使用智能代理进行网络设备的告警关联

为了解决集中式网络故障管理固有的缺陷，提出了一种基于ＳＮＭＰ网络管理环境、使用分布式智能代理进行网络设备告警关联的算法，算法分成３步：①智能代理驻留在设备本地，对设备发出的告警进行分类，作为相应协议对象的故障模型ＦＳＭ的输入，运行这个ＦＳＭ产生该协议对象的当前状态；②按照关联关系的形式化定义，尝试对状态不正常的协议对象进行关联；③为了给关联的结果增加一个可信度的度量，计算关联结果的信念，将关联的结

ALARM CORRELATION IN COMPUTER NETWORKS USING INTELLIGENT AGENTS

In order to avoid the intrinsic drawbacks of the centralized fault management in a computer network or a communication network, an alarm correlation algorithm using distributed intelligent agents in a SNMP network management environment is proposed in this paper. The algorithm can be divided into three steps. (1) The intelligent agent resides on a network device. Once it receives an alarm emitted by the device, it classifies the alarm according to its meaning and its severity level, and then inputs the result to a finite state machine (FSM) of the fault model of a certain protocol object. Next, it runs the FSM in order to establish the current state of the protocol object. (2) Using the formal definition of a correlation relation, the intelligent agent tries to correlate the protocol objects whose current states are abnormal. (3) In order to add a reliability measurement to the correlation result, the intelligent agent computes a belief of the correlation result protocol object, and then reports the object and its belief to a network manager. This algorithm decomposes the complexity of the alarm correlation and fault identification, so it is of great benefit to realize real time and automated network management.