故障管理论文：面向故障诊断的网络事 件关联研究.docVIP

故障管理论文：面向故障诊断的网络事件关联研究 【中文摘要】随着计算机技术与通信技术的发展,当今网络呈现规模庞大,结构复杂的特点,对网络采取有效的管理变得至关重要。故障管理在网络管理中起着重要的角色,而故障诊断又是故障管理的重中之重,因此良好的故障诊断方法对网络的管理尤为重要。针对网络中发生故障以后,因告警信息繁多而无法快速的找到故障源的这一问题,本文对于不同的阶段,采取不同的诊断方法,提出了使用网络拓扑与基于事例推理的事件关联技术来进行故障诊断。首先使用简单网络管理协议,获取到网络的拓扑结构,然后根据被管对象之间的关系,建立设备之间的关联表,读取被管对象在管理信息库中之前的一段时间的信息,参照关联表有选择性的进行告警信息的过滤,消除告警中冗余、误报的告警信息。其次将过滤后的告警信息送入到基于事例推理系统的输入端,根据告警中错误率比重最大的类型在事例库中查找同种类型的事例,找出与当前告警相似的事例,然后依据产生告警的对象的信息计算它与当前相似事例之间的距离,取出与当前告警距离最小的事例的解作为当前告警解除的方法,如果成功解除,则将其作为新的事例存入到事例库中,以便下次检索。最后通过实验仿真对使用网络拓扑与基于事例推理的故障诊断的可行性进行验证,能够将过滤告警时间缩短到常用方法的44%,减少因分析冗余告警所浪费的时间,为及时的解除故障争取宝贵的时间,实验证明该方法是有效的。 【英文摘要】With the development of computer science and communications technology, today’s network rendering large, complex features, it’s important to take effective management to network. Network fault management takes important role in the network management. Fault diagnosis is most important in fault management. Therefore better fault diagnosis method is particularly important for network management. After fault happened in network, because of so many alarms that can抰 as soon as possible to find the fault source , the paper take different diagnosis in for different stages and proposed use the network topology and event correlation based on cased-based reasoning for fault diagnosis techniques.First , use Simple Network Management Protocol to get the network topology, according to the relationship of the managed objects, to establish the association table between devices ,read the managed object抯 over time information in the MIB, according to the the associated table to filtering alarm with selective method .Eliminate the redundant alarms、false alarm information.Secondly,take the alarms which has been filter in to the cased-based reasoning system as input , in accordance with the largest proportion of the alarm to find same type case in the case library, find the alarm which similar case with the current alarm, calculated the distance between the current similar cases according to th