The device definition file 210 may also include supplemental data and conversion codes associated with the OlDs. A different device definition file 210 may be provided for each device on the network. Alternately, device definition files 210 may be provided for each type of network equipment. Also, the DDFs may be provided for each vendor of networked devices. For example, device definition files 210 may be provided for servers, routers, switches, and other SNMP-enabled networked equipment. The query engine 208 may also query a device on the network using the query instructions of the device definition file 210 to determine which subset of query instructions apply to a particular device.

0024The network management system 202 may also include an SNMP-enabled interface 212. The SNMP-enabled interface 212 may permit communication between the network management system 202 and devices on the network. Other interfaces may be provided for various network management protocols and the device definition files 210 or query engine 208 altered to communicate using these alternate protocols.

0025A data access interface 214 may also be provided. Users or central server systems may access this data access interface 214 to acquire response data from queries of network devices. The data access interface 214 may take various forms and communicate using various protocols such as HTTP, SMTP, FTP, and text messaging formats. For example, the data access interface 214 may provide an HTML, XML, or plain text file containing requested data associated with the device definition file 210 and devices on the network. Alternately, the data access interface 214 may provide for the FTP access of data files. In another embodiment, the data access interface 214 may provide for SMTP access to data. The network management system 202 may e-mail notifications and data to users. In a further embodiment, the network management system 202 may have access to pager networks or telephone networks and transmit data in associated formats. In this manner, physical and environmental data associated with a device, for example, may be supplied to a user.

0026The network management system 202 may also include a device definition file generator 216. The definition file generator 216 may generate device definition files from data acquired from devices on the network. The generation of the device definition file may be performed upon discovery of the device or at the direction of a user. The definition file generator 216 may acquire a device definition file from a repository or may generate a device definition file using MIB information associated with the device. In either case, the user may supplement data associated with the device object identifications and MIB. In addition the user may provide for unit conversions.

0027The network monitoring system 202 may also include threshold values 218. These threshold values 218 may be set by a user and compared with values acquired through queries to network devices. Threshold values 218 may also be acquired from manufacturer suggested values stored in the MIB. If a value or the response data violates or transgresses a threshold value, the network monitoring system 202 may establish an alarm or notify a user. For example, the network monitoring system 202 may email a notification to a user, page a user, or send a text message to a user's portable phone or PDA.

0028One exemplary embodiment may use a network appliance as the hosting platform. The network monitoring system may be software that includes the components necessary to monitor network devices via SNMP, and the components necessary to interface with the DDFs. The network monitoring subsystem may download the vendor-specific DDFs from a DDF repository located on a server on the Internet, or from the local console if the user does not have an Internet connection. It may have the capability to periodically check the repository for new and updated DDFs. The system may then use the DDF information derived from or along with the corresponding MIBs to display the monitoring information to the user. Other embodiments of the network monitoring system may display network management information that allows the user to directly manage, as well as monitor, their network devices.

0029A further exemplary embodiment may allow the setting of thresholds on the derived OID values so that the user can be alerted to abnormal or unwanted network device conditions via the network appliance. The format and style of the thresholds are dependent on the data type in question, and may be dependent on a series of data types in order to completely determine the threshold conditions. Other network performance data is also monitored, such as network roundtrip time. Future versions of the DDFs could contain vendor recommended threshold information.

0030This exemplary embodiment may allow for surfacing the current values and alert states to other network monitoring solutions, both SNMP based and non-SNMP based. SNMP traps can be generated for alert conditions, and both alarm notifications and periodic status may be reported via HTTP (both POST and GET methods), FTP (STOR method), email, and alphanumeric paging. Other embodiments of the network monitoring systems may utilize other standard network protocols available at the time. The exemplary embodiment may include provisions for the delivery of alert notifications and periodic status reports, using the previously listed methods, across both an Ethernet-based TCP/IP network, as well as using alarm-initiated modem dial out (based on PPP). Additional delivery media, including 802.1 la/b/g, cellular, RS-232, and Bluetooth®, are among the additional embodiments considered.

0031<figref idref="f0002">FIG. 3</figref> depicts an exemplary device definition file 302. The device definition file 302 includes query instructions 304, supplemental data 306, and conversion instructions 308. The query instructions 304 may be interpreted to make queries to an MIB associated with a device. A network management system may use these queries and communicate with a device using a management protocol to collect values associated with object identifiers (OIDs). For example, the network management system may query physical or environmental parameters such as temperatures, fan speeds and power quality parameters. In other examples, the parameters may relate to humidity, voltage, current, dew point, audio information, and motion.

0032The supplemental data 306 and the conversion instructions 308 may be used to augment the results of the queries. In one exemplary embodiment, the supplemental data 306 and the conversion instructions 308 may be integrated into the query instructions 304. The supplemental data 306 may include descriptions, descriptive names, and preset values. The conversion instructions 308 may permit the unit conversion of data acquired through the queries 304. Unit conversions may be performed on management data so that the network monitoring application displays the units as expected by the end-user. The conversion instructions 308 may also permit replacement of values and character strings, and conversion from integer values to floating point values.

0033The query instruction may take the form of one of three query types, among others: static (single item surfaced from an OID), table (enumerated items surfaced from an OID), and noQuery (supplemental data provided by the device definition file author). The static query type may be used to obtain data from any or all of the set of MIBs that may be implemented by a particular SNMP agent. If the MIB defines a data type for the raw value of the object being obtained then the network monitoring system may dynamically obtain that value. Alternately, the raw value data type may be statically defined on that line by the author of the device definition file, or by definition file generation software. The raw value of the object may take on several different types including integers, and strings, among others. An enumerated type may also be allowed where an integer returned by the agent can correspond to either a string or number defined in the enumeration portion of the query line. This query type may have the ability to perform calculations on the returned value.

0034The scale and precision may also be queryable from a static line entry for objects with numeric data types, if this information is so contained in the MIB. If this information is not in the MIB, again, the device definition file author, or definition file generation software, may designate a value for scale and precision of the object.

0035Descriptive information may be queried from the agent when it is available. The descriptive information may take on any data type such as integer or string, as well as an enumerated data type. Additional descriptive identification strings can be prepended and/or appended to the description of the object contained in the MIB, if any.

0036In one exemplary embodiment, the static query type may be formatted as follows: <ul id="ul0002" list-style="none" compact="compact"><li>static : sensorDataType : sensorDataTypeOid : rawValueDataType : rawValueOid : rawValueScaleDataType : rawValueScaleOid : rawValuePrecisionDataType : rawValuePrecisionOid : descriptionDataType : descriptionOid : prependDescriptionText : appendDescriptionText :</li><li>where: <ul id="ul0003" list-style="bullet" compact="compact"><li><sensorDataType> is the type of value or data contained in the <rawValueOid>, including 'DisplayString', 'Integer', 'am' (Amperes), 'dc' (Degrees Celsius), 'df' (Degrees Fahrenheit), 'fm' (Feet/Minute), 'ho' (Hours), 'hz', (Hertz), 'mi' (Minutes), 'mm', Meters/Minute), 'ot' (Other), 'pe' (Percent), 'rh' (Percent Relative Humidity), 'rp' (Revolutions per Minute, or RPMs), 'se' (Seconds), 'sp' (Special Enumerated Type), 't1', (time in HH:MM:SS:MS format), 't2' (time in HH:MM:SS format), 't3' (time in HH:MM format), 'ti' (Time Ticks), 'un' (Unknown), 'va' (Volts AC), 'vd' (Volts DC), 'vo' (Volts), 'wa' (Watts), among others. Additional types can be defined using the #define statement.</li><li><sensorDataTypeOID> is an optional OID specifiying the type of data contained in the raw value OID; only used where this type of data is enumerated.</li><li><rawValueDataType> is either blank or enum{x,xs, y,ys, z,zs} where x,xs, y,ys, z,zs are value-string pairs used to determine the actual value where the value from the rawValueDataType represents a finite number of enumerated values.</li><li><rawValueOid> the OID containing the unprocessed data.</li><li><rawValueScaleDataType> specifies the scale or magnitude of the raw data. It is either a power of 10, or an enum{} string representing a power of 10, as specified above. In the enum{} case, the value used to choose the scale is obtained from the following field OID.</li><li><rawValueScaleOid> specifies the OID used to determine the scale when that scale is an enumerated value from within the MIB.</li><li><rawValuePrecisionDataType> specifies the precision (display precision) to be used for the data type. It can also be an enum{} string, in which case the following field is used to choose the precision.</li><li><rawValuePrecisionOid> specifies the OID used to determine the precision when that precision is an enumerated value from within the MIB.</li><li><descriptionDataType> specifies the description, as an enum{} field, when the enum selection will be determined by the following OID.</li><li><descriptionOid> specifies the description of the data. It can either be a STRING value or an integer used to enumerate through the above descriptionDataType.</li><li><prependDescriptionText> specifies a string to be prepended to the resulting string (if any) from the combination of the descriptionOid and the descriptionDataType.</li><li><appendDescriptionText> specifies a string to be appended to the resulting string (if any) from the combination of the descriptionOid and the descriptionDataType.</li></ul></li></ul>

0037Examples of the static query type include: <ul id="ul0004" list-style="bullet" compact="compact"><li>static:dc:::1.3.6.1.4.1.5528.32.10.2:1::::::Temperature::</li><li>static:::DisplayString:1.3.6.1.4.1.674.10892.1.300.10.1.9.1:::::::Model::</li></ul>

0038Table query types may expand on the static queries by allowing the network system to apply a whole list of static queries to an index based table. Tabular MIB data is typically found in vendors' MIBS. The table query may be supplied with an object that when queried, the agent will return a list of numeric indices. These indices may then be appended to the original object and iterated through and applied to each following static entry in the table until a new entry is found in the device definition file, starting a new separate query. The static queries may take on the same form as described above in the static query type paragraph. Table queries may contain other tabular MIB objects in any of their fields. In this manner it is possible to pair object types, raw values, scales, precisions, and descriptions with data contained in separate individual tables in the MIB, by matching the index in the individual tables with the list of indices returned by the agent when the index object was queried.

0039In one exemplary embodiment, the table query type may be formatted as follows: <ul id="ul0005" list-style="none" compact="compact"><li>table : indexOid : sensorDataType : sensorDataTypeOid : rawValueDataType : rawValueOid : rawValueScaleDataType : rawValueScaleOid : rawValuePrecisionDataType : rawValuePrecisionOid : descriptionDataType : descriptionOid : prependDescriptionText : appendDescriptionText :</li><li>where: <ul id="ul0006" list-style="bullet" compact="compact"><li><indexOid> is the base SNMP OID of the index column for the table. Each value found in this column is enumerated through and used as an index for the other OID fields within the table line (and its continuation lines).</li><li><sensorDataType> is the type of value or data contained in the <rawValueOid>, including 'DisplayString', 'Integer', 'am' (Amperes), 'dc' (Degrees Celsius), 'df' (Degrees Fahrenheit), 'fm' (Feet/Minute), 'ho' (Hours), 'hz', (Hertz), 'mi' (Minutes), 'mm', Meters/Minute), 'ot' (Other), 'pe' (Percent), 'rh' (Percent Relative Humidity), 'rp' (Revolutions per Minute, or RPMs), 'se' (Seconds), 'sp' (Special Enumerated Type), 'tl', (time in HH:MM:SS:MS format), 't2' (time in HH:MM:SS format), 't3' (time in HH:MM format), 'ti' (Time Ticks), 'un' (Unknown), 'va' (Volts AC), 'vd' (Volts DC), 'vo' (Volts), 'wa' (Watts), among others. Additional types can be defined using the #define statement.</li><li><sensorDataTypeOID> is an optional OID specifying the type of data contained in the raw value OID; only used where this type of data is enumerated.</li><li><rawValueDataType> is either blank or enum{x,xs, y,ys, z,zs} where x,xs, y,ys, z,zs are value-string pairs used to determine the actual value where the value from the rawValueDataType represents a finite number of enumerated values.</li><li><rawValueOid> the OID containing the unprocessed data.</li><li><rawValueScaleDataType> specifies the scale or magnitude of the raw data. It is either a power of 10, or an enum{} string representing a power of 10, as specified above. In the enum{} case, the value used to choose the scale is obtained from the following field OID.</li><li><rawValueScaleOid> specifies the OID used to determine the scale when that scale is an enumerated value from within the MIB.</li><li><rawValuePrecisionDataType> specifies the precision (display precision) to be used for the data type. It can also be an enum{} string, in which case the following field is used to choose the precision.</li><li><rawValuePrecisionOid> specifies the OID used to determine the precision when that precision is an enumerated value from within the MIB.</li><li><descriptionDataType> specifies the description, as an enum{} field, when the enum selection will be determined by the following OID.</li><li><descriptionOid> specifies the description of the data. It can either be a STRING value or an integer used to enumerate through the above descriptionDataType.</li><li><prependDescriptionText> specifies a string to be prepended to the resulting string (if any) from the combination of the descriptionOid and the descriptionDataType.</li><li><appendDescriptionText> specifies a string to be appended to the resulting string (if any) from the combination of the descriptionOid and the descriptionDataType.</li></ul></li></ul>

0040Each table line may have continuation lines which have the format: <ul id="ul0007" list-style="none" compact="compact"><li>: sensorDataType : sensorDataTypeOid : rawValueDataType : rawValueOid : rawValueScaleDataType : rawValueScaleOid : rawValuePrecisionDataType : rawValuePrecisionOid : descriptionDataType : descriptionOid : prependDescriptionText : appendDescriptionText :</li><li>and where the fields have the same meanings as the primary table line.</li></ul>

0041Examples of the table query type include: <ul id="ul0008" list-style="none" compact="compact"><li>table:1.3.6.1.4.1.674.10892.1.700.20.1.2:dc:::1.3.6.1.4.1.674.10892.1.700.20.1.10:1:::::1.3.6. 1.4.1.674.10892.1.700.20.1.8::Upper Threshold:</li><li>:dc:::1.3.6.1.4.1.674.10892.1.700.20.1.6:1:::::1.3.6.1.4.1.674.10892.1.700.20.1.8:::</li><li>:dc:::1.3.6.1.4.1.674.10892.1.700.20.1.13:1:::::1.3.6.1.4.1.674.10892.1.700.20.1.8::Lower Threshold:</li><li>table:1.3.6.1.4.1.9.9.91.1.1.1.1.1:enum{1,ot,2,un,3,va,4,vd,5,am,6,wa,7,hz,8,dc,9,rh,10,rp,11, cm,12,tv,13,sp}:1.3.6.1.4.1.9.9.91.1.1.1.1.1::1.3.6.1.4.1.9.9.91.1.1.1.1.4:enum{1,-24,2,-21,3,-18,4,-15,5,-12,6,-9,7,-6,8,-3,9,0,10,3,11,6,12,9,13,12,14,18,15,15,16,21,17,24}:1.3.6.1.4.1.9.9.91.1.1.1.1.2::1.3.6.1.4.1.9</li><li>.9.91.1.1.1.1.3::1.3.6.1.2.1.47.1.1.1.1.2:::</li></ul>

0042The noQuery type may be used to publish additional data to the user interface that is desirable to be shown with the data being monitored, but the vendor failed to include in any MIB file implemented by the agent. The noQuery line may have the ability to specify the data type of the raw value to be displayed. The raw value may be in this case, of course, statically defined in the device definition file itself. In order for this data to qualify for being displayed with the other data being monitored from a specific agent, the noQuery type may specify an object in the agent's MIB. In one exemplary embodiment, the data will not be displayed if the agent does not return a value. This validates that the agent is one that the network system software knows this data should be displayed for, as long as a token object exists in its MIB. A description of the data being displayed may be specified as well in the device definition file. The noQuery type may be formatted as follows: <ul id="ul0009" list-style="none" compact="compact"><li>noQuery:<rawValueDataType>:<rawValue>:<requiredOid>:<optionalDescriptionText></li><li>where: <ul id="ul0010" list-style="bullet"><li><rawValueDataType> is the type of data to be displayed, including 'DisplayString', 'Integer', 'am' (Amperes), 'dc' (Degrees Celsius), 'df' (Degrees Fahrenheit), 'fin' (Feet/Minute), 'ho' (Hours), 'hz', (Hertz), 'mi' (Minutes), 'mm', Meters/Minute), 'ot' (Other), 'pe' (Percent), 'rh' (Percent Relative Humidity), 'rp' (Revolutions per Minute, or RPMs), 'se' (Seconds), 'sp' (Special Enumerated Type), 't1', (time in HH:MM:SS:MS format), 't2' (time in HH:MM:SS format), 't3' (time in HH:MM format), 'ti' (Time Ticks), 'un' (Unknown), 'va' (Volts AC), 'vd' (Volts DC), 'vo' (Volts), 'wa' (Watts). Additional types can be defined using the #define statement.</li><li><rawValue> is the value of the attribute</li><li><requiredOid> is the SNMP OID of an object that exist on the device in order for the attribute to be relevant</li><li><optionalDescriptionText> is a user-friendly label for the attribute</li></ul></li></ul>

0043Examples of the noQuery type include: <ul id="ul0011" list-style="bullet" compact="compact"><li>noQuery:DisplayString:NetBotz:1.3.6.1.4.1.5528.30.10.1:Vendor</li><li>noQuery:DisplayString:Compaq: 1.3.6.1.4.1.232.2.2.4.2:Vendor:</li></ul>

0044<figref idref="f0002">FIG. 4</figref> depicts a method for generating a device definition file (DDF). At step 402, the MIB is located for a device. This MIB may be provided by the vendor or acquired from the device. The MIB may then be parsed, as shown in step 404. The parsing may use a keyword search within the MIB to produce the initial DDF, which may then be modified by the DDF author with management information that is not derived programmatically. The keywords may be used to determine or surface the OIDs of interest, as shown in step 406. These OIDs may include different types of management data, such as environmental, performance, or inventory data.

0045Using the OIDs, query instructions may be written, as shown at step 408. If available, these query instructions may be correlated with other OIDs indicating description data, as shown at step 410. The query instructions may be static, table, or noQuery type instructions. The static query instructions may include a reference to the OID and a reference to the correlated description OID. A table query instruction may include a reference to a wildcard or MIB branch starting point. The table query may also include a reference to a correlated description OID starting point.

0046The data format of the values returned through queries associated with the query instructions may be determined, as shown at step 412. This data format may include characters, integers, and other formats. The data may be supplemented and converted. Integer values may be converted to floating point values. Integers may be replaced with descriptive strings and non-query data may be supplied as descriptions. The supplemental data and conversion codes may be added to the query instructions, as shown in step 414. A set of query instructions including OIDs, supplemental data, and conversion codes may then be saved as a device definition file, as shown in step 416.

0047The device definition file may be made manually or automatically. Other embodiments could utilize a graphical user-interface that builds the device definition file interactively, depending on the type of network management the user was interested in, or employ the internet to search known MIB repositories from specific network device vendors. Additional query types can be added to handle changes or additions to the MIB structure as needed.

0048<figref idref="f0003">FIG. 5</figref> depicts a method for providing access to data associated with a network device using a device definition file. A target device may be defined, as shown in step 502. An interface may be provided to a user to provide the address and other information associated with the device. A device definition file associated with the device may also be installed, as shown in step 504. Also, multiple device definition files may be installed. Multiple device definitions files may apply to a single device. Device definition files may be structured so that they are generic or cover a class of devices or similar devices from a specific vendor. Therefore a device definition file associated with the device may be installed prior to the definition of the target device.

0049In step 506, an initial query is made to the device to determine what portion of the device definition file(s) applies to the device. The device definition file may be written in a device specific form. In which case, the whole device definition file may be applicable. However, if the device definition file is written to cover a class of devices or devices with similar MIBs, a subset of the query instructions may apply or a wildcard reference to a branch in the MIB tree may return a different set of OIDs. The results of the initial queries may be stored as selected queries associated with the device, as shown in step 508.

0050Periodically or on-demand, the network monitoring system may query the device, as shown in step 510. The device may provide response data to the network monitoring system. The network monitoring system may interpret these results and provide the response data or interpreted response data to a user or user interface, as shown in step 512. The network monitoring system may convert units and numerical types, replace integers with corresponding entries in an enumerated list, replace descriptive names, and perform other functions in accordance with the device definition file to provide the interpreted response data to the user.

0051The response data may also be compared to threshold values, as shown in step 514. If the response data transgresses threshold values or violates rules associated with the threshold values, a notification may be sent to a user, as shown in step 516. This notification may be an email, page, text message, or other communications. Alternately, the notification may be a visual change or audio alarm encoded in an HTML page.

0052Using the descriptions provided by the DDF, an exemplary embodiment may provide an easy to use and friendly presentation of the desired SNMP data provided by the device. Unlike typical SNMP tools, the labels presented may be easy to read and have plain meaning, as opposed to the symbolic names dictated by the MIB syntax standard. In an exemplary embodiment, the user is presented with only relevant desired SNMP data, as opposed to all objects in a MIB. An example panel, derived from a DDF, is shown in <figref idref="f0004">FIG. 6</figref>.

0053In this example, several of the aspects of the interface are evident. The description labels are clear and descriptive, as opposed to being cryptic and symbolic. The values of many of the fields are floating point (a format not supported by SNMP natively). In the example shown in <figref idref="f0004">FIG. 6</figref>, the DDF provides a scaling factor to convert the raw data (which was an integer number of millivolts) to the more familiar unit (volts). By using the table query, coupled with the description OIDs, a number of different attributes (the various voltages instrumented by the vendor MIB) are presented in a clear and easy to identify manner, without requiring explicit definitions for each attribute.

0054The Network Monitor may also provide an interface for the definition of thresholds, as shown in <figref idref="f0004">FIG. 7</figref> and <figref idref="f0005">FIG. 8</figref>. This interface may provide support for a variety of logical comparison operations (greater-than, less-than, not-equal, etc), allowing a high degree of control over threshold definitions.

0055The user may also enter in custom OIDs, allowing support of additional, device-specific or application-specific instrumentation. As shown in <figref idref="f0005">FIG. 8</figref>, the user is enabled to enter in a description of the field, as well as being allowed to select between a variety of interpretations of the data (including scaling of the values).

0056The network monitoring system may also collect a variety of generic or device independent information, including various MIB-2 SNMP data and trace route information. The trace route information describes the routing of packets between the network monitoring system and the device being monitored. This information may be summarized, and presented for user viewing as shown in <figref idref="f0005">FIG. 9</figref>. This information may also be monitored, and alert notifications generated, when abnormal results are obtained. The routing information may also be included in any alarm notifications, which can prove invaluable when attempting to determine the source of a network outage since loss of contact with a device may mean the device has failed or the network between the network monitoring system and the device has failed.

0057Example device definition files are provided. The following device definition file is an example of a 3rd party equipment device definition file. <ul id="ul0012" list-style="none" compact="compact"><li>NBOCFV3F1.0 Example Corporation</li><li>static:::DisplayString:1.3.6.1.4.1.674.10892.1.300.10.1.8.1:::::::Vendor::</li><li>static:::DisplayString:1.3.6.1.4.1.674.10892.1.300.10.1.9.1:::::::Model::</li><li>table:1.3.6.1.4.1.674.10892.1.600.12.1.2:::enum{1,Other,2,Unknown,3,OK,4, Noncritical,5,Critical,6,Nonrecoverable}:1.3.6.1.4.1.674.10892.1.600.12.1.5:::::: 1.3.6.1.4.1.674.10892.1.600.12.1.8:::</li><li>:::enum{1,Other,2,Unknown,3,Full,4,Degraded,5,Lost,6,Not Redundant,7, Redundancy Offline}:1.3.6.1.4.1.674.10892.1.600.10.1.5::::::1.3.6.1.4.1.674.10892.1.600.10.1.7:::</li><li>table:1.3.6.1.4.1.674.10892.1.700.20.1.2:dc:::1.3.6.1.4.1.674.10892.1.700.20.1.10:1:::::1.3.6.1.4.1.67 4.10892.1.700.20.1.8::Upper Threshold:</li><li>:dc:::1.3.6.1.4.1.674.10892.1.700.20.1.6:1:::::1.3.6.1.4.1.674.10892.1.700.20.1.8:::</li><li>:dc:::1.3.6.1.4.1.674.10892.1.700.20.1.13:1:::::1.3.6.1.4.1.674.10892.1.700.20.1.8::Lower Threshold:</li><li>table:1.3.6.1.4.1.674.10892.1.700.12.1.2:rp:::1.3.6.1.4.1.674.10892.1.700.12.1.10::::::1.3.6.1.4.1.674. 10892.1.700.12.1.8::Upper Threshold:</li></ul><ul id="ul0013" list-style="none" compact="compact"><li>:rp:::1.3.6.1.4.1.674.10892.1.700.12.1.6::::::1.3.6.1.4.1.674.10892.1.700.12.1.8:::</li><li>:rp:::1.3.6.1.4.1.674.10892.1.700.12.1.13::::::1.3.6.1.4.1.674.10892.1.700.12.1.8::Lower Threshold:</li><li>table:1.3.6.1.4.1.674.10892.1.600.20.1.2:vo:::1.3.6.1.4.1.674.10892.1.600.20.1.10:3:::::1.3.6.1.4.1.67 4.10892.1.600.20.1.8::Upper Threshold:</li><li>:vo:::1.3.6.1.4.1.674.10892.1.600.20.1.6:3:::::1.3.6.1.4.1.674.10892.1.600.20.1.8:::</li><li>:vo:::1.3.6.1.4.1.674.10892.1.600.20.1.13:3:::::1.3.6.1.4.1.674.10892.1.600.20.1.8::Lower Threshold:</li><li>table:1.3.6.1.4.1.674.10892.1.600.30.1.2:am::: 1.3.6.1.4.1.674.10892.1.600.30.1.10:3:::::1.3.6.1.4.1.67 4.10892.1.600.30.1.8::Upper Threshold:</li><li>:am:::1.3.6.1.4.1.674.10892.1.600.30.1.6:3:::::1.3.6.1.4.1.674.10892.1.600.30.1.8::: :am:::1.3.6.1.4.1.674.10892.1.600.30.1.13:3:::::1.3.6.1.4.1.674.10892.1.60030.1.8::Lower Threshold:</li></ul> The following is an example of a network appliance device definition file. NBOCFV3F1.0 Company <ul id="ul0014" list-style="none" compact="compact"><li>noQuery:DisplayString:Company:1.3.6.1.4.1.5528.30.10.1 : Vendor:</li><li>static:::DisplayString:1.3.6.1.4.1.5528.32.10.1:::::::Model::</li><li>static:dc:::1.3.6.1.4.1.5528.32.10.2:1 ::::::Temperature::</li><li>static:rh:::1.3.6.1.4.1.5528.32.10.3:::::::Humidity::</li><li>static:mm:::1.3.6.1.4.1.5528.32.10.4:::::::Airflow::</li><li>static:::enum{0,No,1,Yes}:1.3.6.1.4.1.5528.32.10.5:::::::Audio Alarm::</li><li>static:::enum {1, Open,0,Closed}:1.3.6.1.4.1.5528.32.10.6 :::::::Door Switch::</li><li>static:dc:::1.3.6.1.4.1.5528.32.10.7:1:::::::Temperature Lower Threshold::</li><li>static:dc:::1.3.6.1.4.1.5528.32.10.8:1:::::::Temperature Upper Threshold::</li><li>static:rh:::1.3.6.1.4.1.5528.32.10.9:::::::Humidity Lower Threshold::</li><li>static:rh:::1.3.6.1.4.1.5528.32.10.10:::::::Humidity Upper Threshold::</li><li>static:::Integer: 1.3.6.1.4.1.5528.32.10.11:::::::Airflow Minutes Off Before Alarm::</li><li>static:::Integer:1.3.6.1.4.1.5528.32.10.12:::::::Seconds of Audio Before Alarm::</li><li>static:::enum{0,Alarm on Closed,1,Alarm on Open}:1.3.6.1.4.1.5528.32.10.13:::::::Door Switch Alarm Setting::</li><li>static:::Integer: 1.3.6.1.4.1.10.14:::::::Audio Sensor Sensitivity:</li><li>static:mm:::1.3.6.1.4.1.5528.32.10.15:::::::Airflow Lower Threshold::</li><li>static:::enum{0,No Motion,1,Motion Detected,-1,Not Licensed}:1.3.6.1.4.1.5528.32.10.16:::::::Camera Motion::</li><li>static:::Integer:1.3.6.1.4.1.5528.32.10.17:::::::Camera Motion Sensitivity (1-max, 15-min, 0-disabled)::</li></ul>

0058The above disclosed subject matter is to be considered illustrative, and not restrictive, and the appended claims are intended to cover all such modifications, enhancements, and other embodiments which fall within the scope of the present invention as defined by the claims.